Privacy policy.

Who we are

DIFŌUMA is a paid media agency based in Yogyakarta, Indonesia. We are responsible for the personal data described on this page. For anything to do with your data, write to dimasnanoo@gmail.com — it reaches a person, not a ticket queue.

What we collect

Two things, and nothing else. First, what you type into the contact form:

• Your name and email address, so we can reply.
• Your company or website, if you give it.
• Your monthly ad spend band and the channels you run — we use these to route the enquiry to the right person and to check whether we are a fit at all.
• Whatever you write in the free-text field.

Second, the ordinary technical data any website receives when your browser asks for a page: your IP address, the page requested, the time, your browser and operating system. This is in our host's server logs whether we want it or not; it is what makes it possible to serve you a page and to notice when the site is being attacked.

We do not ask for payment details anywhere on this site, and there is no account to create. If a page ever asks you for a card number, it is not us.

Why we collect it

To answer your enquiry, and to keep the site working and secure. That is the whole list.

We do not sell your data. We do not add you to a mailing list because you filled in a contact form — if we ever start sending a newsletter, you will have to ask for it. We do not use what you tell us in an enquiry to target you with advertising.

What happens to an enquiry

Your submission is checked and passed to the person who will answer it. We keep enquiries for as long as there is a live conversation, and for up to 24 months afterwards so that we can pick up where we left off if you come back. After that they are deleted.

If you would rather we deleted yours sooner, say so in a one-line email and we will, unless we are required to keep it.

Analytics and cookies

We use Google Tag Manager to load our measurement tools. Tag Manager itself does not set cookies, but the tags inside it may — typically analytics cookies that count visits and show us which pages people actually read. Those tools tell us that a page was viewed; they do not tell us who you are.

You can refuse all of it. Every current browser lets you block or delete cookies, and browser-level tracking protection or an ad blocker will stop these scripts loading at all. Nothing on this site breaks if you do — no page here depends on analytics to work.

Who else sees it

The people who run this agency, and the service providers we depend on to operate it: our hosting provider, and Google, for the measurement described above. They act on our instructions and may process data outside your country. We do not pass your details to anyone else — no data brokers, no partner lists, no exceptions.

The one thing that would override this is a lawful order from a court or regulator.

Your rights

Whatever your location, you can ask us to do any of the following, and we will answer within 30 days:

• Tell you exactly what we hold about you.
• Correct anything that is wrong.
• Delete it.
• Send you a copy in a portable format.
• Stop using it, or object to a particular use.

Ask by emailing dimasnanoo@gmail.com. We will not charge you for it, and we will not make you explain yourself. If you are in the EU or UK, you also have the right to complain to your national data protection authority; if you are in Indonesia, to the relevant supervisory authority under the Personal Data Protection Law. We would rather you came to us first, but it is your call.

Keeping it safe

The site is served over HTTPS, so what you type into the contact form is encrypted in transit. Access to enquiries is limited to the people who need it. No system is perfect, and anyone who tells you otherwise is selling something — but if we ever have a breach that puts you at risk, we will tell you and the relevant authority, promptly and in plain language.

Children

This is a business-to-business site and it is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us something, email us and we will delete it.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change materially affects what we do with data we already hold, we will say so rather than quietly editing the page.