Zepilas

Privacy Policy

This Privacy Policy governs all personal data collected, stored, processed and utilized by ZEPILAS through our Indonesia official website, applicable to every visitor, customer, and wholesale partner accessing our platform, in full compliance with Indonesia’s Personal Data Protection Law (PDP Act No. 27 of 2022). All data handling activities are limited exclusively to supporting handbag sales, order fulfillment, customer service, and brand communication for Indonesian users.

1. Categories of Personal Data We Collect

We only gather necessary personal information voluntarily submitted by users when interacting with our site, including:

  1. Order contact data: Full legal name, valid Indonesian mobile phone number, active customer email address and residential or delivery address in Indonesia, including province, city, sub-district and postal code supplied for parcel shipping. Our official brand correspondence channel is [email protected].
  2. Transaction & checkout data: Order history, purchased ZEPILAS handbag item numbers, payment status and transaction references, invoice records, available shipping tracking information and return/refund application documents. Payment methods available for an order are those displayed at checkout. Do not send full card numbers, security codes or payment passwords by email.
  3. Voluntary user-submitted content: Email correspondence sent to [email protected] and bag photos or other supporting information you choose to attach to an inquiry.
  4. Passive automated site data: Device IP address, browser type, website page browsing history, cookie tracking data for site functionality optimization, session duration, and click behavior on our handbag product catalog pages.

We will never request sensitive personal data including Indonesian national ID (KTP) numbers, bank account full credentials, tax identification numbers, or biometric data unless mandatory for verified large wholesale bulk order tax invoicing, with explicit separate user consent required in such limited scenarios.

2. Authorized Purposes for Data Usage

All collected personal data will only be utilized for the following legally permitted functions:

  • Process, confirm, fulfill, and deliver customer orders of ZEPILAS fashion handbags to Indonesian domestic delivery addresses; coordinate with local Indonesian courier partners for parcel shipping and delivery updates.
  • Respond to all customer messages sent to [email protected], resolve order issues, product defect claims, return/refund requests, and product inquiries in Bahasa Indonesia and English.
  • Handle order correspondence using the customer’s contact email, including questions about payment status, available shipping references, refund approval and return documentation.
  • Respect customer preferences for optional promotional contact. Customers can email [email protected] to withdraw permission for such contact without changing the handling of an existing order or after-sales request.
  • Comply with mandatory legal requirements under Indonesian domestic law: respond to formal government data disclosure requests, maintain financial transaction records for tax compliance, resolve consumer dispute mediation filed with Indonesian consumer protection authorities.
  • Prevent fraudulent checkout activity, unauthorized use of customer information, and counterfeit resale of genuine ZEPILAS handbags by bad actors operating within Indonesia’s e-commerce ecosystem.

We will never sell, rent, lease, or trade your personal identifiable information to unaffiliated third-party marketing companies, fashion competitors, or external data aggregators under any circumstances. Limited data sharing only occurs with vetted Indonesian service providers required to complete order fulfillment: domestic courier logistics partners, providers involved in the payment method actually used for an order, and cloud email hosting services managing incoming mail to [email protected], all bound by strict data confidentiality contracts aligned with Indonesian PDP regulations.

3. User Data Rights for Indonesian Customers

Consistent with Indonesia Personal Data Protection legislation, every user holds the following enforceable rights relating to their stored personal information:

  1. Right of Access: You may email [email protected] to request a full copy of all personal data our website holds about you, free of charge once per calendar year. We will deliver the complete data report to your contact email within 30 WIB business days of your request submission.
  2. Right of Rectification: If your stored delivery address, contact phone number, or name contains incorrect information, submit a correction request via email, and our team will update your contact information within 48 hours.
  3. Right to Erasure (Right to be Forgotten): You may submit a formal personal data deletion request to [email protected] requesting permanent removal of all your personal data from our servers, with the exception of transaction records we are legally obligated to retain for Indonesian tax and consumer protection auditing purposes (stored for the mandatory legal retention period of 5 years).
  4. Right to Restrict Processing: You may opt out of all marketing email communications at any time, or request temporary suspension of non-essential data processing for your personal information.
  5. Right to Data Portability: Request your order and personal contact data in a standard machine-readable digital format for transfer to your personal records.

4. Data Security & Storage Protocols

We take reasonable measures to protect personal information handled through our Indonesia website. Access to customer records is limited to people who need the information for orders and related service work, and those records should be handled confidentially. No method of storing or transmitting information can be guaranteed completely secure.

Correspondence sent to and received from [email protected] is retained as needed to handle the inquiry and related order records, subject to the retention and data-request provisions above.

5. Cookie Policy Addendum

The website may use cookies or similar browser storage for basic shopping functions, such as keeping shopping cart selections and information used during checkout. You can manage browser storage through your browser settings. Blocking or clearing storage may affect how shopping features work.

6. Policy Modification Notification

ZEPILAS reserves the right to update this Privacy Policy to align with changes to Indonesian personal data legislation or internal brand operational adjustments. All policy revisions will be published prominently on our Indonesia website’s dedicated legal page, 14 days prior to the updated policy taking full effect. For questions regarding this Privacy Policy, direct all written inquiries to [email protected].