Privacy Policy

PT Peduli Alam dan Manusia, trading as melloculab ("melloculab", "we", "us", or "our"), is the operator of the website and online store at melloculab.online (the "Service"). Our registered office is at Jl. Bangka Raya No.42A, Pela Mampang, Jakarta Selatan, Indonesia.

This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal data when you visit our website, place an order, create an account, or otherwise interact with the Service.

This policy applies to all personal data processed in connection with the Service and is issued in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection ("UU PDP").

We collect the following categories of personal data when you place an order, create an account, or contact us:

Identity data — your full name.

Contact data — your email address and phone or WhatsApp number.

Delivery data — your shipping address, city, province, and postal code.

Transaction data — your order history, purchased products, payment method selected, and order status.

Technical data — your IP address, browser type, device information, and pages visited, collected automatically when you use the Service.

We do not collect, process, or store your payment card details or full banking credentials. All payment authentication and card data handling is performed entirely by our payment processor. We only receive confirmation of whether a payment succeeded and, where relevant, a non-sensitive transaction reference.

We process your personal data for the following purposes:

Order fulfilment — to process, confirm, and fulfil your orders, including producing pre-order items.

Delivery — to arrange shipping and communicate tracking information through our courier partners.

Customer support — to respond to your enquiries, complaints, and service requests.

Fraud prevention — to verify orders, screen for suspicious activity, and protect ourselves and other customers.

Marketing communications — where you have opted in, to send you updates, offers, and news about melloculab. You may withdraw this consent at any time.

We process your personal data on the following legal bases under the UU PDP:

Performance of a contract — processing necessary to take steps before entering into a purchase agreement with you and to perform that agreement once an order is placed.

Legal obligation — processing necessary to comply with our obligations under Indonesian law, including tax, consumer protection, and record-keeping requirements.

Consent — for marketing communications, based on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

We may share your personal data with the following categories of third parties, strictly to the extent necessary for the purposes described above:

Payment processing — Xendit, our payment processor, which handles payment authentication and transaction processing for domestic Indonesian orders and international card transactions.

Courier partners — JNE, J&T, and international carriers, to deliver your orders and provide tracking information. We share only the delivery data required to ship your order (name, address, phone number, and order contents).

Website analytics providers — third-party services that help us understand how visitors use our website through aggregated, pseudonymised data.

Service providers — hosting, communications, and other vendors who support the operation of the Service, under appropriate confidentiality and data-protection obligations.

We do not sell your personal data to any third party. We will only disclose personal data to public authorities where required to do so by Indonesian law.

We retain order and transaction records for the duration necessary to fulfil your order and for the period required by applicable Indonesian tax, accounting, and consumer-protection laws, after which they are deleted or anonymised.

Account and marketing data is retained for as long as your account is active or until you withdraw consent and request deletion, whichever occurs first.

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure, including encryption in transit, access controls, and regular review of our data-handling practices.

Despite these safeguards, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Under the UU PDP, you have the following rights regarding your personal data:

Access — to request a copy of the personal data we hold about you.

Correction — to request that we correct inaccurate or incomplete personal data.

Deletion — to request that we delete your personal data, subject to retention obligations required by law.

Withdrawal of consent — to withdraw your consent for marketing communications or other processing based on consent at any time.

Objection and restriction — to object to or request restriction of certain processing of your personal data.

To exercise any of these rights, please contact us at the email address in Section 10. We will respond to verified requests within the timeframe required by the UU PDP and may ask for information to confirm your identity before acting on a request.

Our website uses cookies and similar technologies to operate the Service, remember your preferences (such as your cart and region), and understand how the site is used through analytics.

We use both essential cookies, which are necessary for the Service to function, and optional cookies, such as analytics cookies, which you may control.

You can disable or delete cookies through your browser settings at any time. Doing so may affect some features of the Service, such as your ability to keep items in your cart across sessions.

The Service is not intended for and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us at the email address in Section 10, and we will take steps to delete it.

For any enquiry, request, or complaint regarding this Privacy Policy or the way we handle your personal data, please contact us:

PT Peduli Alam dan Manusia (melloculab)

Jl. Bangka Raya No.42A, Pela Mampang, Jakarta Selatan, Indonesia

Email: info@melloculab.com

WhatsApp: +62 822-6070-8843

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. The version in force when we collect your personal data governs that processing.

Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically to stay informed of any updates.