Privacy Policy

Last updated:

This Privacy Policy explains how PT Baris Kode Solution (“Baris Kode”, “we”, “us”) handles personal data when you visit bariskode.com, contact us, or work with us as a client. We collect as little as we can, we do not sell personal data, and we do not use advertising or tracking cookies.

This policy is written to comply with Indonesian law, in particular Law No. 27 of 2022 on Personal Data Protection (“UU PDP”), Law No. 11 of 2008 on Electronic Information and Transactions as amended (“UU ITE”) and Government Regulation No. 71 of 2019 (“PP 71/2019”). If you have a question about anything here, write to info@bariskode.com.

1. Who we are

PT Baris Kode Solution is an Indonesian software company that builds websites, mobile and desktop applications, AI and IoT solutions, and provides server security hardening, security audits and IT consultancy. For the personal data described in this policy, we are the data controller (pengendali data pribadi).

This policy covers this website and our client service engagements. Our own products, such as the MetaStrip Android app, have their own store listing and privacy information, which apply to those products. MetaStrip processes files on your device and does not upload them.

2. Data we collect

2.1 When you contact us

If you use the contact form on our website, we receive the information you enter: your name, email address, the service you are interested in and your message. The form is delivered by Web3Forms (api.web3forms.com), which forwards the submission to our email inbox.

If you email us or message us on WhatsApp, we receive your email address or phone number, your name as you present it, and the content of your messages.

2.2 When you browse the website

  • Server logs. Our website is hosted by Netlify. Like any web server, it records technical data for each request: IP address, browser user agent, the URL requested, the referring page and a timestamp. These logs are used for security and to keep the site running.
  • Privacy-friendly analytics. We use Cloudflare Web Analytics to count page views and understand which pages are useful. It does not use cookies, does not use local storage, does not fingerprint visitors and does not track you across other websites. Cloudflare processes request data, such as your IP address, to compute aggregated metrics, without storing it to identify or track you.

We do not use advertising networks, tracking pixels, social media widgets or third-party embeds. Our fonts are hosted on our own server, so loading a page does not send your data to Google Fonts or any other font provider. Your language choice is part of the URL, so we do not need to store it.

2.3 When you are our client

When we work together, we process business contact details (names, job titles, email addresses, phone numbers), project communications, contracts, invoices and payment records.

2.4 Data we process on behalf of clients

When we build, host, maintain or audit a system for a client, we may have access to personal data stored in that system. In that case the client is the data controller and we act as a data processor (prosesor data pribadi), processing the data only on the client’s documented instructions and under the confidentiality and security terms of the project agreement or data processing agreement. Questions about that data should be directed to the client concerned.

3. How and why we use data

Purpose Data Legal basis under UU PDP
Replying to your inquiry and preparing a proposal Contact form, email or WhatsApp data Your consent, and steps you request before entering a contract
Delivering a project and managing the relationship Client contact and project data Performance of a contract
Invoicing, accounting and tax Client and payment records Legal obligation
Keeping the website secure and available Server logs Legitimate interest
Understanding which pages are useful Aggregated analytics Legitimate interest

We do not use your data for automated decision-making or profiling, and we will not send you marketing messages unless you ask for them.

4. Sharing and service providers

We do not sell, rent or trade personal data. We share it only with the service providers we need to run our business, who process it on our behalf:

  • Web3Forms — delivering contact form submissions to our inbox.
  • Netlify — website hosting and server logs.
  • Cloudflare — cookieless website analytics.
  • Our email and messaging providers — receiving and answering your messages, including WhatsApp when you choose to contact us there.

We may also disclose personal data when required by Indonesian law, a court order or a lawful request from an authorized government agency, or to protect our rights, our clients or the public from fraud or security threats.

5. International transfers

Some of our service providers (Web3Forms, Netlify and Cloudflare) store or process data outside Indonesia. When personal data is transferred abroad, we rely on providers with an adequate level of protection and appropriate contractual and technical safeguards, as required by UU PDP.

6. How long we keep data

  • Inquiries are kept for as long as needed to respond and, if we work together, for the duration of the business relationship.
  • Client, contract and invoice records are kept for as long as Indonesian law requires, for example for tax and accounting purposes.
  • Server logs are kept only for the hosting provider’s short retention period.
  • Analytics are aggregated and do not identify individual visitors.

When data is no longer needed, we delete or anonymize it.

7. Security

We apply the same practices we use for our clients’ systems: encrypted connections (HTTPS with HSTS), a strict Content Security Policy, minimal third-party code, access limited to the people who need it, and regular review of our own infrastructure. No system is perfectly secure, but if a personal data breach occurs we will notify affected people and the relevant authority as required by UU PDP. To report a vulnerability, see our Security & Vulnerability Disclosure Policy.

8. Your rights

Under UU PDP you have the right to:

  • obtain information about how we process your personal data;
  • access and obtain a copy of your personal data;
  • correct inaccurate or incomplete data;
  • request deletion or destruction of your data;
  • withdraw your consent at any time, without affecting processing that has already taken place;
  • object to or request restriction of processing, including automated decision-making;
  • receive your data in a commonly used, machine-readable format and have it transferred to another controller;
  • file a complaint with the competent personal data protection authority.

If you are in the European Union, the United Kingdom or another country with its own data protection law (such as the GDPR), you may have similar or additional rights, and we will honor those requests as well.

To exercise any of these rights, email info@bariskode.com. We may need to confirm your identity before acting on a request. We will respond within the time limits required by UU PDP.

9. Cookies

This website does not set any cookies and does not use browser storage. See our Cookie Policy for details.

10. Children

Our website and services are intended for businesses and adults. They are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

Our website links to sites we do not control, such as WhatsApp, GitHub, X and Google Play. Their own privacy policies apply when you visit them.

12. Changes to this policy

We may update this policy when our practices or the law change. The “Last updated” date at the top shows when it was last revised. If a change significantly affects how we use your personal data, we will make it clear on this page and, where required, ask for your consent again.

13. Contact

Questions or requests about this policy or your personal data can be sent to PT Baris Kode Solution: