Privacy Policy

Controller and contact

The data controller is PT Siklus Karya Global (ROBRIES), Sinar Gedangan Warehouse A-19, Gemurung, Gedangan, Sidoarjo, East Java 61254, Indonesia. Privacy questions or requests may be sent to hello@robries.com.

Data we process

• Technical data such as IP address, device/browser type, request time, security logs, and approximate country inferred from the network.
• Preferences such as language, shopping market, currency, and cookie/privacy choices.
• Account and contact data such as name, email, telephone number, country, and securely managed credentials.
• Transaction and request data such as products, quantities, product options, shipping country, cart contents, and customer-service communications.
• Advertisement interaction data only after advertisement consent, including page views, product views, add-to-cart, checkout, registration, and contact clicks sent through Meta Pixel.

Purposes and legal bases

• Operating and securing the site, preventing abuse, and providing requested functionality: legitimate interests and delivery of the requested service.
• Managing accounts, carts, orders, shipping, and pre-contract/contract communications: contract performance or steps taken at your request.
• Keeping legally required records and responding to authorities: legal obligation.
• Running non-essential advertisement measurement: consent, which may be withdrawn without affecting earlier lawful processing.

Recipients and third parties

Data is shared only as needed with hosting/infrastructure providers, account and API service providers, payment or delivery partners involved in a transaction, professional advisers, and authorities where legally required. Meta Platforms receives advertisement events only after advertisement consent.

International transfers

ROBRIES operates from Indonesia and service providers may process data in other countries. Where EEA/UK law applies, we use an appropriate transfer mechanism, such as an adequacy decision or standard contractual clauses, together with supplementary safeguards where required.

Retention and security

We retain data for the collection purpose, the account/contract relationship, dispute resolution, security, and applicable accounting or statutory periods. It is then deleted or anonymised. Safeguards include encrypted transport, access controls, least privilege, logging, and risk-appropriate system maintenance.

Your rights

• Request access, correction, erasure, restriction, and portability where applicable.
• Object to processing based on legitimate interests and withdraw consent at any time.
• Complain to a data-protection authority in your residence, workplace, or the place of an alleged infringement where GDPR applies.

Cookie choices, children, and changes

The site is not directed to children and we do not knowingly collect children's data. You may reject every non-essential category and reopen Privacy Settings from the footer. We update the date of this notice when material changes are made.