Privacy Policy
ASEAN Estates — asean-estates.com
Last updated: 1 January 2026 • Effective date: 1 January 2026
ASEAN Estates (“we”, “us”, “our”) operates the website asean-estates.com and provides property investment, acquisition and management services in Medan, North Sumatra, Indonesia. We are committed to protecting your personal data in accordance with applicable law, including Indonesia’s Undang-Undang Pelindungan Data Pribadi (UU PDP) No. 27 Tahun 2022 (Personal Data Protection Law) and, where applicable, the EU General Data Protection Regulation (GDPR).
This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, and what rights you have over your data.
If you have any questions about this policy, contact us at: info@asean-estates.com
1. What Data We Collect
We collect personal data only when you interact with us directly or use our website. This may include:
| Data Type | Examples | When Collected |
|---|---|---|
| Identity data | Name, nationality, passport number (where required for property transactions) | Enquiry or transaction |
| Contact data | Email address, phone number, country of residence | Contact form, enquiry |
| Financial data | Investment budget range, bank details (for transaction purposes only) | Property purchase process |
| Usage data | IP address, browser type, pages visited, time on site | Automatically via log files and cookies |
| Communication data | Contents of emails, messages and enquiry forms sent to us | When you contact us |
We do not collect sensitive personal data (such as racial or ethnic origin, health data, or political opinions) unless required by Indonesian law for property transaction purposes, and only with your explicit consent.
2. How We Use Your Data
We use your personal data only for the following purposes and only where we have a lawful basis to do so:
- To respond to your property enquiries and provide investment consultation
- To facilitate property purchases, including identity verification required under Indonesian property law
- To manage ongoing property management services on your behalf
- To send you relevant updates on properties, market reports or services (only where you have consented)
- To comply with Indonesian legal and regulatory requirements, including KYC (Know Your Customer) obligations under BPN and notary regulations
- To improve our website and services through anonymised analytics
- To prevent fraud and maintain website security
We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.
3. Legal Basis for Processing
Under Indonesia’s UU PDP No. 27/2022 and, where applicable, the GDPR, we process your personal data under the following legal bases:
| Basis | When We Rely On It |
|---|---|
| Consent | Marketing emails, newsletter sign-up, optional data sharing |
| Contract performance | Property purchase and management services you have engaged us for |
| Legal obligation | Identity verification required by Indonesian notary, BPN and tax regulations |
| Legitimate interests | Website analytics, fraud prevention, improving our services |
4. Cookies
Our website uses cookies — small text files stored on your device — to improve your browsing experience and analyse site usage. We use the following types:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Required for the website to function (security, session management) | No |
| Analytics | Anonymous data on how visitors use the site (e.g. Google Analytics) | Yes — via browser settings |
| Marketing | Used to track visits and show relevant advertising (only if enabled) | Yes — via browser settings |
You can control or disable cookies through your browser settings. Disabling analytics cookies will not affect your ability to use this website.
5. Data Sharing & Third Parties
We do not sell your personal data. We share data only where necessary and with appropriate safeguards in place:
- Licensed notaries (PPAT) and property lawyers in Indonesia — required by law for property title transfer and deed of sale
- Badan Pertanahan Nasional (BPN) — Indonesia’s National Land Agency, for title registration
- Indonesian tax authorities (DJP) — for PPh Final and BPHTB tax reporting on property transactions
- Property management partners — where you have engaged our property management service
- Analytics providers (e.g. Google Analytics) — anonymised usage data only, no personal identifiers
All third parties we work with are bound by confidentiality obligations and are required to handle your data in accordance with applicable law.
6. Data Retention
We retain your personal data only for as long as necessary for the purpose it was collected, or as required by Indonesian law:
| Data Type | Retention Period |
|---|---|
| Enquiry and contact data (no transaction) | 2 years from last contact |
| Property transaction records | 10 years (Indonesian tax and notary record requirements) |
| Property management records | Duration of management agreement + 5 years |
| Website analytics data | 26 months (Google Analytics default) |
7. Your Rights
Under UU PDP No. 27/2022 and (where applicable) the GDPR, you have the following rights over your personal data:
| Right | What It Means |
|---|---|
| Right to access | Request a copy of the personal data we hold about you |
| Right to rectification | Request correction of inaccurate or incomplete data |
| Right to erasure | Request deletion of your data where there is no lawful reason to retain it |
| Right to restriction | Request that we limit how we use your data in certain circumstances |
| Right to portability | Request your data in a structured, machine-readable format |
| Right to object | Object to processing based on legitimate interests or for direct marketing |
| Right to withdraw consent | Withdraw consent at any time where processing is based on consent |
To exercise any of these rights, contact us at info@asean-estates.com. We will respond within 30 days. We may need to verify your identity before processing your request.
8. International Data Transfers
ASEAN Estates operates primarily in Indonesia. If you are based outside Indonesia (for example, in Australia, Singapore, Malaysia, Europe or elsewhere), your personal data will be transferred to and processed in Indonesia. Indonesia’s UU PDP No. 27/2022 provides the applicable legal framework for this processing.
Where we use third-party services that process data outside Indonesia (such as Google Analytics), we ensure those providers operate under appropriate data protection frameworks.
9. Children’s Privacy
Our website and services are directed at adults making investment decisions. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, contact us immediately at info@asean-estates.com and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, our services or our data practices. The “Last updated” date at the top of this page will always reflect the most recent version. We recommend reviewing this page periodically. Continued use of our website after any update constitutes acceptance of the revised policy.
Questions About Your Privacy?
Contact us directly and we will respond within 30 days.
info@asean-estates.com