Privacy Policy

This Privacy Policy describes how kir.vintageworld.web.id (referred to as “we,” “us,” or “our”), as the operator of the website https://kir.vintageworld.web.id/, collects, uses, processes, and protects the personal information you, as a user or visitor (“you,” “your”), provide to us or that we collect when you use our website, services, and interactions related to our Home Exterior niche.

We are committed to protecting your privacy and handling your personal data in a transparent and secure manner. This policy aims to help you understand our practices concerning data collection, use, and disclosure, as well as your rights regarding your personal information.

1. Introduction and Scope of this Policy

Welcome to kir.vintageworld.web.id, your trusted resource for Home Exterior solutions. This Privacy Policy applies to all information collected through our website at https://kir.vintageworld.web.id/ and any related services, sales, marketing, or events.

By accessing or using our website, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service. If you do not agree with the terms of this Privacy Policy, please do not access or use this website.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the website after we post modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

2. Who We Are

3. Definitions

To help you better understand this Privacy Policy, we define the following key terms:

  • Personal Data (or Personal Information): Any information that relates to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
  • Non-Personal Data: Information that cannot be used to identify you, such as aggregated and anonymized data.
  • Processing: Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
  • Data Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. For the purposes of this Privacy Policy, kir.vintageworld.web.id is the Data Controller.
  • Data Processor: A natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Data Controller.
  • Data Subject: The individual to whom Personal Data relates. That’s you!
  • Consent: Any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal Data relating to him or her.
  • Cookies: Small text files placed on your computer or mobile device when you visit a website. They are widely used to make websites work or work more efficiently, as well as to provide information to the owners of the site.

4. The Information We Collect

We collect various types of information, including Personal Data and Non-Personal Data, to provide and improve our services to you.

4.1. Personal Data You Voluntarily Provide to Us:
This includes information you provide directly to us when you interact with our website, such as:

  • Identity Data: Your first name, last name, username or similar identifier.
  • Contact Data: Your email address, postal address, telephone number, and social media handles (if used for communication with us). This is crucial for home exterior consultations, quotes, and on-site visits.
  • Project Data (Niche Specific): Information related to your home exterior project, such as:
    • Details about your property (e.g., type of home, current exterior conditions).
    • Specific project requirements (e.g., roofing replacement, siding installation, window upgrades, landscaping ideas, deck construction, painting, masonry work).
    • Desired style, materials, colors.
    • Budget ranges and desired timelines.
    • Photos or videos of your existing property or inspiration you provide.
    • Measurements or dimensions you might share.
  • Demographic Data: Age, gender, or household income, if provided voluntarily in surveys or feedback forms.
  • Financial Data: Payment card details (e.g., credit card number, expiration date, security code) if you make a purchase directly through our site (though typically processed by third-party payment processors who handle this data securely).
  • Transaction Data: Details about services you have inquired about or purchased from us.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.
  • Inquiry and Feedback Data: Information you provide when you contact us with questions, leave comments, participate in surveys, or provide testimonials.

4.2. Information We Collect Automatically (Non-Personal Data & PII when linked):
When you visit our website, certain information is automatically collected, which may include Personal Data when linked to your identity or Non-Personal Data when anonymized:

  • Technical Data:
    • Internet Protocol (IP) Address: Used to connect your computer to the internet, often revealing your approximate geographical location.
    • Browser Type and Version: (e.g., Chrome, Firefox, Safari).
    • Time Zone Setting and Location:
    • Browser Plug-in Types and Versions:
    • Operating System and Platform: (e.g., Windows, macOS, Android, iOS).
    • Device Type: (e.g., desktop, tablet, mobile).
  • Usage Data:
    • URL Clickstream Data: The full Uniform Resource Locators (URL) clickstream to, through, and from our site (including date and time).
    • Pages You Viewed or Searched For:
    • Page Response Times:
    • Download Errors:
    • Length of Visits to Certain Pages:
    • Page Interaction Information: Such as scrolling, clicks, and mouse-overs.
    • Methods Used to Browse Away from the Page:
  • Cookie Data: Information collected through cookies and similar tracking technologies (web beacons, pixels) about your activity on our website. Please refer to Section 9 for more details.

4.3. Information We Collect from Third Parties:
We may receive personal information about you from various third parties, such as:

  • Analytics Providers: Such as Google Analytics, which provide us with data about website traffic and user behavior.
  • Advertising Networks: Who may provide us with information about how you interact with our ads on other platforms.
  • Social Media Platforms: If you, for example, interact with our social media profiles or choose to link your social media account to our services.
  • Publicly Available Sources: From which we might derive general demographic or location data.

4.4. Sensitive Personal Data:
We do not intentionally collect any sensitive personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). We also do not collect any information about criminal convictions and offenses. If we ever require such data for a specific, legitimate purpose, we will explicitly ask for your clear consent and provide a clear explanation for its necessity.

5. How We Use Your Information (Purposes and Legal Bases)

We use the information we collect for various purposes, primarily to provide, maintain, and improve our website and services, and to communicate with you. We process your Personal Data based on the following legal grounds:

5.1. To Fulfill a Contract or Take Steps at Your Request Prior to Entering a Contract:

  • To provide you with information, products, or services that you request from us (e.g., responding to inquiries, providing quotes for home exterior projects).
  • To conduct initial consultations, site visits, or project evaluations you request.
  • To process and fulfill any orders or purchases you make for materials, services, or consultations.
  • To manage our relationship with you, including sending service messages, updates, and appointment reminders.

5.2. For Our Legitimate Interests (and those of third parties) where your interests and fundamental rights do not override those interests:

  • To Improve Our Website and Services: For data analysis, testing, research, statistical, and survey purposes. This helps us understand what content is most relevant to home exterior interests.
  • To Personalize Your Experience: To tailor content, offers, and recommendations for home exterior solutions based on your interests and past interactions.
  • To Administrate and Protect Our Business and Website: Including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data.
  • To Deliver Relevant Website Content and Advertisements to You: And measure or understand the effectiveness of the advertising we serve to you.
  • For Marketing and Promotion: To inform you about other products, services, and events we offer that are similar to those you have already purchased or enquired about, or that we believe may be of interest to you within the Home Exterior niche. This includes sending newsletters, promotional emails, and updates (you can opt-out at any time).
  • For Fraud Prevention and Security: To detect and prevent fraudulent, abusive, or unlawful activities on our website.
  • To Enforce Our Terms and Conditions:

5.3. Where We Have Your Explicit Consent:

  • To send you direct marketing communications (e.g., newsletters) where we have requested and received your explicit consent.
  • To place certain types of non-essential cookies on your device (as detailed in Section 9).
  • For any other purpose where we specifically request your consent, and you grant it.

5.4. To Comply with a Legal or Regulatory Obligation:

  • To maintain records, such as for tax and accounting purposes.
  • To respond to requests from government or law enforcement authorities.
  • To establish, exercise, or defend our legal rights.

6. How We Share Your Information

We may share your Personal Data with the following categories of recipients:

6.1. Service Providers and Partners:
We engage third-party companies and individuals to facilitate our services, perform website-related services, or assist us in analyzing how our website is used. These third parties may have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. These include:

  • IT Service Providers: For hosting, maintenance, security, and technical support.
  • Analytics Providers: Such as Google Analytics, to monitor and analyze website usage.
  • Marketing and Advertising Partners: To help us manage and execute marketing campaigns, including retargeting services.
  • Payment Processors: To securely handle payment transactions if you purchase services or products from us.
  • Professional Advisors: Such as lawyers, accountants, or consultants, who require access to ensure compliance with legal obligations.
  • Sub-contractors or Partner Tradespeople (Niche Specific): For home exterior projects, we may, with your explicit consent or as part of fulfilling a contract, share your project details and contact information with trusted sub-contractors (e.g., roofers, landscapers, window installers) who will directly perform parts of the work you commission. We will ensure these partners adhere to strict data protection standards.

6.2. Third-Party Business Transfers:
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your Personal Data may be transferred to the acquiring entity or successor in interest. We will notify you via email and/or a prominent notice on our website of any such change in ownership or uses of your Personal Data, as well as any choices you may have regarding your Personal Data.

6.3. Legal and Law Enforcement:
We may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to:

  • Comply with a legal obligation or valid legal process (e.g., subpoenas, court orders, government requests).
  • Protect and defend the rights or property of kir.vintageworld.web.id.
  • Prevent or investigate possible wrongdoing in connection with the website.
  • Protect the personal safety of users of the website or the public.
  • Protect against legal liability.

6.4. With Your Consent:
We may share your information with any other third party with your explicit consent.

We will never sell your Personal Data to third parties for their independent marketing or promotional purposes without your explicit consent.

7. International Data Transfers

Our servers and operations are primarily based in Indonesia. However, as an online platform, your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.

If you are located outside Indonesia and choose to provide information to us, please note that we transfer the data, including Personal Data, to Indonesia and process it there.

When we transfer your Personal Data to jurisdictions outside of your region (e.g., if you are in the European Economic Area (EEA) and your data is processed outside the EEA), we will ensure appropriate safeguards are in place. These safeguards may include:

  • Transferring Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data by the European Commission.
  • Utilizing specific contracts approved by the European Commission which give Personal Data the same protection it has in Europe (known as Standard Contractual Clauses or SCCs).
  • Where we use providers based in the US, we may transfer data to them if they are part of a framework that requires them to provide similar protection to Personal Data shared between Europe and the US.

By submitting your information to us, you consent to the transfer of your Personal Data for the purposes described in this Privacy Policy.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

8. Data Security

The security of your Personal Data is important to us. We implement appropriate technical and organizational measures designed to protect your Personal Data from unauthorized access, use, alteration, disclosure, or destruction. These measures include:

  • Encryption: We use SSL/TLS encryption for data transmitted over the internet to protect all communications between your browser and our website.
  • Access Controls: Limiting access to your Personal Data to only those employees, contractors, and third parties who have a legitimate business need to know and who are subject to confidentiality obligations.
  • Firewalls and Network Security: Implementing firewalls and other network security measures to prevent unauthorized access.
  • Data Minimization: Collecting only the Personal Data that is necessary for the stated purposes.
  • Regular Security Audits: Regularly reviewing and updating our security practices.
  • Employee Training: Training our staff on data protection and privacy best practices.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. In the event of a data breach, we will comply with applicable laws and regulations regarding notification to affected individuals and supervisory authorities.

9. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Our retention periods are determined based on:

  • The length of time we have an ongoing relationship with you and provide services to you (e.g., for as long as you have an account with us or are subscribed to our newsletters).
  • Whether there is a legal obligation to which we are subject (e.g., certain laws require us to keep records of your transactions for a certain period before we can delete them).
  • Whether retention is advisable considering our legal position (e.g., in regard to applicable statutes of limitations, litigation, or regulatory investigations).

For example:

  • Inquiries and project-related data may be kept for several years after project completion to facilitate follow-up services or warranty claims.
  • Marketing consent data is retained until you withdraw consent.
  • Website usage data (e.g., Google Analytics) is typically retained for 26 months.

When we no longer need to process your Personal Data, we will either securely delete or anonymize it. If this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.

10. Your Data Protection Rights

Depending on your location and applicable data protection laws (such as GDPR for users in the EEA, or CCPA for California residents), you may have the following rights regarding your Personal Data:

10.1. Right to Access:
You have the right to request copies of your Personal Data. We may charge you a small fee for this service if the request is manifestly unfounded or excessive.

10.2. Right to Rectification:
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete information you believe is incomplete.

10.3. Right to Erasure (“Right to be Forgotten”):
You have the right to request that we erase your Personal Data, under certain conditions. These conditions include:

  • The Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
  • You withdraw your consent, and there is no other legal ground for the processing.
  • You object to the processing and there are no overriding legitimate grounds for the processing.
  • The Personal Data has been unlawfully processed.
  • The Personal Data has to be erased for compliance with a legal obligation.

10.4. Right to Restrict Processing:
You have the right to request that we restrict the processing of your Personal Data, under certain conditions. These conditions apply when:

  • You contest the accuracy of your Personal Data, for a period enabling us to verify the accuracy.
  • The processing is unlawful, and you oppose the erasure of the Personal Data and request the restriction of its use instead.
  • We no longer need the Personal Data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims.
  • You have objected to processing pending the verification whether our legitimate grounds override yours.

10.5. Right to Data Portability:
You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions, provided it does not adversely affect the rights and freedoms of others. This right applies only to Personal Data you have provided to us that is processed by automated means and based on your consent or for the performance of a contract.

10.6. Right to Object to Processing:
You have the right to object to our processing of your Personal Data, under certain conditions:

  • Where we are relying on a legitimate interest as our legal basis for processing, and there is something about your particular situation which makes you want to object.
  • Where we are processing your Personal Data for direct marketing purposes.

10.7. Rights in Relation to Automated Decision Making and Profiling:
We do not make decisions about you based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. If we were to do so, you would have the right to object to such a decision and request human intervention.

10.8. Right to Withdraw Consent:
Where we are relying on consent to process your Personal Data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

10.9. Right to Lodge a Complaint:
You have the right to lodge a complaint with a supervisory authority if you feel that our processing of your Personal Data infringes data protection laws. While you have the right to contact your local data protection authority, we encourage you to contact us first so we can address your concerns directly.

How to Exercise Your Rights:
If you wish to exercise any of these rights, please contact us at [email protected]. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

11. Cookies and Other Tracking Technologies

Our website uses “Cookies” and similar tracking technologies to enhance your experience, analyze website usage, and for marketing purposes.

11.1. What are Cookies?
Cookies are small data files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work, or work more efficiently, as well as to provide reporting information.

11.2. Types of Cookies We Use:

  • EssentiaL Cookies: These cookies are strictly necessary to provide you with services available through our website and to use some of its features, such as accessing secure areas. Without these cookies, services like shopping carts or e-billing cannot be provided.
  • Performance and Functionality Cookies: These cookies are used to enhance the performance and functionality of our website but are non-essential to its use. However, without these cookies, certain functionality (like remembering your preferences) may become unavailable.
  • Analytics and Customization Cookies: These cookies collect information that is used either in aggregate form to help us understand how our website is being used or how effective our marketing campaigns are, or to help us customize our website for you. We typically use Google Analytics for this purpose.
  • Advertising Cookies: These cookies are used to make advertising messages more relevant to you and your interests. They perform functions like preventing the same advertisement from continuously reappearing, ensuring that ads are properly displayed for advertisers, and in some cases, selecting advertisements that are based on your interests.

11.3. Third-Party Cookies:
In addition to our own cookies, we may also use various third-parties’ cookies to report usage statistics of the website, deliver advertisements on and through the website, and so on.

11.4. Your Choices Regarding Cookies:
You have the right to decide whether to accept or reject cookies. You can exercise your cookie preferences by:

  • Cookie Consent Banner: Upon your first visit, you will typically see a banner allowing you to accept or reject certain categories of cookies.
  • Browser Settings: Most web browsers allow you to control cookies through their settings. You can usually find these settings in the ‘options’ or ‘preferences’ menu of your browser.
  • Opt-out Tools: You can opt-out of some third-party advertising cookies by visiting the Network Advertising Initiative Opt-Out Page or the Digital Advertising Alliance’s (DAA) WebChoices Tool.
  • Google Analytics Opt-out: You can prevent your data from being used by Google Analytics by installing the Google Analytics opt-out browser add-on.

Please note that if you choose to refuse cookies, you may not be able to use the full functionality of our website.

12. Third-Party Websites/Links

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. This Privacy Policy applies solely to information collected by our website.

13. Children’s Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect Personal Data from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us at [email protected]. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top of this Privacy Policy. We may also notify you via email or other prominent notice on our website prior to the change becoming effective, if the changes are significant.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the website after any such changes constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, or if you wish to exercise any of your rights regarding your Personal Data, please do not hesitate to contact us at:

Email: [email protected]

We are committed to resolving any complaints about our collection or use of your Personal Data.

© Copyright 2026, All Rights Reserved.
Back to top button