Privacy Policy

In short

We collect your personal data only when you send it to us yourself through the contact form, and only to respond to your enquiry.

We do not sell personal data, do not pass it to third parties for marketing, and do not set non-essential cookies before you agree.

You may ask for access to, correction of, or deletion of your data at any time, and you may withdraw a consent you have given.

This summary is provided for ease of reading and does not replace the fuller terms below.

1. Identity of the data controller

AB & Partners Law Office, of Jl. Kalibata Utara II No. 25, RT.2/RW.7, Kalibata, Pancoran District, South Jakarta 12740, Indonesia, acts as the controller of personal data collected through this website.

Any question, request, or objection concerning this policy may be sent through the channels given at the end of this page.

2. What we collect

Data you provide yourself: your name, email address, company, job title, and the description of the matter you write on the contact form. Only name, email address, and description are required.

Data recorded technically on submission: your IP address, browser type, time of submission, and the language of the page you used. This record is needed to demonstrate when and in what form your consent was given, and to prevent abuse of the form.

We do not collect the categories of personal data treated as specific under data protection rules, and we do not ask you to send them through this website.

This site is not directed at children, and we do not knowingly collect children’s data. Should that occur, the data will be deleted once we become aware of it.

3. What you should not send

Please do not send case documents, evidence, financial data, or other confidential information through the form on this website.

Before an attorney-client relationship exists, what you send is not yet protected by attorney-client confidentiality. Sending unsolicited confidential information may also create a conflict of interest that prevents us from representing you.

Send the outline only. We will contact you to discuss the rest through an appropriate channel.

4. Legal basis and purpose

The legal basis for processing is your consent, given explicitly through the consent box on the form. That box is not ticked by default, and the form cannot be submitted without you ticking it.

The purpose is specific and limited: to receive, review, and respond to your enquiry, and to route it to the advocate covering the relevant area.

If you also consent to receive legal updates, that consent is recorded separately and has its own purpose. Consenting to be contacted does not by itself mean consenting to legal updates, and declining one does not affect the other.

We do not use your data for decisions made solely by automated means that produce legal effects for you.

5. Proof of consent

Each consent is stored together with the time it was given, the consent wording shown to you at that moment, the purpose consented to, and the version number of this policy then in force.

This record exists so that we can demonstrate proof of consent as required under data protection rules, and so that later changes to this policy do not alter the meaning of the consent you gave.

6. How long we keep your data

Enquiries that do not become matters: kept for at most 24 months from last contact, then deleted.

Data that has become part of a case file: kept in line with the document retention obligations applicable to advocates, and in any event for at least 5 years after the matter closes.

Data used for legal updates: kept while your consent remains in force, and deleted once it is withdrawn.

Consent records are kept for as long as the related data exists, because it is that record which evidences the lawfulness of the processing.

7. Who can access your data

Your data is accessed only by advocates and support staff of AB & Partners Law Office concerned with your enquiry.

Alongside people, an automated system of ours also reads incoming enquiries to help prepare how they are handled. That system runs on infrastructure we manage within Indonesia, remains under our control, and passes your data to no one.

What that system reads is your name, email address, company name, job title, and the description you write. Your IP address and browser type are not read by it.

If you withdraw your consent, your enquiry stops being passed to that system from the moment of withdrawal.

We do not sell personal data and do not pass it to third parties for marketing purposes.

Data may be disclosed to others only where required by law or court order, or where you ask us to.

8. Transfer outside Indonesia

Transferring personal data outside Indonesian jurisdiction is a standalone obligation, separate from the basis for processing. We keep the number of supporting services located outside Indonesia to a minimum.

Data you submit through the form is stored on infrastructure we manage. The typefaces and presentation files for this site are served from our own servers, so opening this page does not send your IP address to any third-party provider.

We use a third-party artificial intelligence processing service located outside Indonesia. Two things are sent there:

First, the description you write in the contact form. It is sent so that the likely practice area can be estimated and your enquiry reaches the right advocate. Your name, email address and telephone number are not sent — only the text of the description.

Second, the words you type into the search box, so that results can be matched by meaning rather than by wording alone.

This is why we ask you not to send documents, evidence or confidential details through the form. Give us the outline only, and send the detail once an advocate-client relationship is in place, through a channel we agree together.

Transmission to that service currently takes place over an unencrypted connection. This means the content of your description and your search terms may be readable by anyone controlling the networks the data passes through. We state it here because you are entitled to know before you write anything.

So, once more: do not write the names of opposing parties, case numbers, figures, or confidential details into the form or the search box.

If you would rather your description were not processed this way, contact us by telephone on the number in the contact section.

The automated system of ours mentioned in section 7 runs within Indonesia and is not part of the transfer described in this section.

Any later change to this list of services will be stated in this policy together with the basis for the transfer, and the policy version will be raised.

9. Cookies

Essential cookies are needed for pages to work, for example to maintain a session and prevent request forgery. These cannot be switched off, as the site cannot function without them.

Non-essential cookies, including analytics cookies, are set only after you agree through the notice shown on your first visit.

You may decline non-essential cookies without losing access to any part of this site, and may change that choice at any time through your browser settings.

Your cookie choice is stored in your own browser, not on our servers.

10. Your rights

You have the right to be informed about the data we process about you and the purposes of that processing.

You have the right to request access to your data, to request correction where it is inaccurate or incomplete, to request erasure, to restrict processing, and to obtain a copy of your data in a readable form.

You have the right to withdraw a consent you have given, at any time, without giving reasons. Withdrawal does not affect the lawfulness of processing carried out beforehand.

You also have the right to object and to lodge a complaint with us or with the competent authority in accordance with applicable rules.

Requests may be sent through the channels in the contact section. We respond within 14 working days of receiving a complete request. To protect you, we may ask for further information to satisfy ourselves that the request genuinely comes from you.

We do not charge a fee for reasonable requests.

11. Security

This site uses an encrypted connection. Access to the data you send is limited to those concerned with it, and the system is protected by access controls, submission rate limiting, and regular backups.

No system is entirely secure. Should a personal data protection failure affect you, we will notify you and the competent authority in accordance with applicable rules.

12. Changes to this policy

This policy may be updated, for example because rules change or because the way we work changes.

Each version carries a number and a date. The consent you have given continues to refer to the version in force when it was given, so later changes do not silently widen your consent.

The number and date of the version in force appear at the top of this page.

13. Data protection officer

Our core activity is the provision of legal services. It does not involve regular and systematic monitoring of data subjects on a large scale, nor do we process specific personal data on a large scale for our own purposes. On that basis we have not appointed a Data Protection Officer within the meaning of Article 53 of the Personal Data Protection Law.

Instead, every request and complaint concerning personal data is handled by the partner responsible for compliance at the firm, through the channels in the following section.

Should our activities later change so that such an appointment becomes mandatory, we will appoint that officer and publish their contact details in this policy.

14. Contact

AB & Partners Law Office

Jl. Kalibata Utara II No. 25, RT.2/RW.7, Kalibata, Pancoran District, South Jakarta 12740, Indonesia

Telephone 0812 8064 7776

Email ab.lawyer.receiver@gmail.com

Requests concerning data subject rights are best sent in writing so that we can record and answer them properly. Please include your name, enough detail for us to locate your data, and the right you wish to exercise.