1. Commitment & Data Controller
Yayasan Jembatan Lintas Kasih ("Foundation", "We", "Us", or "YJLK"), as a legally incorporated non-profit humanitarian foundation in Indonesia, is fully committed to safeguarding your privacy and protecting the confidentiality of personal data provided by our donors, volunteers, partners, and platform visitors. This Privacy Policy is formulated in strict compliance with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (PDP Law) and international digital governance best practices (including GDPR data protection principles).
2. Personal Data We Collect
We only collect personal information that is relevant, proportional, and strictly necessary for facilitating humanitarian donations, tax deduction compliance, and transparent reporting:
- Donor Identity: Full legal name, verified email address, and active telephone/WhatsApp number.
- Tax Exemption Data (Optional): Tax Identification Number (NPWP/NIK) for donors seeking official tax-deductible contribution receipts under Article 9 Paragraph (1) letter g of the Indonesian Income Tax Law.
- Financial & Transaction Data: Transaction Order ID, donation amount, selected payment gateway method, and bank transfer receipts. Note: We NEVER store your full credit card number, expiration date, or CVV/CVC security codes on our servers.
- Technical Interaction Data: IP address, device type, browser specifications, and language preferences processed solely to optimize platform user interface (UI) and ensure cybersecurity integrity.
3. Purpose & Legal Basis of Processing
Personal data collected is processed strictly for lawful, legitimate, and transparent purposes:
- To verify, process, and reconcile donations through Bank Indonesia-licensed payment gateways (Midtrans) or designated foundation accounts.
- To transmit official digital receipts, donation certificates, and periodic transparency impact reports.
- To issue statutory tax deduction certificates for eligible individual and corporate CSR donors.
- To provide urgent humanitarian field updates and critical program communications.
4. Transaction Security (PCI-DSS Standard)
All digital financial transactions are securely processed via licensed payment gateway provider Midtrans (PT Midtrans), certified under Payment Card Industry Data Security Standard (PCI-DSS) Level 1. All web network communications are protected using enterprise-grade Transport Layer Security (TLS 1.3 / SSL 256-bit) encryption.
5. Data Disclosure Limitations & Third Parties
Yayasan Jembatan Lintas Kasih strictly adheres to ethical data integrity: We DO NOT sell, rent, trade, or share your personal information with any third-party commercial or advertising entities. Data may only be disclosed to:
- Authorized government bodies or regulatory authorities when strictly mandated by applicable Indonesian law.
- Licensed independent public audit firms (CPA) for annual statutory auditing under strict Non-Disclosure Agreements (NDA).
6. Your Rights as a Data Subject
Under applicable data privacy legislation, you have the right to:
- Access and request copies of your personal data stored in our systems.
- Rectify or update any inaccurate or incomplete personal records.
- Request total anonymity on public donor boards ("Anonymous Donor" option during checkout).
- Request the erasure (Right to be Forgotten) of your contact information from regular communication distributions.
7. Data Protection Officer (DPO) Contact
For inquiries, feedback, or exercising your statutory privacy rights, please reach out to our Legal Compliance & Data Protection team:
Email: privacy@jembatanlintaskasih.org
Headquarters: Jl. Sari Dana A1 No. 4 Banjar Uma Sari, Desa Ubung Kaja, North Denpasar, Bali - Indonesia (80116)
Official WhatsApp: +62 811-2502-5777
