Legal
Privacy Policy
This policy explains what personal data Veridia collects through this website, what we use it for, who processes it, how long we keep it, and how you can exercise your rights over that data.
This English text is provided for convenience. The Indonesian version is the operative document and prevails in the event of any discrepancy.
Contents
1. Who we are (Data Controller)
Veridia does AI-powered Business Data Analytics, operating in Indonesia and running the website veridia.id. In this policy, "Veridia", "we", or "us" refers to the entity acting as the Data Controller for data collected through this site, as defined in Indonesia's Law No. 27 of 2022 on Personal Data Protection (the "PDP Law").
For any question, request, or objection regarding your personal data, contact us at wisnu.wardhana@veridia.id.
2. Personal data we collect
We only collect data you submit yourself through the form on this site, plus a small amount of technical data that accompanies that submission. We do not buy data from third parties and do not collect data from external sources.
a. Data you enter in the form
| Data | Details |
|---|---|
| Name | The name of the person completing the form. Required. |
| Company name | Your business entity's name. Required. |
| Email address | Where we send your Business AI Potential Report. Required. |
| Phone / WhatsApp number | For consultation follow-up. Required. |
| Role / job title | Optional. |
| Industry | Optional. |
| Self-assessment answers | Your business situation: main problem, number of systems in use, data condition, frequency of manual recaps, discrepancies between reports, AI readiness, buying triggers, and number of divisions. Optional, used to produce your report. |
b. Technical data collected automatically on submission
| Data | Details |
|---|---|
| Campaign parameters ( utm_source, utm_medium, utm_campaign, utm_term, utm_content) | Identifies which channel brought you to our site — only populated if you arrive via a tagged link, such as an ad. |
| Referring page (referrer) | The address of the page you visited immediately before ours, truncated to 512 characters. |
| reCAPTCHA token | An anti-spam verification token from Google reCAPTCHA Enterprise. See section 6. |
We do not collect specific personal data as defined in Article 4(2) of the PDP Law — such as health, biometric, genetic, criminal record, children's, or personal financial data. Please do not enter such information into the form fields.
3. Purposes and legal basis
We process your data solely to:
- Produce and send your Business AI Potential Report — a free assessment of your business data readiness, delivered to your email.
- Qualify and follow up on your enquiry — understanding your needs and contacting you by email or WhatsApp for an initial consultation.
- Measure marketing channel effectiveness — using campaign parameters and referrer data, in aggregate.
- Prevent spam and form abuse — via reCAPTCHA verification.
The legal basis is your consent (Article 20(2)(a) of the PDP Law), given when you press the submit button on the form after being shown a link to this policy. You may withdraw that consent at any time — see section 7.
We do not sell, rent, or trade your personal data to anyone, and we do not use it for automated decision-making that produces legal effects for you.
4. Third parties that process your data
We use a number of service providers (Data Processors) that process data on our instructions. This is the list we actually use today:
| Party | Role |
|---|---|
| Google — Firebase Hosting | Serves the veridia.id pages to your browser. |
| Google — Analytics 4 | Measures how the site is used, in aggregate — which pages are visited and where visitors arrive from. |
| Google — reCAPTCHA Enterprise | Verifies that form submissions come from a human rather than a bot. |
| Google Cloud Platform | Runs Veridia's internal system (Veridia HQ) that receives and stores your form data, in the asia-southeast1 (Singapore) region. |
| Email delivery provider | Delivers the Business AI Potential Report to your inbox and internal notifications to our team. |
Beyond the parties above, we may disclose your data where required by law or in response to a valid request from a competent authority.
5. Storage location and retention
Your form data is stored on Google Cloud infrastructure in the asia-southeast1 (Singapore) region. This means personal data is transferred outside Indonesian territory as contemplated by Article 56 of the PDP Law. We select providers that apply an equivalent standard of data protection and process data only on our instructions.
We retain prospect data for a maximum of 24 months from your last interaction with us. After that period — or sooner if you request deletion — the data is deleted or anonymised so it can no longer be linked to you. Data we are legally required to keep longer (for example tax records, if you become a client) is retained for the period the law requires.
6. Cookies and tracking technologies
This site uses no advertising cookies and sets no social media pixels. It does use Google Analytics 4 to measure how the site is used.
What we use today:
- Google Analytics 4 (measurement ID G-MENEK3CZLE) — loaded on every page, including this one. It sets the _ga and _ga_MENEK3CZLE cookies in your browser and sends Google page addresses you visit, referrer, approximate location derived from your IP address, and device and browser type. We use it in aggregate to see which pages bring enquiries. We do not use it for advertising, and we do not combine it with the data you enter in the form. This is governed by Google's Privacy Policy. You can block it with your browser's cookie controls or with Google's opt-out browser add-on.
- Google reCAPTCHA Enterprise — loaded on every page to protect the form from bots. Google may set cookies and read technical information from your browser to distinguish humans from bots. This is governed by Google's Privacy Policy and Terms of Service.
- Browser local storage (localStorage) — used only to remember your language preference (Indonesian/English). It stays on your device, is never sent to our servers, and is not personal data.
We do not currently show a cookie consent banner, so analytics starts when the page loads. If you would rather it did not run, use the browser controls or the opt-out add-on linked above. If we add advertising tracking in future, we will update this policy before switching it on.
7. Your rights as a Data Subject
Under the PDP Law, you have the right to:
- Be informed about the identity, legal basis, and accountability of the party processing your data.
- Access and obtain a copy of the personal data we hold about you.
- Correct or update inaccurate data.
- Delete your personal data from our systems.
- Withdraw consent you previously gave, at any time.
- Object to certain processing, including opting out of marketing communications.
- Suspend or restrict the processing of your personal data.
- Seek redress and compensation for breaches of your personal data protection, as provided by law.
To exercise these rights, email wisnu.wardhana@veridia.id from the address you used on the form — this helps us verify your identity. We will acknowledge your request within 3×24 hours and complete it within 14 working days. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.
8. Data security
We apply reasonable technical and organisational measures to protect your data: encrypted transmission (HTTPS/TLS) across the site and on form submission, internal system access limited to personnel who need it, and anti-bot verification on the form. That said, no method of electronic transmission or storage is entirely free of risk.
In the event of a personal data breach, we will notify you and the competent authority within 3×24 hours, as required by Article 46 of the PDP Law.
9. Children's data
Veridia's site and services are intended for a business audience and are not directed at children under 18. We do not knowingly collect children's personal data. If you believe a child's data has been submitted to us, please contact us so we can delete it promptly.
10. Changes to this policy
We may update this policy as our services, technology, or legal obligations change. The "last updated" date at the top of this page always reflects the current version. For material changes — such as adding a new processing purpose — we will notify you by email where we hold your address.
11. Contact
Questions, requests, or objections regarding this policy and your personal data can be addressed to:
Veridia
Email: wisnu.wardhana@veridia.id
WhatsApp: +62 878-8772-9498
You also have the right to lodge a complaint with the competent personal data protection authority in Indonesia.