This Privacy Policy explains how Librantic, Inc. ("Librantic", "we", "us") processes personal data collected through the website at librantic.com (the "Site"). For the purposes of applicable data protection law, including Indonesian Law No. 27 of 2022 on Personal Data Protection ("PDP Law"), Librantic, Inc. is the controller of personal data collected through the Site. Our point of contact is inquiries@librantic.com; for matters specific to Indonesia, inquiries@id.librantic.com.
We collect: (a) information you submit through the consultation request form, including your company name, work email address, jurisdiction, number of entities, deadline, and the content of your message; (b) information submitted through the partner application form, including firm name, contact person, work email address, jurisdiction, and message; (c) correspondence you send to us; and (d) limited technical data generated by your use of the Site, such as IP address, browser type, device information, pages viewed, and timestamps, collected through server logs and strictly necessary cookies. The Site is not designed to collect sensitive categories of personal data, and we ask that you do not submit any through the forms.
We process personal data: (a) to receive and route consultation requests to Partner Firms so a licensed tax consultant can contact you, based on the performance of steps taken at your request prior to entering into an agreement; (b) to assess and respond to partner applications, on the same basis; (c) to operate, secure, and improve the Site, based on our legitimate interests in running a safe and functional website; (d) to communicate with you when you contact us, based on our legitimate interests or your consent, as applicable; and (e) to comply with legal obligations, including tax, corporate, and regulatory requirements. Where processing is based on consent, you may withdraw it at any time without affecting processing already carried out.
We share personal data with: (a) Partner Firms, being independent licensed tax consulting firms in the Librantic partner network, for the purpose of responding to your consultation request; once shared, the Partner Firm processes your data as an independent controller under its own privacy obligations; (b) service providers that host the Site, provide email and infrastructure services, or support our operations, under agreements that restrict their use of the data to providing services to us; (c) professional advisers, and competent authorities where disclosure is required by law; and (d) a successor entity in the event of a merger, acquisition, or corporate restructuring, subject to this Policy. We do not sell personal data, and we do not use personal data collected through the Site to train artificial intelligence models.
Your personal data may be processed in jurisdictions other than your own, including Indonesia, the United States, and jurisdictions where our service providers operate. Where personal data is transferred out of Indonesia, we take steps required by the PDP Law, including ensuring the recipient jurisdiction provides an adequate level of protection, applying appropriate safeguards, or obtaining your consent.
We retain consultation and application data for as long as needed to handle your request and for up to 24 months thereafter, unless a longer period is required for an engagement, a legal obligation, or the establishment or defense of legal claims. Server logs are retained for up to 12 months. When retention ends, data is deleted or irreversibly anonymized.
Subject to applicable law, you have the right to access your personal data, obtain a copy, request correction of inaccurate data, request deletion, restrict or object to certain processing, withdraw consent, and receive your data in a portable format. You may exercise these rights by writing to inquiries@librantic.com or, for matters specific to Indonesia, inquiries@id.librantic.com. We will respond within the period required by the PDP Law. You also have the right to lodge a complaint with the competent Indonesian data protection authority.
We apply technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and logging. No method of transmission or storage is completely secure; if a data breach occurs that is subject to notification requirements, we will notify you and the competent authority as required by the PDP Law.
The Site uses strictly necessary cookies and similar technologies required for the Site to function, such as remembering your language and your cookie choice. With your consent, we also use analytics cookies, loaded through Google Tag Manager, to understand how the Site is used; these are not loaded or set unless you accept them. We do not use advertising cookies. You may accept or decline analytics at any time using the cookie settings link in the footer, and declining does not affect your use of the Site.
The Site is directed at businesses and professionals and is not intended for children. We do not knowingly collect personal data from children.
We may amend this Policy from time to time. The current version, identified by the effective date above, applies from the moment it is posted. Material changes will be indicated prominently on the Site.
Privacy questions and requests: inquiries@librantic.com (for matters specific to Indonesia: inquiries@id.librantic.com), attention: Data Protection.