Privacy Policy

1. Our two roles

We handle personal data in two different roles, and your rights are exercised differently in each.

As controller. For visitors to this website, people who contact us, and contacts at our clients and prospects, Pipeline decides why and how the data is processed. This policy applies in full.

As processor. We run campaigns, landing pages, WhatsApp conversations and CRM for residential property developers. When you inquire about a developer’s project, that developer is the controller of your data and we process it only on their instructions. Their own privacy policy applies; if you send a request to us, we pass it to the developer and help them answer it.

2. Data we collect

Data you give us, for example through our audit and consultation form, email or WhatsApp:

• Name, company and role
• Email address and WhatsApp or phone number
• Project details such as location, type, price range, number of units and stage
• The content of your messages

Data collected automatically when you use the site: IP address, approximate location derived from it, browser and device type, pages viewed, referring site, and identifiers set by cookies and tags. We do not collect precise GPS location.

Data from third parties, such as lead forms on Meta, Google or LinkedIn that you submit to us, and campaign data from advertising platforms.

We do not intend to collect specific personal data as defined in UU PDP Art. 4(2), such as health, biometric, genetic, criminal record, children’s or personal financial data. Please do not send it to us.

3. How we use data and our legal basis

4. Cookies and tracking

We use cookies and similar tags to measure how the site is used and how our advertising performs, and to show our ads to people who visited the site.

You can block or delete cookies in your browser settings. Blocking them does not stop you from using the site, but some measurement will no longer work.

5. WhatsApp and Meta platform data

Pipeline is a Meta Tech Provider. With a client’s permission, we connect and operate their WhatsApp Business account, together with ChatAgent, a separate company that provides the WhatsApp lead-management platform.

For data we receive through the WhatsApp Business Platform or other Meta products:

• We process it only for the client it belongs to and on that client’s instructions.
• We do not use it for our own purposes, and we do not combine one client’s data with another’s.
• We do not build or enrich profiles of individual WhatsApp users beyond the conversation itself.
• We do not sell, license or share it, including in aggregated, anonymised or derived form, except with sub-processors who help us deliver the service.
• We do not use it, and do not allow others to use it, to train artificial-intelligence models.

6. Sharing and sub-processors

We do not sell personal data. We share it only with companies that process it for us under a contract, with authorities when the law requires it, and with a buyer or successor if our business is merged or sold.

7. International transfers

Several of the providers above process data outside Indonesia. In line with UU PDP Art. 56, we use providers whose protection is equal to or higher than UU PDP, or we put binding contractual safeguards in place. Where neither is possible, we ask for your consent.

8. Aggregated insights and benchmarks

To improve our work and publish industry benchmarks, we may use funnel metrics such as cost per qualified lead, site-visit rates and booking rates. We only do this when the client has agreed, and only with de-identified, aggregated numbers in which no person or project can be identified.

Benchmarks never use message content or data from the WhatsApp Business Platform.

9. How long we keep data

• Inquiries and prospect contacts: up to 24 months after our last contact with you.
• Data we process for a client: for the length of the contract, then returned or deleted within 30 days unless the client instructs otherwise.
• Analytics data: according to each tool’s settings; Google Analytics keeps event data for 14 months.
• Contracts, invoices and tax records: as long as Indonesian law requires.

When data is no longer needed, we delete or anonymise it.

10. Security and data breaches

We protect data with access controls, encryption in transit, two-factor authentication on the platforms we use, and by limiting access to the people who need it.

If a personal data breach occurs, we notify affected people and the data protection authority in writing within 3 × 24 hours, as required by UU PDP Art. 46, stating what data was involved, when and how, and what we are doing about it.

11. Your rights

Under UU PDP (Art. 5–13) you have the right to:

• Know who processes your data, why and on what basis
• Correct or complete your data
• Access and receive a copy of your data
• Have your data deleted or stop its processing
• Withdraw your consent
• Object to decisions made solely by automated processing, including profiling
• Restrict or delay processing
• Receive your data in a usable format and send it to another controller
• Claim compensation for a breach of your rights

To use these rights, email analytics@pipeline.co.id. We may need to confirm your identity. We act on access and correction requests within 3 × 24 hours, as UU PDP requires, and answer other requests as quickly as possible.

12. Data deletion requests

You can ask us to delete personal data we hold about you, including data received through WhatsApp, Facebook or Instagram.

• Email analytics@pipeline.co.id with the subject “Data deletion request”.
• Include the name, email address or WhatsApp number we would know you by.
• We confirm receipt, verify the request, and delete the data from our systems and our sub-processors’ systems, except data we must keep by law.
• If the data belongs to a developer client, we forward your request to them and delete it on their instruction.

We confirm by email once deletion is complete.

13. Children

Our services are for businesses and are not directed at children under 18. If we learn that we hold a child’s data without parental consent, we delete it.

14. Changes to this policy

We update this policy when our services or the law change. The date at the top shows the latest version. For significant changes, we will post a notice on this site.

15. Contact us

PT Pipeline Marketing Teknologi

Email

analytics@pipeline.co.id

Address

Centennial Tower 29th Fl. Unit D-F, Jl. Jend. Gatot Subroto Kav. 24-25, Jakarta 12930

Phone

+62 857 2500 0098