Privacy Policy

1. Introduction

PASARA SURF ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and mobile application (the "Platform"). This policy complies with Indonesian Law No. 27 of 2022 on Personal Data Protection (PDP Law) and the EU General Data Protection Regulation (GDPR) where applicable.

2. Data We Collect

We collect the following categories of personal data:

Data You Provide Directly

• Account information: name, email address, password (encrypted), phone number
• Profile information: location, surf skill level, favorite surf spots, profile picture
• Listing content: product descriptions, images, pricing, and location details
• Communications: messages exchanged with other users through the Platform

Data Collected Automatically

• Device and browser information (type, version, operating system)
• IP address and approximate geographic location
• Usage data: pages visited, features used, time spent on the Platform
• Cookies and similar tracking technologies (see our Cookie Policy for details)

3. How We Use Your Data

We process your personal data for the following purposes:

• To create and manage your user account and provide Platform services
• To display your listings and facilitate communication between buyers and sellers
• To personalize your experience and provide relevant content and recommendations
• To analyze usage patterns and improve Platform functionality and performance
• To send service-related notifications and, with your consent, marketing communications

4. Third-Party Services & Data Sharing

We use the following third-party services that may process your data:

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within thirty (30) days, except where retention is required by applicable law. Anonymized analytics data may be retained indefinitely for statistical purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data storage, secure HTTPS connections, access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Under the Indonesian PDP Law and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal requirements)
• Right to Object: Object to the processing of your data for marketing purposes
• Right to Data Portability: Receive your data in a structured, machine-readable format

8. Changes to This Policy

We may update this Privacy Policy from time to time. When material changes are made, we will notify you through the Platform or by email. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

For any privacy-related questions, requests, or complaints, please contact our Data Protection team: