Privacy Policy

Last updated: April 30, 2026

Data Controller

PT Gluvax Innovations Labs (operating as "Gluvax") is the data controller responsible for your personal data processed through gluvax.com and its services.

Registered office: Jl. Teuku Umar No. 1, Kedaton, Kota Bandar Lampung, Lampung, 35132, Indonesia.

For any privacy-related question or to exercise your rights, contact [email protected].

1. Introduction

Welcome to Gluvax. We respect your privacy and are committed to protecting your personal data. This privacy policy informs you about how we look after your personal data when you visit our website and use our services, and tells you about your privacy rights and how the law protects you. This policy is issued on behalf of PT Gluvax Innovations Labs.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data: includes first name, last name, username or similar identifier.
  • Contact Data: includes email address, telephone numbers, and billing address.
  • Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform.
  • Usage Data: includes information about how you use our website, products and services.
  • Marketing Data: includes your preferences in receiving marketing from us and your communication preferences.

3. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To register you as a new customer and provide our services.
  • To process and deliver your order including managing payments and fees.
  • To manage our relationship with you including notifying you about changes to our terms or privacy policy.
  • To administer and protect our business and this website.
  • To deliver relevant website content and advertisements to you.
  • To use data analytics to improve our website, products/services, marketing, and customer experiences.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We use industry-standard encryption protocols and maintain strict access controls to protect your information.

5. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.

7. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.

8. Third-Party Links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

9. Data Deletion & Account Removal

We do not provide a self-service mechanism to delete personal data or account content. All deletion requests are reviewed and processed manually by our team in accordance with applicable data protection laws (including, where applicable, Indonesia's Personal Data Protection Law (UU 27/2022) and other regulations applicable to your jurisdiction).

To request deletion of your personal data or account, please email us at [email protected] from the email address associated with your account. To protect your privacy, we may ask for additional information to verify your identity and your ownership of the account before acting on the request.

Once your identity has been verified, we will delete the requested data from our production systems within 30 days. Residual copies in encrypted backups are removed in accordance with our standard backup rotation cycle.

We may decline or defer a deletion request, in whole or in part, where your identity cannot be verified, or where we are required or permitted by law to retain certain data — for example, to comply with legal, regulatory, tax, accounting, audit, fraud-prevention, security, or dispute-resolution obligations. In such cases we will explain the reason and, where possible, restrict further processing of the retained data.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date at the top of this privacy policy.