Privacy Policy
Tanggal Berlaku: 17 April 2025
Labamu Privacy Policy
This Privacy Policy (the "Policy") is issued by PT Labamu Sejahtera Indonesia ("Labamu", "We", "Us", "Our" or "Us"), a limited liability company incorporated in Indonesia and domiciled in Tangerang Regency. This Policy describes the Processing of Personal Data from You, especially when You as a User create a service membership Account in accessing and using Our services or facilities contained in the Labamu mobile application ("Application") and websites https://labamu.co.id/ provided and maintained by Urban, which also includes Our services connected to and or provided by Third Parties ("Services").
Any information you provide to a Third-Party service provider is subject to the privacy and security policies of each Third-Party. We have no control over the entire content, privacy and security policies of Third Party services or Third Party sites and/or linked services of the Labamu Service. This Policy does not include links to Our Services related to Third Party services. We encourage you to carefully read and study the Third Party's terms and conditions, privacy and security policies regarding the Processing of Personal Data from you by us.
By agreeing to this Policy, you have read, understood and given clear and unambiguous consent to Labamu to carry out the Processing of Personal Data from you as set out in this Policy, and are subject to and bound by all terms and agree to this Policy.
1. Definition
In this Policy, including in the Introduction, unless the context or subject matter specifies otherwise, the following terms have the meanings set forth below:
a. You are a user, and/or visitor who accesses and/or uses Our Services whether you have registered and have an account or do not have an account;
b. Your customer means the customers who shop and interact with Labamu-powered businesses
c. Account means your profile obtained after you register and/or register through the Urban Services, including verified or unverified profiles;
d. Application is a mobile application that We manage, operate, and provide under the trademark "LABAMU";
e. Personal Data is data about you that is identified or identifiable separately or combined with other information either directly or indirectly through electronic or non-electronic systems;
f. Business Data is identity data that includes business name, contact, email address, phone number, business category, business address, business location photo, and operating profit.
g. Features are existing or upcoming service products in Labamu's Services.
h. KYC is Know Your Customer, which is an identity verification process that is carried out to recognize your identity data connected to a Third Party in carrying out the verification and validation process related to the Account data that you have registered (registered) on the Service.
i. Services means https://labamu.co.id/ websites and Applications, along with the information, Features and services contained therein, apply to You as a user of the Services We provide;
j. Processing of Personal Data means the processing of Personal Data carried out by Us, which includes (i) obtaining and collecting; (ii) processing and analysis; (iii) storage; (iv) improvements and updates; (v) appearance, announcement, transfer, dissemination or disclosure; and/or (vi) removal or destruction.
k. Personal Data Controller means any person, public body, and international organization acting individually or jointly in determining the purpose and exercising control over the Processing of Personal Data.
l. Third Parties are selected parties in cooperating in supporting the implementation of the Services We provide to You, namely:
a. KYC supporting partners are selected partners or third parties, namely PT Indonesia Digital Identity as an Electronic Certification Provider (PSrE), which is recognized by the Ministry of Communication and Information Technology (Kominfo) for the issuance and management of legally binding Electronic Certificates and Electronic Signatures to individuals and institutions, which are validated against the database of the identity issuer concerned, in this case the database KTP is managed by the Directorate General of Population and Civil Registration (Dukcapil);
b. BPJS Employment is a partner or third party that collaborates with Labamu as the organizer of the social security program with benefit programs in the form of Work Accident Insurance (JKK) and Death Insurance (JKM);
c. PT Bank Nationalnobu Tbk is a partner or third party engaged in the financial sector;
d. PT Tunas Digital Indonesia is a partner or third party as a provider of applications for various HR, Employee, and Business Operations needs.
e. Other parties appointed to cooperate with us in supporting and assisting in the implementation of our services from time to time.
m. Terms and Conditions means the terms and conditions of all use of the Urbanhire application service available on the Service.
2. Collection and Use of Personal Data
2.1 When you access Our Services and/or use Our Services, you have indirectly provided your Personal Data to us for us to collect. In addition, the collection of your Personal Data also occurs when you:
a. access and/or use the Features on the Services;
b. register and/or create an account on the Service that makes you enter your Personal Data in the form of personal identity data such as but not limited to name, address, email address, telephone number, place and date of birth, identity card information (KTP, SIM, Passport/NPWP/KITAS), self-photo, personal video, username, account passwords, account information, financial information, business and/or business information, biometric data you provide when using the Services;
c. respond to surveys, send reviews, questions, messages, criticisms and/or suggestions and contact Us through the means of communication provided by Us;
d. following and/or liking our social media pages;
e. make payments and/or billing for any transaction data information such as bills, products and/or services purchased;
f. grant permission to access any Features used on your device; or
g. provide access to cookies and related technologies such as public information containing Personal Data and/or online news published on social media.
2.2 Your customers’ personal data may also be collected when you interact with them through Labamu’s products, such as making payments at your establishment, receiving an invoice from you, or voluntarily providing information for you to provide them with the necessary services which may be facilitated by Labamu’s product. Your customers’ data may include:
a. Customer Transaction Information: When Labamu is used to facilitate or record payments to you, we collect information on the names of the transacting parties, a description of the transactions which may include item-level data, the payment and/or transfer amounts, billing and shipping information, and the payment methods used to complete the transaction.
b. Information that you or your customers provide: Information that your customers voluntarily provide to you, or that you have input into the Labamu application in order to facilitate services to your customers which may or may not involve Labamu.
2.3 It is your responsibility to obtain any necessary permission for us to use Your Customers’ Data in the manner established in this Privacy Policy, so that we can provide you with the Services requested by you.
2.4 In connection with this, you represent and warrant that the Personal Data you have entered into the Service is true and accurate. You are also responsible for the Personal Data that has been submitted to Us, including exempting Us from all demands, lawsuits, both criminal and civil.
2.5 Users are obliged to protect their personal data from damage or loss, including, but not limited to, efforts to prevent their Personal Data from being misused by others.
2.6 We reserve the right at any time to verify and/or update and/or update your Personal Data without force and in a conscious state. However, if in the event that You have not verified and/or updated and/or updated data, then We will not allow You to access the Feature optimally temporarily/permanently.
2.7 In the event of a verification and/or update and/or update process of your Personal Data, you authorize Labamu to forward your Personal Data to a Third Party that we appoint as Labamu's partner for the purposes of Processing your Personal Data.
2.8 Labamu, together with the Third Parties appointed by us, in this case acts as the Personal Data Controller so that it has the right to carry out the Processing of your Personal Data in accordance with the provisions of laws and regulations.
3. Labamu Staf
3.1 You agree that we will collect and use your personal data in accordance with the provisions of laws and regulations.
3.2 What personal data we collect: if you are the account owner, manager, administration (collectively referred to as users) who use our services. You will be required to register and provide the personal data requested by us, including your full name, email address, and telephone number, NPWP, ID card, Bank Account, other detailed requirements related to employees (including but not limited to KTP, employee NPWP, Bank Account, job title, profile photo, Payslip, etc.) and other administration.
4. Purpose of Use of Personal Data
4.1 The Personal Data that you have provided, will be fully used for your benefit in accordance with this Policy and the applicable laws in Indonesia, including in the following activities:
a. Processing Personal Data from you as necessary in accessing the Services and/or using the Features;
b. Processing of your Personal Data for KYC needs and activities;
c. for statistical purposes, particularly in evaluating the performance of Our Services;
d. assist Us in providing Services that are in accordance with Your interests;
e. transmit Personal Data from You to selected Third Parties in accordance with existing or future Features of Our Services;
f. developing Services and/or Features to improve Our services in the context of business development and marketing strategies, including for the purposes of research, analysis, development, and testing of product security and ease of use of the Services;
g. process and facilitate orders and payment transactions made by you, including as applicable, transactions made through payment cards, accounts, and other payment methods available in the Features;
h. investigate suspicious transactions and/or are indicated to contain elements of fraud, fraud, embezzlement and/or other violations of the Terms and Conditions and take necessary actions to be followed up; or
i. for any other relevant purpose and for as long as necessary in connection with your access to the use of the Services under applicable law.
4.2 You have the right not to provide Your Personal Data to Us, but as a result, We may not be able to provide comprehensive access to the Features contained in the Services. However, if You understand that the Features in the Service require a verification and/or update and/or update process of Personal Data, then You are obliged to give consent to the use, utilization and/or disclosure of Your Personal Data to Us without coercion and in a conscious state.
5. Our Cookie Policy
5.1 A cookie is a collection of information or data that is stored by your browser (page) when you perform activities through the internet network.
5.2 We may use cookies and automatically collect information to:
a. personalize our Services, such as remembering information about you so that you don't have to return it during your visit or the next time you visit the Services;
b. provide customized ads, content, and information;
c. monitor and analyze the effectiveness of the Services and the marketing activities of Third Parties;
d. monitor aggregate metrics of site usage, such as the number of visitors and pages accessed; and
e. track your entries, posts, and statuses in promotions or other activities on the Services.
5.3 In providing our Services and Third Party Services through our Services, we use cookies as follows:
a. Cookies are important.
These cookies enable the core functions of the Services, such as security, network management, and accessibility.
b. Analytics cookies.
These cookies allow us to improve our Services by collecting and reporting information about how you interact with the Services and the functionality within them.
These cookies interact with your device or computer in a way that does not directly identify you because they will only generate aggregate data.
c. Third-party cookies. These cookies are associated with search engines, analytics service providers, social media, and advertising companies.
Please refer to the "Help" feature in your browser to learn the proper way to change your cookie settings . Please note that if you delete or opt out of receiving cookies from the Services, you may not be able to take full advantage of Our Service Features. We may also use Third-Party cookies on our Services. If you choose to enable the browser's "do not track" feature or other similar transmissions that indicate a request to disable online tracking of users who visit our Services or who use our Services, you acknowledge that there will be features of the Services that you may not be able to use.
5.4 When you use the Services, we may send one or more cookies to a small text file containing a string of alphanumeric characters to your device. We may use session cookies and persistent cookies. Session cookies disappear after you close your browser. Persistent cookies will remain after you close your browser and may be used by your browser on your next visit to the Service.
We may also automatically record certain information from your device using various types of technology, including "clear gifs" or "web beacons". This automatically collected information may include your IP address and address, the identity of other devices, browser and/or device type, the web pages you visited before and/or after you used the Services, the pages or other content you viewed or interacted with with the Services, and information regarding the date and time when you visited, accessed, or used the Services. We may also use these technologies to collect information about your interactions with email messages, such as whether you open, click, or forward the message. This information is collected from all Users, and may be linked to other information about you.
For more information about cookies in general and how to delete or refuse them, please visit www.allaboutcookies.org.
6. Aggregate Data
Sometimes We conduct research on customer demographics, interests, and behavior based on personal information from You and other information provided to us, which may be aggregated and analyzed and shared with our affiliates, agents, and business partners. We process this information in a way that does not directly identify you as it will only result in aggregate data.
7. Data Sharing Policy
Except as described in this Policy, we will not disclose information about you that we collect on the Services to Third Parties without your consent. We only share Personal Data from you in the manner described below with the relevant Service providers or Third Party processors.
We understand the importance of maintaining the security and confidentiality of your Personal Data and we have implemented appropriate safeguards based on applicable laws and regulations to ensure that your Personal Data is properly protected.
Except as described below, you will receive a request for consent from us when we share Personal Data from you with a Third Party, where you have the option to share or object to the sharing of such Personal Data with the Third Party.
The following are the areas where we share your Personal Data:
a. We share Personal Data with Third Parties, including financial institutions that process disbursements or Third Party web hosts, who facilitate the delivery of the Services. These Third Parties may have access to or process information about you as part of providing those services to us. Broadly speaking, we limit the information we provide to only information that is reasonably necessary for the service provider to perform its functions, and we have asked them to agree to maintain the confidentiality of such information. Third Parties agree to use such Personal Data only for the purposes used by us, including:
i. comply with the privacy principles or other mechanisms permitted by applicable law regarding the transfer and processing of Personal Data; or
ii. agree to provide reasonable protection of Personal Data in the protection of the provisions set out in this Privacy Policy.
b. We may disclose your information to your company, in accordance with the information you entered during registration, to enable us to verify your identity in order to provide the Services to you;
c. We may disclose Personal Data from you if required by law or when we believe in good faith that such action is necessary to comply with applicable laws and regulations, court orders, court decisions or other government decisions;
d. We also reserve the right to disclose Personal Data from you that we believe in good faith, appropriate or necessary to:
i. take precautions against potentially unlawful acts; or
ii. protect Us or others from fraudulent or unlawful activities; or
iii. identify and defend against claims or allegations; or
iv. protect the security or integrity of the Services and any facilities or equipment used to provide the Services; or
v. protect Our property or other legal rights (including, but not limited to, the enforcement of Our agreements), or the rights, property, or safety of others.
e. Information or Personal Data about our users may be disclosed or transferred to an acquirer, successor, or assignee as part of a merger, acquisition, debt financing, sale of wealth, or similar transaction, or in the event of a bankruptcy, bankruptcy, or curatorial event in which such information is transferred to one or more Third Parties as one of our assets;
f. We may provide certain aggregated, auto-aggregated, or non-identifying information to third parties for a variety of purposes, including:
i. compliance with reporting obligations;
ii. for business or marketing purposes; or
iii. to help learn about our users' interests, habits, and usage patterns for certain programs, content, services, advertising, promotions, and/or functionality available through the Services;
g. Your Personal Data, which we believe in good faith is stored in Indonesia and outside the territory of Indonesia in this case Singapore, is used for your benefit in accordance with this Policy and any applicable regulations or laws in Indonesia.
8. Your rights
You have choices regarding the collection, use, and sharing of Personal Data from you in accordance with the applicable laws in Indonesia. Please understand that if you decide not to provide the Personal Data We request, you may not be able to access any Features within Our Services.
If you wish to access or change the Personal Data that you have provided to Us, you may do so by contacting us at cs@labamu.co.id. In your request, please write "Personal Information" in the subject or body of the email.
Please note that although your changes will remain reflected in the active database for a period of time, we may retain all information you submit for backup, archiving, fraud and abuse prevention, analytics, compliance with legal obligations and we believe that we have a legitimate reason to do so.
9. Marketing
Please note that by agreeing to this Privacy Policy, you have also agreed to receive marketing emails to your registered email address in Our Service system.
You can unsubscribe at any time by following the instructions contained in the marketing emails you receive. You may also withdraw your consent regarding the sending of marketing emails to you by submitting your request by email at cs@labamu.co.id. In your request, please write "unsubscribe" in the subject and/or body of the email.
Please note, if You withdraw Your consent to receive marketing emails from Us or change the nature or frequency of promotional communications you receive from Us, such processing may take up to ten (10) business days for Us to process Your request, and until the end of such period, You may still receive emails marketing from us. You will continue to receive administrative messages from Us regarding the Services in the event that you opt out of receiving marketing emails from Us.
10. Security of Your Information
We maintain physical, technical, and administrative safeguards to protect Personal Data from you. Our servers are located in Indonesia and Singapore to provide the Services to you, we may store, process and transmit information in Indonesia. Personal information may also be stored locally on the device you use to access the Service.
When you provide Personal Data to us, your information is protected both online and offline. Wherever we collect Personal Data, it is encrypted and transmitted to us in a secure manner. While we use encryption to protect Personal Data transmitted online, we also protect your information offline. We store Personal Data from you using secure encryption technology and on computers/servers stored in a secure environment.
Please be assured that we have appropriate internal policies regarding standard operating procedures in handling Personal Data from you. Only employees who need access to such information to perform certain jobs (e.g., to provide customer service) are granted access to Personal Data. In addition, we are committed to taking decisive action to uphold the privacy responsibility of our employees.
Please note, although We have taken the measures We have implemented to protect Your data, data transfer over the internet or other open networks is never completely secure and there is a risk that Your Personal Data may be accessed by unauthorized third parties. Therefore, the information and/or Personal Data we receive will be encrypted.
11. Personal Data Security Failure
In the event of a failure to protect Personal Data, we will promptly notify the person whose personal data security has been breached in accordance with the notification procedures set out in this Privacy Policy and applicable law.
12. Data Storage and Deletion
We only retain the personal information collected for a limited period of time for as long as we need it to fulfill the purposes for which it was collected, unless required by law. All data in our Services is retained for five (5) years from the date of acquisition, or any other longer period that does not conflict with applicable laws and regulations. Customers can request deletion of data, but certain transaction information will be retained for legal purposes. After five (5) years, personal information is deleted but non-specific transaction-related information is retained.
If you would like questions about what, if any, personal information we hold about you or request deletion of any personal information you have submitted to us, please contact us at cs@labamu.co.id. In your request, please write "Personal Information" in the subject or body of the Email.
Labamu, accompanying logos, product displays, and all other intellectual property used in the Services are owned by Labamu.
13. Limitation of Liability
13.1 We are not responsible for the exchange and/or provision of your Personal Data by yourself, including those you do through the Services. You are responsible for security by taking appropriate security measures in safeguarding your Personal Data such as restricting access, creating strong passwords, maintaining passwords and/or one-time passwords (OTPs) that you have.
13.2 We are only responsible for the protection and security of your Personal Data limited to the data stored in the systems developed and maintained by us, and we may at any time take and take necessary measures to safeguard and protect your Personal Data. By continuing to access the Service and use our Features or Services, You release Us from claims, losses, demands and lawsuits that may occur and arise due to elements of negligence committed by You, which You are obliged to maintain in accordance with point 12.1 above.
14. Advertisement
14.1 It is our policy to provide notices, whether legal or for marketing or other related business purposes, to you through:
(a) email notifications;
(b) written notice or hard copy; or
(c) through publication on our Services, as determined by us in our sole discretion.
14.2 We reserve the right to determine the form and manner of providing notice to you, to the extent permitted by applicable laws and regulations.
14.3 With respect to notifications in the event of a security failure, you hereby agree that we may send you notices electronically. We will send such notice by registered email/flagged or by other electronic means, which means that we will ensure that you have received such notice.
15. Changes and Updates to the Privacy Policy
The Privacy Policy may be amended from time to time. Changes can be submitted in advance in accordance with Our Terms and Conditions of Labamu or by other means as long as they do not conflict with the provisions of the law. However, Users are expected to check this page periodically for any changes
If you have any questions or comments about this privacy policy, please contact us by Email at cs@labamu.co.id and please note that you write about the "Privacy Policy" in the subject or body of the Email, as follows:
a. statements or conduct of any third party on the Service; or
b. other issues related to the Services.
16. Language
For ease of understanding, this Privacy Policy is written in Indonesian.
