Privacy Policy

Last updated: 29 September 2026

This policy explains how IDSECCONF processes personal data when you buy tickets or merchandise at shop.idsecconf.org, in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

What we collect

Buyer: name, email and phone number.
Attendees: the name and email of each ticket holder.
Delivery (only if you choose merchandise shipping): recipient name, phone and address.
Technical: IP address, to prevent fraud and abuse.
Payments are processed by Xendit. We do not store your card or payment account details.

If you register other people as attendees, make sure you have their permission to share their details.

How we use it

To process your order and payment, and issue tickets.
For check-in at the venue and merchandise pickup or delivery.
To contact you about your order and the event (for example, workshop changes or refunds).
To prevent fraud and abuse, and to meet legal and accounting obligations.

We do not sell your data or use it for advertising.

Who receives it

Xendit — payment processing.
Cloudflare — website hosting and bot protection.
Resend — email delivery.
Delivery couriers (and RajaOngkir for shipping rates) — only if you choose shipping.
Workshop instructors — the attendee names for their session.

How long we keep it

We keep your data for up to 12 months after the event, except transaction records we must keep longer for tax and accounting purposes.

Cookies

We only use cookies needed for the site to work (your cart and status messages). We do not use tracking or analytics cookies.

Your rights

You can ask to access, correct or delete your personal data (subject to our legal obligations) by contacting info@idsecconf.org.