Privacy Policy

The data controller for Adam’s Work services is Fikri Adam, trading as Adam’s Work, Badung, Bali, Indonesia. Privacy questions may be sent to adamfiik13@gmail.com.

We may process:

• identity and contact information;
• account and authentication information;
• business information, briefs, materials, files, and communications;
• order, offer, invoice, payment, refund, and acceptance data;
• usage, device, security log, IP address, user agent, analytics, and cookie data;
• account or platform access granted to complete the work;
• support, complaint, and dispute records.

We do not intend to request sensitive data that is unnecessary. Clients should remove or mask irrelevant third-party data before uploading files.

Data is processed to:

• prepare offers and perform contracts;
• verify payments and prevent fraud;
• provide accounts, orders, communications, revisions, and deliverables;
• meet legal, tax, audit, and dispute-resolution obligations;
• maintain system security and reliability;
• improve the website using aggregated data;
• send marketing only on the basis of consent or another relevant lawful basis.

Depending on the services and features used, data may be shared as necessary with hosting/cloud, database, authentication, storage, email, analytics, monitoring, and payment providers, banks/payment methods, specialist collaborators, professional advisers, or authorities acting on lawful requests. Future online payments may use Midtrans or another officially displayed provider; this integration is not yet active.

Each provider receives only data relevant to its function. The providers used depend on the services and features available.

Providers may process data on infrastructure outside Indonesia. Processing locations and cross-border transfer mechanisms must be reviewed under applicable personal data protection requirements before they are used for the relevant processing.

Data is kept for as long as needed for orders, services, legal obligations, security, taxes, bookkeeping, or disputes. Retention depends on the processing purpose and applicable obligations. After the retention period, data is securely deleted, anonymized, or aggregated.

Security controls are proportionate to the systems and data being processed. Depending on the functions used, these controls include access restrictions and least privilege, transport encryption, credential management, and server-side authorization, private storage, activity logging, and backups for the relevant systems. No system is risk-free.

If a personal data protection failure meets the legal notification threshold, we will provide notice within the time limits and with the information required by applicable rules.

Subject to applicable law, users may request information, access, correction, updating, cessation or deletion, withdrawal of consent, objection, or other rights relating to data processing. Some requests may be limited by legal obligations, fraud prevention, bookkeeping, or disputes.

We may verify identity before fulfilling a request.

Cookies necessary for login, security, sessions, checkout, and preferences may be used to provide services. Non-essential analytics or marketing cookies must follow an appropriate consent mechanism before activation where required.

Services are not directed at children who lack capacity to consent or enter into a contract without a guardian. If a child’s data is identified without a lawful basis, contact us so it can be addressed.

Policy changes are displayed with a version and effective date. Material changes are communicated appropriately. Contact: adamfiik13@gmail.com.