1. Information We Collect

We collect information that you provide directly to us when you create an account, place an order, or contact us. This includes:

• Personal Information: Name, email address, phone number, shipping address, billing address
• Payment Information: Bank transfer details, payment confirmation data processed through Xendit
• Account Information: Username, password (encrypted), order history
• Communication Data: Messages sent via WhatsApp, email, or contact forms

We also automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, and browsing behavior on our site.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders
• Sending order confirmations, shipping notifications, and tracking information
• Communicating with you about your account or orders
• Improving our website, products, and customer service
• Complying with legal obligations and preventing fraud
• Sending promotional communications (only with your consent)

3. WooCommerce Data

Our website uses WooCommerce for e-commerce functionality. WooCommerce stores the following data:

• Order details (products purchased, quantities, prices, shipping information)
• Customer accounts (name, email, address, order history)
• Payment method used (but not full payment credentials)
• Session data for cart and checkout functionality

This data is stored in our WordPress database hosted on Hostinger servers located in accordance with their data center policies.

4. Cookies

Our website uses cookies to enhance your browsing experience. These include:

• Essential Cookies: Required for website functionality, cart, and checkout
• Analytics Cookies: Help us understand how visitors use our website
• WooCommerce Cookies: Store cart contents and session information

You can control cookie settings through your browser preferences. Disabling essential cookies may affect website functionality.

5. Third-Party Services

We share your information with the following third-party services as necessary to operate our business:

• Xendit: Payment processing — receives payment details to process transactions securely
• J&T Express: Shipping — receives name, address, and phone number for delivery
• Google Analytics: Website analytics — receives anonymized browsing data
• Hostinger: Web hosting — stores all website and database data

We do not sell, trade, or otherwise transfer your personal information to outside parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL encryption for all data transmission, secure password hashing, regular security audits, and access controls for administrative functions.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data (subject to legal retention requirements)
• Withdraw consent for marketing communications at any time
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us via WhatsApp or email.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website with a revised ‘Last updated’ date. Your continued use of our website after such changes constitutes your acceptance of the updated policy.

9. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Address: Jl. Ciater Permai Raya, Ciater, Kec. Serpong, Kota Tangerang Selatan, Banten 15310, Indonesia
• WhatsApp: +62 813-1033-3317
• Email: orders@sigmapeptides.co.id