Valid from 2 September 2026.
This page explains what personal data we collect when you use wakiro.id, what it is used for, who receives it, how long we retain it, and what rights you have over it. We have written this in accordance with Law Number 27 of 2022 concerning Personal Data Protection.
Personal Data Controller:
Wakiro — Surya Harmonia
Bekasi City 17425, West Java, Indonesia
Email: info@wakiro.id · Phone/WhatsApp: +62 859 7396 7200
1. Data we collect
a. Data that you provide yourself
- First name and last name
- Email address
- Phone number and WhatsApp number
- Complete shipping address including postal code
- Account usernames and passwords — passwords are stored in scrambled form, never in their original form, and cannot be read by us.
- Fill out your orders, order notes and purchase history
- Fill in the message you send via the contact form or email.
- Registration data if you apply as a reseller or partner
b. Data collected automatically
- IP address and approximate location based on that address
- The type of device, operating system, and browser you are using
- Pages you open, time of visit, and referring page
- Cookies and similar markers — details in section 6
c. Data on abandoned carts
If you enter your name, email address, or phone number on the checkout page but don't complete your order, that data remains in our system. We use it for one purpose only: to remind you that you have an outstanding order. You can request that this data be deleted at any time by info@wakiro.id.
d. Data that we never store
We No We store your credit or debit card numbers, PINs, OTP codes, account numbers, and banking credentials. The entire payment process takes place on our payment provider's system, DOKU, which is PCI DSS-certified and licensed by Bank Indonesia. All we receive back from them is a confirmation of whether a payment was successful or failed.
2. What is your data used for?
| Requirements | Processing basis |
|---|---|
| Process, pack, and ship your order | Execution of the sale and purchase agreement |
| Send order and payment notifications via email and WhatsApp | Execution of the sale and purchase agreement |
| Answering your questions and handling your complaints | Execution of the sale and purchase agreement |
| Fulfilling bookkeeping and tax obligations | Legal obligations |
| Send promotional information, offers, and educational articles | Your consent, which can be withdrawn at any time |
| Maintaining site security and preventing abuse | Legitimate interests |
| Calculate visitor statistics to improve services | Legitimate interests |
We do not make automated decisions that have legal consequences for you.
3. Who receives your data
We never sell your personal data to anyone. Data is only shared with service providers that we truly need to fulfill your order, to the extent necessary:
| Recipient | Data received | What for |
|---|---|---|
| DOKU | Name, email, phone number, value and order details | Processing payments |
| KiriminAja and the courier company you choose | Name, telephone number, shipping address | Delivering your package |
| Fonte | WhatsApp number and notification message content | Send order notifications via WhatsApp |
| Omnisend | Name, email, phone number, purchase history | Sending service and promotional emails |
| Email delivery provider | Email and message content | Send notification emails and receipts |
| Google (Analytics and Search Console) | Visit data in the form of statistics and cookie identifiers | Visitor statistics |
| Hostinger | All data stored on the site | Where our site and database are located |
We may also disclose data when required by law or upon the legitimate request of law enforcement.
Processing outside Indonesia
Some of the providers above operate data centers outside of Indonesia. In such cases, we ensure that the recipient implements data protection measures equivalent to those required by Law Number 27 of 2022, as stipulated in Article 56 of that law.
4. How long is the data stored?
- Order and transaction data — at least 10 years, following company document retention and taxation provisions
- Customer account data — as long as your account is active, plus 12 months after the last activity
- Abandoned cart data — maximum 90 days
- Reseller and partner registration data — for the duration of the partnership, plus 24 months thereafter
- System logs and backups — maximum 12 months
- Data for promotion — until you withdraw consent
After that period ends, the data is deleted or anonymized so that it can no longer be associated with you.
5. Your rights over your personal data
Based on Law Number 27 of 2022, you have the right to:
- Obtain information about your personal data that we process and the purposes for which we process it
- Request access and a copy of your personal data
- Request correction of data that is incorrect or no longer up to date
- Request deletion of your personal data
- Withdraw consent you have previously given
- Object to certain processing
- Requesting a delay or restriction of processing
- Request your data in a form that can be transferred to another provider
- Claiming compensation for breach of your personal data protection
To exercise these rights, send a request to info@wakiro.id from the email address registered with your account or order. We respond within 3 x 24 hours of receiving the request and will complete it within 14 business days. This request is free of charge.
Please note: We can only delete order data that is still subject to accounting and tax obligations after the mandatory retention period has expired. Beyond that time, we will honor deletion requests.
6. Cookie
- Required cookies — maintains shopping cart contents, account logins, and payment processing. Without this, the site cannot function.
- Performance cookies — use the cache system so that pages open faster.
- Preference cookies — remembering your language choice.
- Analytical cookies — owned by Google, to calculate the number and behavior of visitors in the aggregate.
You can delete or block cookies through your browser settings. If mandatory cookies are blocked, the shopping cart and checkout process will not work properly.
7. WhatsApp and email notifications
Each order triggers automatic notifications to the email and WhatsApp number you provided when placing the order: order received, payment received, and order completed. These notifications are part of the ordering service, not promotional, so they are sent while your order is in progress. Promotional messages are separate and only sent if you agree to them.
8. Data security
- All site traffic is encrypted with HTTPS
- Passwords are stored in one-way scrambled form
- Access to the database and management panel is restricted to authorized administrators only.
- Data backups are made periodically and stored for a limited time.
- Payment data never passes through or resides on our servers.
If there is a failure in protecting personal data, we will notify you and the authorized institution no later than 3 x 24 hours after we become aware of it, as required by Article 46 of Law Number 27 of 2022.
9. Minors
Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children. If you are a parent or guardian and learn that your child has provided us with personal data, please contact us. info@wakiro.id and we will delete the data.
10. Changes to this policy
We may update this policy if our services or legal provisions change. The effective date at the top of the page always indicates the most recent version. For changes that significantly impact you, we will notify you via email or a notice on our website.
11. Contact us and file a complaint
For questions, rights requests, or objections regarding your personal data:
Wakiro — Surya Harmonia
Bekasi City 17425, West Java, Indonesia
Email: info@wakiro.id
Phone and WhatsApp: +62 859 7396 7200
If our answer is not satisfactory, you have the right to file a complaint with the authorized agency in the field of personal data protection in Indonesia.