Privacy Policy

1. Who we are

This Privacy Policy explains how Abadi Guru (trading as “Abadi Guru”), a Southeast Asian BPO and appointed marketing agency headquartered at Anggrek Mas 3 Blok A6, Batam Center, Kepulauan Riau, Indonesia (“Abadi Guru”, “we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit abadiguru.com, contact us by email, WhatsApp, or web form, use our client CRM portal, or engage us for BPO, telemarketing, digital marketing, website, or appointed marketing agent services.

We act as a data controller for personal data we collect about visitors and prospective clients through this website, and generally as a data processor for personal data we handle on behalf of clients inside contracted service delivery (for example contact lists, lead databases, and customer records processed under a client’s instructions).

2. Scope of this policy

This policy applies to personal data relating to individuals: website visitors, prospective and existing clients and their personnel, business partners and suppliers, and individuals whose data we process in the course of delivering services. It does not apply to third-party websites, applications, or platforms that we link to or operate on, which have their own privacy notices.

Legal documents on this site are published in English. Where a translated summary is provided, the English text prevails in the event of any inconsistency.

3. Personal data we collect

3.1 Data you give us

• Identity and contact data — name, job title, company name, country of origin, work email address, telephone or WhatsApp number.
• Enquiry and project data — the service interest, budget, target market, timeline, and any message, brief, or document you submit through our forms, email, or messaging channels.
• Client portal data — account credentials, role and permission settings, and records of actions taken inside the CRM portal we operate for client use.
• Commercial data — quotations, proposals, invoices, purchase orders, payment references, and contract correspondence.
• Service data — call notes, campaign reports, script revisions, and quality-assurance records created while delivering an engagement.

3.2 Data collected automatically

• Technical data — IP address, browser type and version, device type, operating system, referring page, and the pages and files you request, as recorded in standard server and content-delivery logs.
• Language preference — the language you select on this site is stored in your browser’s local storage so the site can remember it on your next visit.
• Enquiry source data — the page and campaign parameters that led to a form submission, where those parameters are present in the link you arrived from.

3.3 Data from third parties

We may receive contact and company data from publicly available business sources, professional networks, referral partners, and business-data providers for the purpose of legitimate business-to-business outreach. Where we obtain data indirectly, we take reasonable steps to confirm it was collected lawfully and to honour any opt-out request you make.

3.4 What we do not knowingly collect

We do not intentionally collect sensitive personal data (such as health data, biometric data, religious or political opinions, or precise geolocation) through this website, and we ask that you do not send such data to us in a general enquiry.

4. How and why we use personal data

We use personal data for the following purposes:

• Responding to enquiries — replying to consultation requests, preparing proposals, and following up on commercial discussions.
• Delivering services — staffing and running BPO pods, telemarketing campaigns, email marketing, social media management, website projects, and marketing agent representation.
• Operating the client CRM portal — creating and administering user accounts, controlling access, and maintaining audit records.
• Contracts, billing, and accounting — issuing quotations and invoices, processing payments, and meeting tax and corporate record-keeping obligations.
• Quality, training, and compliance — monitoring service quality, reviewing call and campaign records for accuracy and coaching, and maintaining evidence of compliance with client instructions and applicable law.
• Website security and improvement — diagnosing faults, preventing abuse and unauthorised access, and understanding which pages are used.
• Business communications — sending service updates and, where permitted, relevant business-to-business marketing that you can opt out of at any time.

5. Legal bases for processing

Where Indonesian law applies, we process personal data in line with Law No. 27 of 2022 on Personal Data Protection (UU PDP) and its implementing regulations. Where the EU or UK General Data Protection Regulation applies to you, we rely on the following legal bases:

• Contract — processing needed to take steps at your request before entering a contract, or to perform a contract with you or your employer.
• Legitimate interests — running and protecting our business, responding to business-to-business enquiries, and improving our services, balanced against your rights.
• Legal obligation — tax, accounting, employment, and regulatory record-keeping duties.
• Consent — where we ask for it specifically, for example for optional marketing communications or for the use of non-essential cookies. You may withdraw consent at any time.

6. Cookies, local storage, and similar technologies

This website is a static site. It does not set advertising or cross-site tracking cookies and does not run third-party analytics or advertising pixels.

• Local storage — a single key records your chosen interface language (English, Chinese, Indonesian, Malay, or Russian) so the site can apply it automatically on later visits. You can clear it through your browser settings at any time.
• Fonts and content delivery — pages load typefaces from Google Fonts and static assets from a content delivery network, which necessarily receive the IP address and request headers of your browser.
• Forms — enquiry and consultation forms are submitted through a third-party form-processing service, which receives the content of the form and your technical request data.

If we introduce analytics or advertising cookies in future, we will update this section and, where required, request consent before such cookies are set.

7. When we share personal data

We do not sell personal data. We disclose it only as follows:

• Service providers — hosting and content-delivery providers, form-processing services, email and messaging platforms, cloud database and application hosting for the CRM portal, and accounting or payment providers, each acting under contractual confidentiality and data-protection terms.
• Within our delivery teams — personnel and supervisors who need the data to answer your enquiry or deliver the contracted service, subject to confidentiality obligations.
• Clients, as a processor — where we process personal data on a client’s behalf, we disclose it to that client and to sub-processors authorised under the relevant engagement.
• Professional advisers — auditors, insurers, and legal advisers under duties of confidentiality.
• Authorities — courts, regulators, and law-enforcement bodies where disclosure is required by law or necessary to establish, exercise, or defend legal claims.
• Business transfers — a successor entity in the event of a merger, acquisition, restructuring, or sale of assets, subject to equivalent protection of the data transferred.

8. International transfers

We operate from Indonesia and work with clients and service providers in other countries, including Singapore, Malaysia, and the European Union. Personal data may therefore be transferred to, stored in, or accessed from jurisdictions other than your own. Where data originates in a jurisdiction that restricts exports (for example the EEA or the UK), we put appropriate safeguards in place, such as contractual data-protection clauses and provider terms that maintain an equivalent level of protection.

9. How long we keep data

We keep personal data only for as long as needed for the purpose it was collected for, plus any period required by law:

• Enquiries that do not become engagements — normally up to 24 months from the last contact, then deleted or anonymised.
• Client, contract, and billing records — for the term of the engagement and then for the period required by Indonesian tax and corporate law (generally 10 years for accounting records).
• Service delivery records — per the retention schedule agreed in the engagement, and in any event no longer than the client instructs.
• Portal accounts and logs — while the account is active and for a reasonable period afterwards for security and audit purposes.
• Marketing opt-outs — we keep a minimal suppression record so we do not contact you again in error.

10. How we protect personal data

We apply administrative, technical, and organisational safeguards appropriate to the risk, including role-based access control, unique credentials for portal users, encrypted transport (HTTPS) for this website and the portal, restricted access to production systems, confidentiality undertakings for staff and contractors, and documented incident-response steps. No method of transmission or storage is completely secure; if a personal-data breach affects you, we will notify you and the relevant authority as required by applicable law.

11. Your rights

Subject to applicable law, you may have the right to:

• be informed about how your personal data is processed and to receive a copy of it;
• request correction of inaccurate or incomplete data;
• request erasure or restriction of processing in the circumstances the law allows;
• object to processing based on legitimate interests, and to object at any time to direct marketing;
• request portability of data you provided to us, where that right applies;
• withdraw consent you previously gave, without affecting processing carried out before withdrawal;
• lodge a complaint with a supervisory authority — in Indonesia, the data-protection authority under UU PDP; in the EU or UK, your national supervisory authority.

To exercise a right, email ask.abadiguru@gmail.com with enough detail for us to identify you and your request. We respond within the period required by law, normally 30 days, and may need to verify your identity first. If your data is processed on behalf of a client, we will refer your request to that client, who controls it.

12. Marketing communications

We send business-to-business marketing only where we have a lawful basis to do so, and every message includes an unsubscribe route. You can also opt out by emailing us at ask.abadiguru@gmail.com. Opting out of marketing does not stop us from contacting you about an active engagement, an invoice, or a legal matter.

13. Children

Our website and services are directed at businesses and are not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Third-party links and platforms

This website links to third-party sites and platforms, including WhatsApp, Facebook, Instagram, TikTok, YouTube, and our client CRM portal. We do not control those services and are not responsible for their privacy practices. Review their notices before submitting personal data to them.

15. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The revised version takes effect when published on this page, and the “last updated” date above will change. Where a change is material, we will take reasonable steps to bring it to the attention of clients with active engagements.

16. How to contact us

Questions, requests, or complaints about privacy can be sent to the address in the box below. If you are not satisfied with our response, you may escalate the matter to the competent supervisory authority.