Legal — Privacy
Privacy Policy
Last updated: 1 January 2026 · Document ref. OR-PP-01
01 — Introduction
Orafe ("we", "our", "the Company") is a nutritional food-supplement company registered in Jakarta, Indonesia. This Privacy Policy describes how we collect, use, store, and protect personal information submitted through the Orafe website located at orafe.info (the "Website").
By using the Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms described here, please discontinue use of the Website.
This policy is governed by applicable Indonesian data protection legislation. We are committed to handling personal information responsibly and in accordance with the principles of data minimisation, purpose limitation, and data security.
02 — Information We Collect
2.1 Information you provide directly
When you submit the contact form on the Website, we collect the following information: your name, email address, and the content of your message. If you select a subject category in the form, that selection is also recorded. We do not collect payment information, identity documents, or sensitive personal data through any form on the Website.
2.2 Information collected automatically
When you visit the Website, our web server and analytics tools may automatically record technical data including: your IP address, browser type and version, operating system, referring URL, pages visited, and the time and date of your visit. This information is used in aggregate form to understand Website usage patterns and to maintain server security.
2.3 Cookies and similar technologies
The Website uses cookies to improve user experience and to collect aggregated analytics data. For full details on the cookies we use, the purposes for which they are used, and how to manage your preferences, please refer to our Cookie Policy.
03 — How We Use Your Information
We use the information collected for the following purposes:
- — Contact responses: To reply to enquiries submitted through the contact form, including product, distribution, and documentation requests.
- — Service improvement: To understand how the Website is used in aggregate, to identify technical issues, and to improve content and navigation.
- — Security and fraud prevention: To protect the Website and its users from unauthorised access, spam submissions, and malicious activity.
- — Legal obligations: To comply with applicable laws and regulatory requirements where Orafe is obligated to retain or produce records.
We do not use personal information for automated profiling, direct marketing campaigns, or sharing with advertising networks. We do not sell personal data to third parties.
04 — Data Sharing, Retention & Your Rights
4.1 Third-party sharing
Orafe does not sell, rent, or trade personal data. We may share limited personal information with trusted third-party service providers who assist with Website hosting, email delivery, and analytics — solely for the purpose of providing those services to us. These providers are bound by confidentiality obligations and are not permitted to use the data for independent purposes.
We may also disclose personal information when required to do so by law, court order, or regulatory authority, or to protect the rights, property, or safety of Orafe, its users, or others.
4.2 Data retention
Personal data collected through contact form submissions is retained for a period of 24 months from the date of receipt, or for as long as necessary to resolve the enquiry, whichever is shorter. Server access logs are retained for 12 months for security purposes. After the applicable retention period, data is securely deleted.
4.3 Your rights
Subject to applicable Indonesian data protection legislation, you have the right to:
- — Request access to personal data we hold about you.
- — Request correction of inaccurate or incomplete personal data.
- — Request deletion of personal data, subject to applicable retention obligations.
- — Withdraw consent for data processing where consent is the legal basis for that processing.
To exercise any of these rights, please contact us by email at [email protected] or in writing to Jl. Pemuda No. 92, 13220 Jakarta, Indonesia. We will respond within a reasonable timeframe consistent with our obligations under applicable legislation.
05 — Security, External Links & Policy Updates
5.1 Security measures
The Website uses HTTPS encryption for all data transmission. Access to personal data held by Orafe is restricted to authorised personnel only. We maintain reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or alteration. However, no transmission over the internet can be guaranteed to be entirely secure. Submission of personal data is at the user's own risk.
5.2 External links
The Website may contain links to third-party websites, including distributors and reference sources. Orafe is not responsible for the privacy practices of those external websites. We recommend reviewing the privacy policies of any third-party site you visit.
5.3 Changes to this policy
Orafe reserves the right to update this Privacy Policy at any time. Updated versions will be published on this page with a revised "Last updated" date. Continued use of the Website following any update constitutes acceptance of the revised policy. We recommend reviewing this page periodically.
5.4 Contact for privacy enquiries
All privacy-related enquiries should be directed to:
Orafe
Jl. Pemuda No. 92, 13220 Jakarta, Indonesia
Email: [email protected]
Telephone: +62 21 9605 7183
Regulatory status
Orafe products are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories.