Privacy Policy

01 Who this notice comes from

This Privacy Policy explains how PT Berdikari Cipta Sejahtera ("BCS Group", "we", "us") collects, uses, stores, and protects personal data in connection with the website bcsgroup.id and the regulatory consulting services we provide.

For the purposes of Law No. 27 of 2022 on Personal Data Protection ("UU PDP"), PT Berdikari Cipta Sejahtera acts as the Personal Data Controller. Our registered office is at Graha Samali, 1st Floor, Suite 1009, Jl. H. Samali No. 31B, Kalibata, Jakarta Selatan 12740, Indonesia.

02 What this notice covers

This notice applies to:

• Visitors who browse any page of bcsgroup.id.
• Prospective clients who contact us by email after visiting this website.
• Client representatives whose data we process while delivering homologation, certification, customs, and permit services.

It does not apply to third-party websites we link to, or to employee and recruitment data, which we handle under separate internal policies.

03 Personal data we collect

We keep collection to the minimum we need. This website has no registration form, no online payment, and no public user account.

• Technical visit data — your IP address, together with the date and time of your visit, is recorded by our server to produce visitor statistics. One record is kept per IP address per day. We do not use it to build a profile of you.
• Language preference — the interface language you choose (English, Bahasa Indonesia, or Chinese) is saved in your browser's local storage under the key "bcs-lang". It stays on your device, is not transmitted to us, and you can clear it at any time from your browser settings.
• Data you send us voluntarily — when you write to cs-bcs@berdikari-cs.com we receive whatever you include: your name, business email address, company, phone number, the content of your message, and any attachments.
• Client engagement data — when we act for you, we process the company and personal data that the authorities require for the relevant filing, such as identity documents of directors or authorised signatories, powers of attorney, technical specifications, and shipping documents.
• Administrator sessions — a session cookie is issued only to BCS staff who sign in to the site's content management system. Ordinary visitors are never issued this cookie.

We do not use advertising cookies, marketing pixels, cross-site trackers, or automated profiling on this website.

04 Our lawful basis for processing

Under Article 20 of UU PDP, we process personal data on the following grounds:

• Legitimate interest — keeping the website secure and available, and producing aggregate statistics on how it is used.
• Performance of a contract, or steps taken at your request before entering one — replying to your enquiry and delivering the services you engage us for.
• Compliance with a legal obligation — submitting the documents Indonesian authorities require for homologation, certification, customs, and permit processes, and keeping the records that tax and company law oblige us to keep.
• Consent — where we ask for it explicitly, for example before sending you regulatory updates. You can withdraw consent at any time.

05 How we use personal data

• Replying to enquiries and preparing proposals.
• Preparing, submitting, and following up on filings with the competent authorities on your behalf.
• Communicating with you about ongoing matters, invoices, and regulatory changes that affect you.
• Maintaining the security, integrity, and availability of this website.
• Producing aggregate statistics about website traffic.
• Meeting our legal, tax, and archival obligations.

06 Who we share it with

We do not sell, rent, or trade personal data. We disclose it only where it is necessary:

• Government authorities and appointed testing bodies — for example the Ministry of Transportation and its type-testing facility, the Directorate General of Customs and Excise, the Ministry of Industry, and the Ministry of Trade, strictly to the extent a filing requires.
• Service providers — our website hosting and email providers, who process data on our instructions and for no other purpose.
• Professional advisers — lawyers, accountants, and auditors, all bound by confidentiality.
• Where the law requires it — in response to a valid order from a court or an authorised agency.

Every disclosure is limited to the data the recipient actually needs.

07 Third-party services on this website

This website loads its typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When a page loads, your browser contacts Google's servers directly, which makes your IP address and browser details visible to Google under Google's own privacy policy. We receive no data from Google in return.

Apart from font delivery, no third-party analytics, advertising, or social media scripts run on this website.

08 Transfers outside Indonesia

Our website and email systems are operated in Indonesia. If a matter requires us to send data to a principal, manufacturer, or affiliate abroad, we do so only to complete the work you have engaged us for, and only where the receiving country offers an adequate level of protection or the recipient is bound by contractual safeguards, in line with Articles 56 and 57 of UU PDP.

09 How long we keep it

• Website visit logs — 12 months, then deleted.
• Language preference — until you clear your browser storage.
• Enquiry correspondence that does not lead to an engagement — 24 months.
• Client files and engagement records — for the duration of the engagement, and afterwards for as long as tax, customs, and company law require, generally 10 years.

Where no retention period is fixed by law, we keep data only for as long as the purpose it was collected for still exists.

10 How we protect it

• Encrypted transport (HTTPS) across the whole website.
• Password-protected, role-limited access to the content management system.
• Access to client files restricted to the staff working on the matter.
• Confidentiality obligations written into employment and vendor contracts.

No system is completely secure. If a personal data breach occurs that poses a risk to you, we will notify you and the supervisory authority within 3 x 24 hours, as Article 46 of UU PDP requires.

11 Your rights over your data

Under UU PDP you have the right to:

• Be told what personal data we hold about you and why.
• Obtain a copy of that data.
• Have inaccurate or incomplete data corrected.
• Have your data deleted, where we have no continuing legal reason to keep it.
• Withdraw consent you gave earlier.
• Object to processing, or ask us to restrict it.
• Receive your data in a commonly used format, or have it transferred to another controller.
• Lodge a complaint with the supervisory authority.

To exercise any of these rights, email us with enough detail to identify you and your request. We acknowledge within 3 x 24 hours and complete the request within 14 days, as Article 30 of UU PDP requires. There is no charge. We may ask you to verify your identity before we act.

12 Children

This is a business-to-business website. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

13 Links to other websites

Our pages link to government regulations, official portals, and industry sources. We are not responsible for how those sites handle personal data. Read their own privacy notices before you provide anything to them.

14 Your choices

• Clear the stored language preference at any time through your browser's site-data settings.
• Use your browser's private mode or a VPN if you would rather your IP address were not logged.
• Ask us to delete correspondence you have sent us, where no legal obligation requires us to keep it.

15 Changes to this notice

We may update this notice as our practices or the law change. The date shown at the top of this page identifies the current version. We will highlight material changes on the homepage for a reasonable period.

16 Contact us

For any question about this notice, or to exercise your rights, contact PT Berdikari Cipta Sejahtera at Graha Samali, 1st Floor, Suite 1009, Jl. H. Samali No. 31B, Kalibata, Jakarta Selatan 12740, or by email: