Privacy Policy
Last updated: 10 October 2026
Introduction
PT Phitagoras Global Duta (“Phitagoras”, “we”, “us” or “our”) operates the website www.phitagoras.co.id (the “Website”). This Privacy Policy explains how we collect, use, share and protect personal data when you visit the Website, contact us or submit a form on it.
We act as the personal data controller for the processing described here, and we process personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (the “PDP Law”) and other applicable laws of the Republic of Indonesia.
This policy applies to the Website only. Training registration, payment and the Member Area are provided on our separate platform at phitagoras.id. Registration and transactions on phitagoras.id are governed by the terms and policies that apply on that platform.
Information We Collect
Information you provide to us
- Inquiry and training forms: your name, company name, telephone number, email address and message. Some forms also ask which training program you are interested in and how you heard about us.
- Live chat: any name, email address or other details you enter in the chat window, and the content of your messages.
- WhatsApp: when you contact us through a WhatsApp link or the WhatsApp chat button, we receive your phone number, WhatsApp profile name and the messages you send.
- Email and telephone: the information you include when you contact us directly.
Please do not send specific (sensitive) personal data, such as health information, through Website forms or chat.
Information collected automatically
- Technical data: IP address, browser and device type, operating system, referring page, and the date and time of your visit, which are recorded in our web server logs.
- Usage data: pages you view, links and buttons you click, scrolling, form submission events and an approximate location derived from your IP address, collected through cookies and similar technologies (see section 5).
- Session recordings and heatmaps: Microsoft Clarity records how pages are used, such as mouse movements, clicks and scrolling.
- Advertising data: identifiers showing whether you reached the Website through an advertisement and whether you then completed an action, such as submitting a form.
- Spam-protection data: Google reCAPTCHA collects device and interaction information to check that forms are submitted by people rather than automated programs.
How We Use Your Information
We use personal data to:
- respond to your inquiries and provide information about our training, certification programs, consulting services, schedules and prices;
- follow up on your inquiry by telephone, email or WhatsApp and, where you request it, prepare a quotation or proposal;
- operate, maintain and secure the Website, and prevent spam and misuse of our forms;
- understand how visitors use the Website so we can improve its content and navigation;
- measure the effectiveness of our advertising campaigns on Google and Meta platforms;
- comply with our legal obligations.
If we send you marketing communications, you may ask us to stop at any time by contacting us using the details in section 13.
Legal Basis for Processing
Under Article 20 of the PDP Law, we rely on the following legal bases:
- Consent: where we ask for your consent, for example for marketing communications. You may withdraw your consent at any time (see section 9).
- Performance of an agreement or steps taken at your request before entering into one: when we respond to your inquiry about training or services, or prepare a quotation.
- Legitimate interests: to keep the Website secure, prevent spam and abuse, manage our communications with you, understand how the Website is used and measure the effectiveness of our advertising, provided these interests are not overridden by your rights.
- Legal obligations: where we are required to process or retain personal data by law.
Cookies and Analytics
Cookies are small files stored on your device that help websites work and provide information to site owners. The Website uses the following categories:
- Necessary and functional: cookies and similar technologies needed to run the Website, protect forms from spam (Google reCAPTCHA) and provide live chat (tawk.to).
- Analytics: Google Analytics 4 and Microsoft Clarity, which help us understand how the Website is used.
- Advertising: Google Ads conversion tracking and the Meta Pixel, which measure the results of our advertisements and may be used to show you relevant advertisements on those platforms.
These tags are loaded through Google Tag Manager. When you submit a form, Google Ads may receive your contact details, such as your email address, in hashed (encoded) form to measure conversions.
You can block or delete cookies in your browser settings. You can also use the Google Analytics opt-out browser add-on, manage your Google advertising settings and manage your advertising preferences in your Meta account. Blocking some cookies may affect how the Website works.
Third-Party Services
We use the following third-party services on the Website. These providers process personal data either on our behalf or as independent controllers under their own privacy policies.
| Service | Provider | Purpose |
|---|---|---|
| Google Tag Manager, Google Analytics 4, Google Ads | Loading tags, website analytics, advertising measurement | |
| Google reCAPTCHA | Spam protection for forms | |
| Google Sheets (Google Workspace) | Recording inquiries submitted through Website forms | |
| Microsoft Clarity | Microsoft | Session recordings and heatmaps |
| Meta Pixel | Meta Platforms | Advertising measurement |
| Meta Platforms | Communication when you contact us by WhatsApp | |
| tawk.to | tawk.to | Live chat |
| Email delivery service | Our email service provider | Sending form notifications |
| Web hosting | Hosting provider in Indonesia | Hosting the Website and its server logs |
Some articles include or link to content from YouTube or Instagram. When embedded content from these platforms is displayed, they may collect data and set cookies under their own privacy policies.
Data Sharing and Security
We share personal data only as necessary for the purposes in this policy, with:
- our staff who handle inquiries, sales and customer service;
- the service providers listed in section 6;
- government authorities, courts or law enforcement where required by law.
We use reasonable technical and organisational measures to protect personal data, including encrypted (HTTPS) connections to the Website and restricted access to systems that hold inquiry data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify you and the relevant authority as required by the PDP Law.
Data Retention
We keep personal data only for as long as it is needed for the purposes described in this policy, or for longer where the law requires it. When personal data is no longer needed, we delete it or make it anonymous.
Analytics data is kept according to the data-retention settings of the analytics services we use.
Your Privacy Rights
Subject to the PDP Law, you have the right to:
- obtain information about the identity of the controller, the purpose and legal basis of the processing, and our accountability;
- access your personal data and obtain a copy of it;
- correct or update inaccurate or incomplete personal data;
- end the processing of your personal data, and request its deletion or destruction;
- withdraw your consent;
- object to decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you;
- suspend or restrict the processing of your personal data;
- obtain your personal data in a commonly used, machine-readable format and transfer it to another controller;
- file a claim and receive compensation for violations in the processing of your personal data.
To exercise these rights, contact us using the details in section 13. We may ask you to verify your identity before acting on a request. We will respond within the period required by the PDP Law. Some rights may be limited where the law allows.
International Data Transfers
Some of the service providers listed in section 6, including Google, Microsoft, Meta and tawk.to, may process personal data on servers outside Indonesia. Such transfers are subject to the requirements of Article 56 of the PDP Law.
External Websites
The Website contains links to other websites, including our registration platform at phitagoras.id, social media pages, certification and awarding bodies, and partner websites. Those websites have their own privacy practices, and we are not responsible for their content or how they handle personal data. Please read their privacy policies before providing personal data.
Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be published on this page with a new “Last updated” date. If the changes are significant, we will also place a notice on the Website.
Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
PT Phitagoras Global Duta
Ruko Bidex Blok F3 & F5, Jl Pahlawan Seribu BSD City
Serpong, South Tangerang 15321, Indonesia
Email: info@phitagoras.co.id
Telephone: (021) 3892 9180 / 3892 9181
WhatsApp: +62 8118 822110
