Privacy
policy.

01About this policy

This Privacy Policy explains how i7 Creative Space (“i7”, “we” or “us”), run by legal entity name, collects, uses, stores and protects your personal data. It covers the i7 website and all our services, from coworking and meeting space to virtual office, digital creative and business services.

We process personal data in line with Indonesian Law No. 27 of 2022 on Personal Data Protection (the PDP Law) and other applicable regulations. For your personal data, i7 acts as the data controller.

02What we collect

Data you give us. When you ask a question, make a booking or use an i7 service, you may share:

• your name, phone or WhatsApp number, email address and business name;
• booking details, such as dates, number of guests, event requirements and your conversations with the i7 team;
• billing and payment details, such as the account holder’s name and proof of transfer;
• for virtual office, business formation, licences, trademarks or tax: identity data such as your KTP and NPWP, details of directors and shareholders, and business documents such as deeds and your NIB.

Data from your visit to i7. A guest book or attendance list, and CCTV footage of shared areas, as well as photos and videos taken at events.

Data from this website. The i7 website doesn’t use advertising cookies, analytics tools or forms that send data to our servers. It only stores two small settings in your browser: your light or dark mode choice (localStorage) and a note that the intro animation has played (sessionStorage). Both stay on your device, and you can clear them in your browser settings.

Our hosting provider logs technical data such as your IP address, browser type, the pages you open and when. These logs are used to run and secure the site.

03How we use it

• to answer your questions and send quotes;
• to process bookings, payments and invoices;
• to run your virtual office, including receiving letters and parcels and letting you know when they arrive;
• to handle the business formation, licensing, trademark, accounting and tax work you ask for;
• to keep the space, the people in it and the i7 website secure;
• to meet our legal obligations, such as bookkeeping and tax records;
• to feature photos of events and the space on the i7 website and social media;
• to send news about offers or events, only if you agree. You can opt out at any time.

04Our legal basis

Under the PDP Law, we process your personal data on the basis of:

• your consent, for example for promotional messages and photos that show your face;
• performing a contract, when we need the data to provide a service you’ve booked;
• legal obligations, such as bookkeeping and tax requirements;
• legitimate interests, such as keeping the space and website secure, always weighed against your rights and interests.

05Who we share it with

We don’t sell your personal data. We only share it, as far as needed, with:

• notaries and government agencies, such as the OSS system, the Ministry of Law, DJKI (the IP office) and the Directorate General of Taxes, when you use our business formation, licensing, trademark or tax services;
• service providers that help us operate, such as website hosting, WhatsApp, email and banks;
• i7’s F&B partners, limited to your name and order details when you order food for an event;
• the authorities, where required by law or a court order.

When you contact us on WhatsApp, Instagram or TikTok, your conversation is also processed by that platform under its own privacy policy.

06International transfers

Some of our service providers, such as our hosting, WhatsApp and email providers, may store data on servers outside Indonesia. We only use providers with adequate data protection, in line with the PDP Law’s rules on cross-border transfers.

07How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for, then delete or anonymise it.

• Enquiries that don’t lead to a booking: 12 months.
• Customer data and service documents: for as long as the service runs and 5 years after.
• Bookkeeping and tax records: 10 years, as tax regulations require.
• CCTV footage: 30 days, unless it’s needed to deal with an incident.

08Keeping it secure

We protect your personal data by limiting access to the members of the i7 team who need it, keeping paper documents locked away, and securing our accounts with two-step verification.

If a personal data breach occurs, we’ll notify you and the relevant authority within 3 × 24 hours, as the PDP Law requires.

09Your rights

Under the PDP Law, you have the right to:

• know how your personal data is processed;
• access your personal data and get a copy of it;
• correct data that is wrong or incomplete;
• have your data deleted or its processing stopped, unless we’re legally required to keep it;
• withdraw any consent you’ve given;
• delay or restrict the processing of your data;
• receive and reuse your personal data in a commonly used format;
• object or complain, including to the personal data protection authority;
• sue for and receive compensation if your personal data is processed unlawfully.

To use any of these rights, contact us at i7.creativespace@gmail.com or 0817-9004-664. We may ask for proof of identity before acting on your request, and we’ll respond within the time limits set by the PDP Law.

10Children’s data

i7’s services are meant for adults. If an event participant is under 18, we process their data with the consent of a parent or guardian.

11Changes to this policy

We may update this policy as our services or the law change. The date of the latest update is shown at the top of this page. For significant changes, we’ll let active customers know by WhatsApp or email.

12Contact us

Send questions or requests about your personal data to name of the person responsible for data protection by email at i7.creativespace@gmail.com, by WhatsApp or phone on 0817-9004-664, or by post to Blok i, Jl. Baranangsiang III No. 7, RT.05/RW.08, Tegallega, Kec. Bogor Tengah, Kota Bogor, Jawa Barat 16129.