Overview
PT. Mitra Borneo Cemerlang is committed to protecting the privacy of our clients, partners, and website visitors. This Privacy Policy explains what information we collect, why we collect it, and how we handle it in connection with our corporate vehicle rental services.
Data We Collect
When you engage with our services or contact us, we may collect the following categories of information:
- Identity data: full name, position, and institutional affiliation of authorised representatives.
- Contact data: business email address, phone number, and office address.
- Contractual data: details required to draft and execute rental agreements, including NPWP and institutional registration numbers.
- Usage data: information about how you interact with our website (pages visited, referral source, browser type).
- Communication records: emails, messages, or notes exchanged during service inquiries and contract negotiations.
How We Use Your Data
We process your personal information for the following lawful purposes:
- To deliver vehicle rental services under signed agreements.
- To prepare, execute, and manage contracts and invoices.
- To communicate service updates, schedules, and maintenance notices.
- To comply with Indonesian tax and legal reporting obligations.
- To improve our website, services, and internal operations.
- To respond to inquiries and provide customer support.
Data Retention & Security
We retain personal data only as long as necessary to fulfil the purposes outlined in this policy and to comply with applicable Indonesian law, including tax and commercial record-keeping requirements (generally a minimum of five years after contract termination). We implement administrative, technical, and physical safeguards — including access controls and encrypted communications — to protect your information against unauthorised access, disclosure, or loss.
Your Rights
As a data subject under applicable Indonesian law, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of data that is no longer necessary for its original purpose.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time where processing is based on consent.