Respecting privacy. Handling data responsibly.

Operator and scope

The pancaindera.web.id website is operated under the Pancaindera Qayid Lokeswara (PQL) name. For privacy inquiries and data requests, contact info@pancaindera.web.id.

This policy covers the PQL corporate website and the PQL NEXUS Command Center. Separate products, consulting engagements, or platforms, including NOEMA at noema.web.id, may have their own notices and agreements.

Information processed

Visitors may provide names, email addresses, organizations, and project details through the contact form. The form prepares a message on the visitor's device for forwarding via WhatsApp; it does not submit its contents to the PQL website database.

When a visitor opts into optional analytics, the website generates a random session identifier in browser session storage and records visited page paths, view counts, activity times, and daily aggregates. The hosting infrastructure may process IP addresses, user agents, and technical logs to deliver content and protect the service.

The Command Center may hold limited client records, editorial content, uploaded images, and administrator activity logs. Administrator records are not published to visitors.

Purposes and lawful grounds

Processing supports website delivery, voluntary inquiries, system security, professional relationship management, and aggregated site metrics.

The applicable lawful ground depends on context: consent for optional analytics, pre-contractual steps or contract performance for business correspondence, and other lawful grounds under the Indonesian Personal Data Protection Law where applicable. Visitors can decline optional analytics without losing access to public content.

Recipients and transfers

Data may be processed by hosting providers, security/infrastructure vendors, or operational partners necessary to deliver the service, subject to appropriate controls. When you follow WhatsApp, LinkedIn, or NOEMA links, subsequent processing is governed by the respective provider's policies.

Visitor personal data is not sold for advertising purposes. Any necessary cross-border transfer must follow applicable data protection requirements and relevant contractual safeguards.

Retention and deletion

Analytics session identifiers inactive for more than 48 hours are cleared when the next telemetry processing occurs. Daily visit aggregates older than approximately 90 days are likewise cleared on a subsequent processing event; cumulative counters may remain while the statistics record is used.

Correspondence, client records, backups, and administrative logs are retained for as long as necessary for business, contractual, security, or legal purposes and then reviewed for deletion or anonymization. Operational retention periods vary by data type and legal obligation. You may request a retention review via our official email.

Your data rights

Subject to applicable law, you may request processing information, access, correction, consent withdrawal, restriction, deletion, and other available rights. PQL may reasonably verify your identity before acting on a request.

Email info@pancaindera.web.id with the subject “Personal Data Request”. We will review and respond in accordance with applicable law. Analytics consent can be withdrawn directly through the website's Privacy Preferences control.

Security and incidents

PQL applies administrative access controls, authentication, request protections, and separation of public assets from internal data storage. No digital service can be guaranteed risk-free. If a personal data incident occurs, PQL will assess it and provide notifications as required by applicable law.

Do not send passwords, confidential documents, or sensitive information through the contact form or initial chat.

Policy changes

This policy may be updated to reflect changes in site functions, providers, or law. The effective date on this page identifies the published version. Material changes to consent-based processing will be notified before implementation where required by law.

Visitor intelligence and IP logs

With analytics consent, PQL may record a pseudonymous browser session, time, page path without URL parameters, referring domain, device and browser category, and an IP address masked by default. Administrators may enable full-IP logging only for a disclosed lawful purpose. Session detail and visit trails are retained for up to 30 days, defaulting to 7 days; aggregated daily metrics may be retained for up to 90 days. Approximate country, city, or ISP information is available only if a separate third-party GeoIP service is configured; it is not GPS location or proof of identity. The module does not collect visitors’ passwords, authentication cookies, access tokens, or personal credentials.

Optional IP-based location

Only when you separately opt in to approximate location in privacy settings, PQL may send your connection IP address to ipapi.is to estimate country, city, region, and ASN/network organization. No GeoIP request occurs without location consent. GeoIP is not GPS or proof of identity. Results are admin-only, retention-limited, and cross-border processing is subject to applicable data-protection safeguards. You can withdraw consent using the footer privacy settings.

Website security monitoring and incident response

To protect website integrity and availability, PQL may record suspicious HTTP request signals, exploit probing and administrator login failures. Security records contain timestamps, request paths without query parameters, anomaly type, response decision and a pseudonymous network fingerprint. Security logs do not capture passwords, one-time codes, authentication cookies, message bodies or query parameters. Responses may include logging, rate limits or temporary rejection of requests where justified by technical indicators. Security logs are restricted to administrators and retained for up to 30 days according to the selected retention policy. Security processing is separate from optional audience analytics and must rely on an appropriate lawful basis. This service does not scan visitors’ devices for spyware.

Automatic aggregate page views

When a public HTML document is opened, the PQL server counts page requests and daily page opens in aggregate. This module does not store IP addresses, device identifiers, session identities or individual browsing journeys in its aggregate data. These figures represent page-opening requests, not unique people or people currently online. They can include automation and repeated loads.

Optional analytics, including browser sessions, device data, and IP-based location, remain subject to separate consent choices. The hosting provider may keep technical access logs under its own terms.

Third-Party Threat Map Content

Indonesia Cyber Threat Watch can fetch aggregated information from Cloudflare Radar through the PQL server. Visitors can optionally activate the Kaspersky widget, which loads third-party content and may process connection data under its provider policies. Without user action, the Kaspersky iframe is not loaded.