When processing your data, we conform to the requirements of the GDPR. This means we:

clearly specify our purposes before we process personal data, by using this Privacy Policy;

limit our collection of personal data to only the personal data needed for legitimate purposes;

always explicitly ask for your permission to process your personal data in cases where your permission is required;

take appropriate security measures to protect your personal data and we demand the same from parties who process personal data on our behalf;

respect your right to inspect or have your personal data held by us corrected or deleted.

Project Kratom is the party responsible for all data processing. In this privacy policy, we will explain which personal data we collect and for which purposes. We recommend that you read it carefully.

Purposes

Order

We process your personal data when handling your order. We may share your data with the delivery service to have your order delivered. We may also obtain information on your payment from your bank or credit card company.

For this purpose, we use your payment details, phone number, invoice address, email address and name and address details. We need this data in order to be able to process your order in the best way possible. We store this information for six months after your order has been completed and up to five years thereafter (the Indonesian legal retention period), provided you a remain a client with us. Otherwise, the provisions stipulated under ‘Retention period’ below apply.

Account

We process your personal data when you register as a customer. In order to create an account on our website and become one of our clients, we require your name and address, e-mail address, telephone number, invoice address, and self-chosen username and password.

We save this data for the purpose of convenience and to establish communication, if necessary. At all times you can adjust all the information registered on your account. We store this information until you cancel the account.

Contact

You can use our contact form to ask questions or make any request.

For this purpose, we use your email address, name and address details. We need this data in order to be able to answer you in the best way possible. We store this information until we are sure that you are satisfied with our response, provided you a remain a client with us. Otherwise, the provisions stipulated under ‘Retention period’ below apply.

Newsletter

We have a newsletter to inform those interested in our products and/or services. Each newsletter contains a link enabling you to cancel your subscribtion to our newsletter. Your e-mail address is added to the list of subscribers, only with your permission. We store this information until you cancel your subscription.

Third parties

In order to be able to offer our products and services, we collaborate with third parties. We share our clients’ personal data with these third parties only insofar necessary to carry out specific operations. Any collaboration between Project Kratom and a third party is subject to provisions concerning data protection prohibiting the use of personal data provided by Project Kratom for any purpose other than that assigned by Project Kratom. Under no circumstance is a third party permitted to use personal data  provided by Project Kratom for commercial purposes. Third parties reserve the right to store and internally share anonymised meta-data to improve their services. At all times you maintain the right to request a list of third parties and the (types of) personal data they process related to your person. You may request such a list via the channels of communication listed on our website, projectkratom.com. You will receive a response to your request within 30 days.

Retention period

We store your data for as long as you are a client with us. This means that we maintain and keep your client profile until you notify us that you no longer desire to use our services or cancel your account. Such a notification also functions as a request to be forgotten. We are required to keep invoices with your (personal) information due to relevant administrative obligations, this information is safely stored until the relevant term for these obligations expires. Personnel no longer has access to your client profile nor any related documents.

Your rights

Based on valid Indonesian and European law you, as a concerning party, have certain rights regarding personal data that is processed by or on behalf of us. Below you may find an explanation of these rights and how you, as a concerning party, can invoke these rights. In principle to prevent abuse we only send invoices and copies of your data to email addresses that you have provided to us. Should you wish to receive this data on another email address we will ask you to include that email address in your request. We maintain an administration of concluded requests; in case of a request to be forgotten we will maintain an administration of anonymised data. At all times you maintain the right to lodge a complaint with the relevant data protection authority if you suspect that we mistreat or misuse your personal data.

Right to inspection

At all times you maintain the right to view the data we process related to your person. You may request such a viewing via the channels of communication listed on our website, projectkratom.com. You will receive a response to your request within 30 days. If your request is approved we will send you, via the email address known to us, a copy of all data with an added overview of processors managing this data while also mentioning the security measures under which we store this data.

Right to rectification

At all times you maintain the right to have the data we process related to your person adjusted. You may request such an adjustment via the channels of communication listed on our website, projectkratom.com. You will receive a response to your request within 30 days. If your request is approved we will send you, via the email address known to us, a confirmation that the data has been adjusted.

Right to restriction of processing

At all times you maintain the right to limit the data we process related to your person. You may request such limiting via the channels of communication listed on our website, projectkratom.com. You will receive a response to your request within 30 days. If your request is approved we will send you, via the email address known to us, a confirmation that the processing of your data is limited until you choose to cancel said limitation.

Right to data portability

At all times you maintain the right to request for the data we process related to your person to be processed by a third party of choice. You may submit such a request via the channels of communication listed on our website, projectkratom.com. You will receive a response to your request within 30 days. If your request is approved we will send you, via the email address known to us, your (personal) invoices or copies of data that we, or third parties on behalf of us, have processed. It is highly likely that in such a case we can no longer offer you our services, as we can no longer guarantee the safety of the aforementioned data.

Right to object and other rights

At all times you maintain the right to object to the processing of your personal data by us or by third parties on our behalf. In case of such an objection we will immediately cease all processing of your data while your objection is being investigated and handled. We will also return all invoices and/or copies of personal data related to you that we, or third parties on our behalf, have processed up until that point and cease processing your data thereafter. This includes automated decision-making processes or profiling.

Privacy policy changes

At all times we maintain the right to alter our privacy policy. This page however always displays the most recent version of our privacy policy. Should this privacy policy be amended or redrafted in a way that affects the ways in which we process recently gathered data related to your person, we will notify you of such a change via email.