ABRONA
LEGAL DOCUMENT

Privacy Policy

Abrona — Last updated: January 2026

1. SCOPE & CONTROLLER

Who we are and what this policy covers.

This Privacy Policy describes how Abrona ("we", "us", "our") collects, processes, and stores personal data submitted through the website located at abrona.info and through direct correspondence with the Abrona studio. Abrona is the data controller for all personal data described in this policy.

Abrona operates as a nutritional food-supplement producer based in Jakarta, Indonesia. Our registered correspondence address is Jl. Cipete Raya No. 109, 12410 Jakarta, Indonesia.

This policy applies to all visitors to our website and all individuals who contact us via the contact form, email, or telephone. It does not apply to third-party websites that may be linked from our pages.

2. DATA WE COLLECT

What personal data we receive and how.

We collect personal data in the following circumstances:

Contact form submissions: name, email address, optional phone number, and the text of your message. If your message contains a batch record request, it may also include a container lot number.
Direct email correspondence: email address, name, and the content of communications with the Abrona studio.
Website analytics (aggregate only): anonymised visit data including page views, browser type, and approximate geographic region. This data does not identify individuals.
Cookies: technical cookies required for site function and, where consent is given, analytics cookies. See the Cookie Policy for full details.

We do not collect payment details, identity numbers, date of birth, occupation, or other sensitive personal data. We do not build individual health profiles or store wellness-related personal data.

3. PURPOSE & LEGAL BASIS

Why we process your data and the legal grounds for doing so.

Contact form and email data is processed for the purpose of responding to your enquiry. The legal basis is legitimate interest — you have initiated contact and we have a legitimate interest in responding. Data submitted in a batch record request is processed solely to retrieve and provide the requested certificate.

Aggregate analytics data is processed to understand how the website is used and to improve its content. The legal basis is legitimate interest. No individual is identified in this processing.

Cookies that are not strictly necessary are processed only where you have given consent via the cookie consent mechanism on the site. Consent can be withdrawn at any time by revisiting the Cookie Settings in the site footer.

4. DATA RETENTION

How long we keep your data.

Contact form submissions and email correspondence are retained for a period of three years from the date of the final message in the exchange. After this period, the correspondence is deleted from our systems.

Batch record request data is retained for the duration of the lot record retention period (five years from lot release date). This is necessary to maintain the integrity of the batch archive and to fulfil potential follow-up requests on the same lot number.

Aggregate analytics data is not subject to a retention limit as it does not contain personal data.

5. DATA SHARING

Who we share your data with.

Abrona does not sell, rent, or share personal data with third parties for marketing purposes. Personal data may be shared in the following limited circumstances:

Email service providers used to deliver and receive correspondence. These providers process data only as processors acting on our instructions and under data processing agreements.
Website hosting infrastructure providers. These providers have access to server-side data logs in their role as infrastructure operators. They do not use this data for independent purposes.
Legal or regulatory authorities where disclosure is required by law.
6. YOUR RIGHTS

What rights you have over your personal data.

Subject to applicable law, you have the following rights with respect to your personal data held by Abrona:

Access: the right to request a copy of the personal data we hold about you.
Correction: the right to request correction of inaccurate or incomplete personal data.
Erasure: the right to request deletion of your personal data, subject to retention obligations described above.
Restriction: the right to request that we restrict processing of your data in certain circumstances.
Objection: the right to object to processing based on legitimate interest.

To exercise any of these rights, please contact us at [email protected] with the subject line "Personal Data Request". We aim to respond within 30 days.

7. COOKIES REFERENCE

Cookies and tracking technologies.

The Abrona website uses cookies and similar technologies. Full details of the types of cookies used, their purposes, and how to manage your preferences are provided in the Cookie Policy. Cookie preferences can be managed at any time using the Cookie Settings link in the site footer.

8. CONTACT & UPDATES

How to reach us and how this policy may change.

For all data-related enquiries, contact Abrona at:

Abrona
Jl. Cipete Raya No. 109, 12410 Jakarta, Indonesia
[email protected]
+62 21 4760 1538

Abrona reserves the right to update this Privacy Policy. Material changes will be notified by updating the "Last updated" date at the top of this document. Continued use of the website after a change constitutes acceptance of the revised policy. We recommend reviewing this policy periodically.