Privacy policy

Who we are

TokoKopi sells single origin beans, blends, and coffee brewing gear, and takes monthly subscriptions. For the data you send us, TokoKopi is the controller of that personal data.

The data we receive

This site has no forms and uses no tracking cookies or analytics tools. We only receive personal data when you contact us on WhatsApp or by email, or when you fill in the order form:

• Every order: your name, WhatsApp number, email address, and delivery address.
• Coffee preferences: the origin or blend, the pack size, and the brew method.
• Payment: the sender's name, the bank, and the transfer receipt.
• Subscriptions: your order history and address, so the next delivery needs no re-typing.

Our hosting server may log technical visit data, such as IP addresses and browser types, for security and to keep the site running.

What the data is used for

• Answering questions and putting your order together.
• Preparing and shipping your order.
• Shipping the monthly subscription you signed up for.
• Recording payments and meeting our bookkeeping and tax obligations.
• Keeping the site secure.

The basis is the sales agreement with you, your consent, and the legal obligations that apply to us. We don't sell your data and we don't use it for advertising.

Who the data is passed to

Only as far as needed to fulfil your order:

• Delivery providers: JNE, TIKI, and the other couriers we use.
• Payment providers: the bank or e-wallet you pay through.
• Providers we use daily: WhatsApp (Meta), our email service, and hosting.
• On a subscription: the courier is the only party that receives your delivery data.

Some providers, such as WhatsApp, process data outside Indonesia. Those transfers follow the personal-data transfer rules of the PDP Law.

Payment data

Full card numbers or bank account details never enter our systems. Every payment goes through a payment provider that stores and processes that data.

How long the data is kept

Orders and delivery addresses are kept while the order runs, then for as long as shipping, claims, or disputes may need them. Payment records are kept for as long as tax rules and company documents require. Subscription data is kept until you stop subscribing, plus one final cycle for delivery purposes.

Security

Access to the data is limited to the team handling orders and deliveries. The site runs on HTTPS. If a personal-data protection failure occurs, we notify you and the responsible authority, as the PDP Law requires.

Your rights

Under the PDP Law you have the right to:

• Information about how your data is processed.
• Access to, and a copy of, your data.
• Correction of data that is wrong or incomplete.
• Erasure of your data, or stopping its processing.
• Withdrawing consent you have given.
• Asking for processing to be delayed or restricted.
• Objecting, or taking legal action, if your rights are violated.

Send requests to halo@tokokopi.com from the email address or WhatsApp number you ordered with. Some requests can be limited by legal obligations — payment records, for example.

Changes to this policy

When this policy changes, the new version appears on this page with its update date.