Privacy Policy

Last updated: 26 March 2026

1. Introduction

This Privacy Policy explains how PT SABAVIA GLOBAL TECH (doing business as IndoEvisa), operating the platform at www.indoevisa.com ("we", "us", or "our") collects, uses, processes, and protects your personal data when you use our platform and services ("Services").

We are committed to protecting your personal data and handling it in accordance with applicable data protection laws.

2. Data Controller

PT SABAVIA GLOBAL TECH (doing business as IndoEvisa)
Website: www.indoevisa.com
Jl. Cikini IV No. 10, Samofis Unit 3B
Central Jakarta, DKI Jakarta 10330
Indonesia
Email: support@indoevisa.com

2.1 Applicable Data Protection Laws

We process personal data in accordance with applicable data protection laws, including:
(a) Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP);
(b) the EU General Data Protection Regulation (GDPR), where applicable; and
(c) other applicable international data protection laws depending on your location.

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Identity Data

• full name
• date of birth
• nationality
• passport details
• identification documents

3.2 Contact Data

• email address
• phone number

3.3 Application Data

• visa application details
• travel information
• supporting documents

3.4 Payment Data

• payment confirmation details
  (Note: we do not store full payment card details)

3.5 Technical Data

• IP address
• device information
• browser type
• usage data

4. How We Use Your Data

We use your personal data for the following purposes:

(a) to provide and manage our Services;
(b) to process visa applications and related documentation;
(c) to communicate with you regarding your application;
(d) to comply with legal and regulatory obligations;
(e) to prevent fraud and ensure security;
(f) to improve and maintain our platform.

5. Legal Basis for Processing (Where Applicable)

Where required by applicable law (such as GDPR), we process your data based on:

• performance of a contract
• compliance with legal obligations
• legitimate business interests
• your consent (where required)

We may also process personal data where necessary for the establishment, exercise, or defence of legal claims, and to comply with applicable sanctions, anti-money laundering (AML), and regulatory obligations.

6. Sharing of Personal Data

We may share your data with:

(a) government authorities or immigration systems;
(b) embassies, consulates, or official processing bodies;
(c) payment processors and financial service providers;
(d) IT service providers and infrastructure partners;
(e) legal, regulatory, or enforcement authorities where required.

We only share data where necessary for providing the Services or complying with legal obligations.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence.

Where required, we implement appropriate safeguards to protect your data in accordance with applicable law.

7.1 Special Category Data

Visa applications may involve special category personal data (such as health data, biometric data, or data revealing religious or ethnic origin). We process such data only with your explicit consent or where strictly necessary for the provision of the Services and in accordance with applicable data protection laws.

7.2 International Transfers – Detailed

Where personal data is transferred outside Indonesia or the European Economic Area (EEA), we ensure appropriate safeguards are in place, including the use of European Commission-approved Standard Contractual Clauses (2021).

7.3 Personal Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours where required by applicable law (including GDPR).

8. Data Retention

We retain personal data only for as long as necessary to:

• provide the Services
• comply with legal and regulatory obligations
• resolve disputes and enforce agreements

Retention periods may vary depending on the type of data and legal requirements.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data.

However, no system is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have rights to:

• access your personal data
• correct inaccurate data
• request deletion of your data
• restrict or object to processing
• request data portability
• withdraw consent (where applicable)
• lodge a complaint with a data protection authority

To exercise your rights, contact us at support@indoevisa.com.

We aim to respond to requests within the timeframes required by applicable law (for example, within 30 days under GDPR, subject to permitted extensions).

11. Third-Party Services

Our Services may involve third-party systems (including government platforms). We are not responsible for the privacy practices of such third parties.

12. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

13. Updates to This Policy

We may update this Privacy Policy from time to time.

Where required, we will notify you of material changes. Continued use of the Services constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

support@indoevisa.com