This Privacy Policy explains how Luminihsan ("we," "us," or "our") collects, uses, and protects your personal data when you visit www.luminihsan.com and interact with our newsletter subscription, contact forms, or podcast topic submission form. This policy is prepared in compliance with Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi (UU PDP) and other applicable Indonesian regulations.

By submitting your information through any form on our website, you consent to the practices described in this policy.

1. DATA CONTROLLER

Luminihsan is the Data Controller (Pengendali Data Pribadi) responsible for your personal data collected through this website.

  • Email: salam@luminihsan.com
  • Website: www.luminihsan.com

2. WHAT DATA WE COLLECT AND WHY

We only collect personal data that you voluntarily provide through our website forms. We do not collect data passively beyond standard server logs.

Newsletter Subscription

When you subscribe to our newsletter, we collect your name and email address. This data is used solely to send you updates, news, and communications from Luminihsan. The legal basis for this processing is your explicit consent (persetujuan) under Article 20 of UU PDP.

Contact Form (General Inquiries)

When you submit a general inquiry, we collect your name, email address, and the content of your message. This data is used to respond to your inquiry. The legal basis for this processing is our legitimate interest in responding to communications directed to us.

Partnership & Volunteer Forms

When you submit a partnership or volunteer enquiry, we collect your name, email address, and any information you choose to share in your message. This data is used to evaluate and respond to your submission. The legal basis is your consent and our legitimate interest in managing these relationships.

Podcast Topic Submission Form

When you submit a podcast topic suggestion, we collect your name, email address, and the topic or message you submit. This data is used solely to review and consider your suggestion for future podcast content. The legal basis is your explicit consent. Submitting a topic does not guarantee it will be featured or that we will respond individually to every submission.

Cookies and Log Data

Our website may use basic cookies or server logs necessary for website functionality and security. These do not identify individual users and are not used for advertising or behavioural tracking.

3. THIRD-PARTY DATA PROCESSOR: KIT (CONVERTKIT)

We use Kit (formerly ConvertKit), a US-based email marketing platform, to manage our newsletter list and send email communications. When you subscribe to our newsletter, your name and email address are stored and processed on Kit's servers located in the United States.

This constitutes an international transfer of personal data. In accordance with Article 56 of UU PDP, we have ensured that Kit provides a comparable standard of data protection through their published privacy policy and data processing agreements. You can review Kit's privacy policy at convertkit.com.

We do not use any other third-party marketing tools, advertising platforms, or analytics services that collect personal data.

4. DATA RETENTION

  • Newsletter subscribers: Your data is retained for as long as you remain subscribed. You may unsubscribe at any time via the link in any email we send you, and your data will be removed from our list promptly.
  • Contact, partnership, volunteer, and podcast topic forms: We retain your submitted information for up to 2 (two) years, or for as long as necessary to fulfil the purpose of your enquiry, after which it is securely deleted.

5. YOUR RIGHTS AS A DATA SUBJECT

Under UU PDP (Articles 5–16), you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Correction: Request correction of inaccurate or incomplete data.
  • Right to Deletion: Request deletion of your data (e.g. unsubscribe and request removal from our records).
  • Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
  • Right to Object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at salam@luminihsan.com. We will respond maximum within 14 (fourteen) working days.

6. DATA SECURITY

We take reasonable technical and organisational measures to protect your personal data. Access to submitted form data is restricted to authorised team members for operational purposes only. Kit employs industry-standard security practices for newsletter data.

In the event of a personal data breach that poses a risk to your rights, we will notify the relevant supervisory authority and affected individuals in accordance with Article 46 of UU PDP within 14 (fourteen) working days.

7. CHILDREN'S PRIVACY

Our website is not directed to individuals under 13 years of age. We do not knowingly collect personal data from minors without verified parental consent. If we become aware of such data, we will delete it promptly.

8. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised date. For material changes, we will notify active newsletter subscribers by email.

9. CONTACT & COMPLAINTS

For any questions about this policy or your personal data, contact us at salam@luminihsan.com.

If you believe your rights under UU PDP have been violated, you may lodge a complaint with Kementerian Komunikasi dan Digital (Komdigi) or Badan Siber dan Sandi Negara (BSSN).