Effective as of 1 July 2026

 

This Privacy Notice governs how Aloyoga Indonesia, managed by PT Mitra Fashindo Abadi (“Aloyoga”, “we”, “us”, or “our”), manages information and personal data of website users, mobile application users, and customers of our physical stores and online stores.

 

“User” or “you” refers to website users, mobile application users and customers of our stores and web stores. The terms “personal data” or “personal information” refer to any information, data, or combination thereof that identifies, relates to, describes, or can reasonably be associated with, directly or indirectly, an individual, including personal data as defined under applicable laws and regulations.

 

Aloyoga respects your privacy and is committed to protecting the security of your personal data. This Privacy Notice explains the legal basis, terms, and conditions governing the collection, acquisition, processing, analysis, storage, updating, display, announcement, transmission, dissemination, disclosure, access, deletion, and destruction of personal data provided by Users or collected by Aloyoga when Users register, access our website, use our mobile applications, make purchases, or use our services.

 

Information We Collect

We may obtain personal information from various sources, including when you create an account, access our website or mobile applications, visit or make purchases at our stores or online store, communicate with us via phone, email, or social media, or through our group companies, business partners, and authorized third parties.

 

Types of Personal Data Collected

Including but not limited to:

  • Contact information (e.g., name, address, email, phone number)
  • Identification information (e.g., date of birth, age, gender, physical attributes)
  • Photographs (e.g., for events or contests)
  • Banking and payment information
  • Communication records
  • Authentication and credential data
  • Device, browser, operating system, and technical information
  • Automatically collected data (cookies, web beacons, analytics tools)
  • Geolocation data derived from IP addresses
  • Purchase Data

 

How We Use Your Information

  • Your personal data may be processed for the following purposes:Register and manage user accounts
  • Provide products and services
  • Process orders, payments, deliveries, refunds, and returns
  • Maintain transaction records
  • Respond to inquiries and provide customer support
  • Communicate marketing information, offers, and promotions
  • Enable social and interactive features
  • Publish testimonials (with limited identifying details)
  • Organize events, promotions, and contests
  • Personalize content, offers, and advertising
  • Operate, analyze, and improve our business
  • Prevent fraud and ensure system security
  • Enforce terms and comply with legal obligations

We may combine collected information with data from our affiliates, partners, and publicly available sources for the purposes described above.

 

Legal Basis for Processing

We process personal data on the basis of:

  • Performance of a contract;
  • Legal obligations;
  • Legitimate interests (e.g., operations, fraud prevention, security) provided such interests do not override the rights and freedoms of data subjects;
  • Public interest;
  • Explicit consent, where required such as for marketing

 

Third Party Involvements

Aloyoga acts as the Personal Data Controller and appoints the following parties as its authorized vendors to support the provision of services to you:

  • Shopify Plus & Partners
  • Midtrans
  • PT Gtech Digital Asia
  • Haptik AI
  • Google Inc
  • Meta
  • JNE
  • RPX
  • Grab
  • Kemana

These vendors process personal data strictly in accordance with Aloyoga’s documented instructions and for purposes aligned with the services they provide.

 

Cross Border Transfers

Certain third parties engaged by Aloyoga may be located outside Indonesia. As a result, your personal data may be transferred to jurisdictions such as:

  • US
  • Europe
  • Singapore
  • India

Such transfers are conducted to enable each party to carry out its respective roles and responsibilities in processing your personal data for the purposes defined in this Privacy Notice. Cross‑border data transfers will be protected by adequate safeguards or explicit consent.

 

Online Advertising

We may use cookies and advertising networks to deliver interest‑based advertisements. These networks may collect data across participating websites to measure marketing effectiveness and personalize advertisements.

 

Information We Share

We value transparency in how personal data is handled. We may share your personal data with:

  • Group companies and affiliates
  • Business partners and service providers
  • Payment processors and financial institutions
  • Advertising and analytics networks
  • Government authorities and law enforcement (if legally required)
  • Other parties with your consent or lawful justification

 

Data Storage and Retention

Personal data is stored electronically in secure systems managed by us or our service providers as long as you are registered in our services. We have defined retention periods which depend on legal, contractual, and operational requirements. Once expired, data will be securely deleted or destroyed.

 

Your Rights as a Data Subject

Subject to applicable laws, you have the right to:

  • Obtain information about data processing
  • Access and obtain copy your personal data
  • Correct inaccurate or incomplete data
  • Request stop processing and deletion of personal data
  • Restrict processing
  • Withdraw consent
  • Data portability and interoperability
  • Object to automated decision‑making
  • Exercise rights without discrimination

·       In the event of any confirmed and verified personal data processing violation, exercise any available rights and legal remedies in accordance with applicable laws and regulations and the Company’s internal policies.

To exercise these rights, you may perform the actions directly through our provided features in our digital services or contact us through our official contact channel as provided under this Privacy Notice.

 

Links to Other Websites

Our website may contain links to third‑party websites. Each of such third parties shall be responsible for its own content or privacy practices.

 

Data Security

We implement administrative, technical, and physical safeguards to protect personal data. We maintain robust security practices and regularly improve them to help protect your information. However, Users are also encouraged to protect their personal data. Children’s Information

Users under 18 years old must obtain parental or legal guardian consent before accessing or using this website, mobile application or using our services or making purchase on/at our store. By accessing or using this website, mobile application, and/or any of our service, and/or or by making a purchase on/at our store, you confirm that you are at least 18 years old.

 

Updates to This Privacy Notice

This Privacy Notice may be updated periodically. Continued use of our services constitutes acceptance of the updated policy. Significant changes will be clearly notified.

 

Marketing Communications

You may unsubscribe from marketing communications at any time via provided links or your account settings.

 

Governing Law

This Privacy Policy is governed by the laws of the Republic of Indonesia.

This Notice is available in Indonesian and English. In the event of any inconsistency, the Indonesian version shall prevail.

 

Contact Us

For inquiries or to exercise your rights, contact us at:
📧 hello@aloyoga.co.id

Last updated: 1 July 2026