Privacy Policy
Last updated: 10 June 2026
This policy explains what personal data Pangaea Digital Labs collects through this website, why, and the choices you have. We process personal data in line with Indonesia’s Personal Data Protection Law (UU No. 27 of 2022, “UU PDP”).
1. Who we are
Pangaea Digital Labs (“we”, “us”) is the data controller for this website, based in Jakarta, Indonesia.
For any privacy question or request, contact us at [email protected].
2. What we collect
Contact form: when you submit the Adopt Assessment form we collect your name, company, email, phone number and your message.
Marketing source: to understand which channel brought you here, we attach the referring URL, landing page, and any campaign parameters (utm_*) to your enquiry. This is stored only for the current browser session.
Analytics (only with your consent): if you accept analytics, Google Analytics 4 collects standard usage data (pages viewed, approximate location from IP, device/browser) to help us improve the site.
3. Legal basis
Contact form: your consent, and the steps necessary to respond to your enquiry (UU PDP Art. 20).
Analytics cookies: your explicit consent, which you give via the banner and can withdraw at any time.
Privacy-friendly traffic measurement (Cloudflare Web Analytics): our legitimate interest in operating a secure, performant site — it sets no cookies and does not identify you.
4. Cookies & analytics
By default no analytics cookies are set. Google Analytics loads in Google Consent Mode with consent denied until you choose “Accept”. If you decline, no analytics cookies or identifiers are stored.
You can change your choice at any time by clearing this site’s storage in your browser; the consent banner will appear again on your next visit.
5. Who we share data with
Web3Forms (form delivery) — receives your contact-form submission so it can reach us by email. Processed in the United States.
Google Analytics (only if you consent) — processes usage data; data may be processed outside Indonesia.
Cloudflare (hosting, CDN, security, privacy-friendly analytics) — processes technical request data to serve and protect the site.
We never sell your personal data.
6. International transfer
Some processors above operate outside Indonesia. Where personal data is transferred abroad, we rely on your consent and on the processor’s own safeguards, consistent with UU PDP.
7. Retention
Contact enquiries are kept for as long as needed to respond and to manage the resulting relationship, then deleted. Analytics data is retained per Google Analytics settings in aggregate form.
8. Your rights
Under UU PDP you may request access to, correction of, or deletion of your personal data; withdraw consent; and object to or restrict certain processing.
To exercise any of these, email [email protected] and we will respond within a reasonable time.
9. Changes
We may update this policy; material changes will be reflected by the “last updated” date above.