Privacy Policy
Last revised: January 2026 — Revision 01-A
1. Introduction
This Privacy Policy describes how Brastel ("we", "us", "our") collects, processes, and stores personal data when you interact with the Brastel website located at brastel.info and when you communicate with us by email or through the contact form. Brastel is operated from Jl. Gajah Mada No. 64, 11120 Jakarta, Indonesia.
By using this website or submitting a contact enquiry, you acknowledge that your personal data will be handled in accordance with the practices described in this policy. This policy applies to personal data collected through the website and through direct correspondence. It does not apply to data held by third-party services linked from our pages.
2. Data We Collect
We collect the following categories of data through the website and direct correspondence:
Name, email address, subject selection, and the content of your message as submitted through the contact form at contact.php. This data is submitted voluntarily.
IP address, browser type, operating system, referring URL, and pages visited. This data is collected automatically when you access the website and is used for operational and analytical purposes.
Cookie preference selections stored when you interact with the cookie consent banner. Please refer to the Cookie Policy for a full description of the cookies used.
Name, email address, and the content of any email you send directly to [email protected]. Correspondence is retained as part of the operational record.
3. Use of Data
Personal data collected through this website is used for the following purposes:
- Responding to contact form submissions and email enquiries within the stated response window.
- Processing and fulfilling orders submitted through the website or direct correspondence.
- Analysing aggregate technical data to understand how the website is used and to improve its performance.
- Maintaining an operational record of correspondence as required for business continuity.
- Complying with applicable legal and regulatory obligations under Indonesian law.
We do not use personal data for unsolicited marketing communications. Personal data submitted through the contact form or by email is not used for any purpose beyond that for which it was submitted without your prior consent.
4. Data Sharing
Brastel does not sell personal data to third parties. Personal data may be shared in the following limited circumstances:
- Service providers: Technical service providers who support the operation of the website (hosting, email delivery) may process limited technical data as part of their contracted services. These providers operate under data processing agreements.
- Legal requirements: Personal data may be disclosed to regulatory authorities or law enforcement bodies when required by applicable Indonesian law or a valid legal order.
- Business transfers: In the event of a change in ownership of the Brastel business, personal data held in our operational records may be transferred to the acquiring entity subject to the same privacy obligations described in this policy.
5. Data Retention
Personal data is retained for the minimum period necessary for the purpose for which it was collected, subject to applicable legal retention requirements:
| Data Category | Retention Period |
|---|---|
| Contact form submissions | 24 months from date of submission |
| Email correspondence | 36 months from last correspondence |
| Order records | 7 years (Indonesian commercial law requirement) |
| Technical / server logs | 90 days from collection |
| Cookie preference records | 12 months from consent interaction |
6. Your Rights
Subject to applicable Indonesian personal data protection regulations, you have the following rights with respect to personal data held by Brastel:
You may request a copy of the personal data Brastel holds about you.
You may request correction of inaccurate personal data held about you.
You may request deletion of personal data, subject to legal retention requirements.
You may object to the processing of your personal data for specific purposes.
To exercise any of these rights, submit your request in writing to [email protected]. Requests are addressed within 30 calendar days of receipt.
7. Security
The Brastel website uses HTTPS for all data transmission. Access to the operational record systems that store contact data and correspondence is restricted to authorised Brastel staff. Server infrastructure is maintained by the hosting provider under a contracted service agreement that includes data security obligations.
No transmission of data over the internet is entirely secure. While Brastel takes reasonable technical and organisational measures to protect personal data, we cannot guarantee the absolute security of data transmitted to us through the website or email.
8. Contact Us
For any privacy-related questions, requests, or concerns, please contact Brastel at:
Brastel products are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories.