1. Introduction
This Privacy Policy explains how LAW OFFICE · SYARIF & PARTNERS ("we", "our", "the office") collects, uses, stores, and protects personal information provided by visitors to our website at law.fts.biz.id and by clients who engage our legal services.
We are committed to protecting your privacy and handling your personal data in compliance with applicable Indonesian data protection law, including Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi / UU PDP).
By using this website or submitting your information through our contact, consultation, or lead generation forms, you consent to the collection and use of your information as described in this Privacy Policy.
2. Information We Collect
We collect personal information that you voluntarily provide to us through our website forms, email communications, WhatsApp messages, and in-person consultations. This information may include:
2.1 Contact & Inquiry Information
- Full name
- Email address
- WhatsApp or phone number
- Nationality and country of residence
- Company name (if applicable)
- Description of your legal matter or inquiry
- Preferred consultation method
2.2 Free Legal Guide Requests
- Full name
- Email address
- Country of residence
- Legal interest area (optional)
2.3 Website Usage Data
When you visit our website, we may automatically collect certain technical information through cookies and analytics tools, including:
- IP address (anonymised where possible)
- Browser type and version
- Pages visited and time spent on each page
- Referring website or search query
- Device type (desktop, tablet, mobile)
2.4 Client Legal Files
If you engage our legal services, we collect additional information necessary to provide those services, including passport details, immigration documents, company registration documents, financial records, and other documents relevant to your legal matter. This information is subject to full attorney-client confidentiality — see Section 5 below.
3. How We Use Your Information
We use the personal information we collect for the following purposes:
To respond to your legal inquiries, consultation requests, and messages submitted through our website or WhatsApp.
To provide the legal services you have engaged us for, including visa applications, company registrations, contract drafting, and legal advisory.
To send you the free legal guide you requested, and occasional relevant legal updates or articles. You may unsubscribe at any time.
To communicate with you about your legal matter, appointment scheduling, document requests, and case updates.
To analyse website usage data in aggregate form to improve our website content, navigation, and user experience.
To comply with applicable Indonesian laws and regulations, including any court orders, government requests, or legal obligations.
4. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. We may share your information only in the following limited circumstances:
4.1 With Government Agencies (For Legal Service Purposes)
When providing legal services such as visa applications, company registration, or business licensing, we are required to submit your personal information to relevant Indonesian government agencies, including:
- Directorate General of Immigration (Imigrasi)
- Ministry of Law and Human Rights (Kemenkumham)
- Indonesian Investment Coordinating Board (BKPM / OSS)
- Directorate General of Taxation (DJP)
- Ministry of Manpower (Kemnaker)
- Other relevant government bodies as required
Such submissions are made only as necessary and with your knowledge and consent as part of the legal service engagement.
4.2 With Licensed Notaries
For company formation, contract notarisation, and other matters requiring notarial services, we may share relevant personal information with a licensed Indonesian notary (Notaris) as part of the legal process.
4.3 Service Providers
We may share limited technical information with trusted service providers who assist in operating our website (such as web hosting, email delivery, and analytics services). These providers are contractually obligated to protect your information and may not use it for their own purposes.
4.4 Legal Requirements
We may disclose personal information if required by law, court order, or government authority, or if we believe such disclosure is necessary to protect our legal rights or comply with applicable regulations.
5. Client Confidentiality & Attorney-Client Privilege
Attorney-Client Privilege
All information, documents, and communications shared with our licensed Indonesian lawyer in the context of seeking legal advice or engaging our legal services are protected by attorney-client privilege (kerahasiaan advokat) under:
- Law No. 18 of 2003 on Advocates (UU Advokat)
- PERADI (Indonesian Bar Association) Code of Professional Conduct
- Indonesian Professional Secrecy obligations
This means that our lawyer is legally prohibited from disclosing your confidential communications or the content of your legal matter to any third party — including government agencies — without your express consent, except where required by applicable law.
Attorney-client privilege applies from the moment of your first legal consultation with our office. This includes preliminary consultations conducted via WhatsApp, email, or our website contact forms where you are seeking legal advice.
What This Means in Practice
- Your legal matter details are never shared with third parties without your consent
- Case documents are stored securely and accessible only to authorised staff
- Our staff are bound by professional secrecy obligations
- Client files are retained only as long as necessary for legal purposes
- Physical and digital files are protected against unauthorised access
- Discussions of your case in our office are conducted confidentially
6. Data Security
We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These measures include:
- SSL/TLS encryption for all data transmitted through our website
- Secure server infrastructure with Cloudflare CDN protection
- Password-protected access to client files and email systems
- Limited staff access to sensitive client information (need-to-know basis)
- Regular security reviews of our website and data storage practices
While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information to the best of our ability.
7. Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:
- Inquiry / contact form data: Retained for 12 months after the last communication, unless a legal engagement is established.
- Free legal guide registrations: Retained for as long as you remain subscribed to our mailing list. You may unsubscribe at any time.
- Client legal files: Retained for a minimum of 5 years after the conclusion of legal services, as required by Indonesian legal professional obligations and applicable law.
- Website analytics data: Retained in aggregate, anonymised form for website improvement purposes. Individual session data is not retained long-term.
8. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to improve your browsing experience and to analyse website usage. Cookies are small text files stored on your device by your browser.
Types of Cookies We Use
You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website forms and contact features.
9. Your Rights Under Indonesian Data Protection Law
Under Indonesia's Personal Data Protection Law (UU PDP — Law No. 27 of 2022), you have the following rights regarding your personal data:
You have the right to request access to the personal data we hold about you.
You have the right to request correction of inaccurate or incomplete personal data.
You may request deletion of your personal data, subject to our legal retention obligations.
You have the right to object to certain uses of your personal data, including marketing communications.
You may request a copy of your personal data in a structured, commonly used format.
Where processing is based on consent, you may withdraw that consent at any time by contacting us.
To exercise any of these rights, please contact us using the details provided in Section 10 below. We will respond to your request within a reasonable timeframe in accordance with applicable law.
10. Third-Party Links
Our website may contain links to third-party websites, including government portals, legal resources, and social media platforms. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any external websites you visit.
11. Children's Privacy
Our website and legal services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can remove it.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy.
13. Contact Us for Privacy Requests
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact us:
LAW OFFICE · SYARIF & PARTNERS
Jakarta, Indonesia
Please use subject line: "Privacy Request – [Your Name]"
We will acknowledge your privacy request within 3 business days and endeavour to fulfil it within 14 business days, or sooner where possible.
14. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Indonesia, including the Personal Data Protection Law (UU No. 27 of 2022) and any implementing regulations issued thereunder. Any disputes arising from this Privacy Policy shall be resolved under Indonesian jurisdiction.