Legal
Privacy Policy
Last updated: 3 July 2026
Pyrmont is committed to protecting the privacy of users of pyrmont.co.id. This policy explains what data we collect, how we use it, and your rights regarding that data.
1. Data We Collect
Data you provide
When placing an order, we collect your name, email address, phone number, and shipping address. This information is required to process and deliver your order.
Transaction data
Order details, purchased products, payment method (without storing card data), and transaction history are retained for administrative and customer support purposes.
Technical data
IP address, browser type, pages visited, and general usage data are collected automatically for security and service improvement purposes.
2. How We Use Your Data
- —Processing and fulfilling your orders
- —Confirming payment and shipping status
- —Sending order updates via email and WhatsApp
- —Providing customer support
- —Improving the shopping experience on our website
- —Meeting legal and accounting obligations
3. Data Storage & Security
Your data is stored on servers located in Singapore (Supabase) with industry-standard encryption in transit and at rest. We retain order data for a minimum of 5 years for accounting and legal compliance purposes.
We never sell your personal data to third parties. Access to customer data is restricted to authorised Pyrmont team members only.
5. Third-Party Services
Midtrans
Payment gateway for processing payments. Card data is encrypted directly by Midtrans and never passes through our servers.
RajaOngkir
Shipping cost calculation service. The destination city is sent to retrieve courier options and shipping rates.
Supabase
Database and order data storage. Data is stored with at-rest and in-transit encryption on servers located in Singapore.
Meta (WhatsApp Business API)
Used to send order notifications to our merchant team. Your phone number submitted at checkout may be included in internal order summaries sent to our team. We do not send unsolicited marketing messages via WhatsApp.
Meta (Instagram Graph API)
Used to display our Instagram feed on the homepage. No personal user data is collected through this integration.
Google Analytics
Website usage analytics. Data is collected anonymously and used to understand how visitors interact with our website. No personally identifiable information is shared.
6. Your Rights
You have the right to:
- —Request access to the personal data we hold about you
- —Request correction of inaccurate data
- —Request deletion of your data (subject to legal obligations)
- —Opt out of the use of your data for marketing purposes
To exercise these rights, contact us at hello@pyrmont.co.id.
7. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via email or a notice on the website. The date of the most recent update is always displayed at the top of this page.
8. Contact Us
Questions about this privacy policy may be directed to us at:
Pyrmont
Email: hello@pyrmont.co.id
Instagram: @pyrmont.indonesia