Privacy policy

This policy explains how MAMÉ collects and uses your personal data when you visit this website, join our list or place an order. It is written to comply with Indonesia's Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi).

Who we are

MAMÉ is a sole proprietorship operated by [OWNER FULL NAME], trading as MAMÉ, [BUSINESS ADDRESS], Indonesia. NIB: [NIB NUMBER]. We are the data controller for the personal data described here. Contact: hello@mame.co.

What we collect

• Order details: name, email, mobile number, delivery address, items bought and order history.
• Payment details: handled entirely by Xendit. We receive confirmation of payment and the method used, but never your full card or bank account details.
• Messages: anything you send us by email or Instagram.
• Mailing list: your email address, if you choose to join.
• Technical data: basic information your browser sends, such as IP address and device type, processed by our hosting provider for security and performance.

Why we use it

• To process, deliver and support your order (performing our contract with you).
• To send founder notes and early access emails, only if you opt in (your consent, which you can withdraw at any time).
• To keep records required by Indonesian tax and commercial law (legal obligation).
• To keep this website secure and working (legitimate interest).

Who we share it with

We never sell your personal data. We share only what is needed with:

• Xendit (PT Sinar Digital Terdepan), to process payments.
• Couriers such as JNE, J&T Express and SiCepat, to deliver your order.
• Cloudflare, which hosts this website and may process technical data on servers outside Indonesia. Where data leaves Indonesia, we rely on providers with protection at least equivalent to Indonesian law.
• Our email provider, to send order and marketing emails.
• Authorities, where the law requires it.

Cookies and browser storage

This site does not use advertising or tracking cookies. We use your browser's local storage only to remember your bag and whether you have seen our sign-up message. You can clear this at any time in your browser settings.

How long we keep it

Order and transaction records are kept for 10 years, as required by Indonesian tax law. Mailing list data is kept until you unsubscribe. Messages are kept for up to 2 years unless they relate to an order.

Your rights

Under Indonesian law you have the right to:

• be informed about how your data is used;
• access and get a copy of your data;
• correct inaccurate data;
• have your data deleted or its processing stopped, where the law allows;
• withdraw consent at any time;
• object to decisions made solely by automated processing.

To use any of these rights, email hello@mame.co. We respond within 3 x 24 hours to confirm receipt and act on your request within the time limits set by law.

Security and breaches

We use reputable providers and limit access to your data. If a data breach affects you, we will notify you and the relevant authority in writing within 3 x 24 hours of becoming aware of it, as required by law.

Children

This site is intended for adults. We do not knowingly collect data from anyone under 18.

Changes

We may update this policy. The date at the top shows the latest version.