Legal
Privacy Policy
The short version
This website runs no analytics, no advertising pixels, and no third-party trackers. It loads nothing from any third-party server — fonts are hosted here. Reading these pages tells us nothing about you.
We receive your details only when you deliberately send them: by emailing us, by sending an enquiry, or by ordering and paying for work. Payments are handled on our payment provider’s secured form — your card and banking credentials never reach us.
Who we are
PT Sentra Digital Kreatif is an Indonesian Perseroan Perorangan (individual limited company) operating sdkgroup.my.id and the products Rhema, Sunnyside, and Forgia. For anything in this policy, write to hello@sdkgroup.my.id.
Each product runs its own website on its own subdomain. This policy covers sdkgroup.my.id only.
What we collect
When you only browse: nothing. There is no analytics, no tracking, no advertising, and no account required to read these pages.
If you email us — including through the contact form — we receive whatever you put in it. Typically that is your name, email address, and optionally your company, phone number, and a description of what you need. We use it only to reply and to discuss the work you asked about.
If you order or pay for work, we collect what is needed to do that job and to bill for it: your name or company name, email address, phone number, billing address where an invoice requires one, the details of what you ordered, and the record of each payment. We use it to deliver the work, to issue invoices and receipts, and to meet Indonesian tax and accounting obligations.
We never see your card or banking credentials. Online payments are entered on the payment provider’s own secured form, not ours. What comes back to us is the outcome of the payment and a masked reference — enough to mark the invoice paid, and nothing more.
How long we keep it. Correspondence is kept for as long as the business relationship needs it, then deleted. Invoices, receipts, and the payment records attached to them are kept for 10 years, because Indonesian law requires accounting records to be retained — we cannot delete those earlier even if you ask, and that is the one limit on the erasure right below.
We never sell, rent, or trade personal data, and we do not use it for automated decision-making or profiling.
Storage on your device
The site stores two small preferences on your own device. Neither identifies you, neither is shared, and neither leaves your browser except as noted:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
sdk-theme | localStorage | Remembers light or dark appearance | Until you clear it |
sdk-lang | localStorage and cookie | Remembers the language you picked, so the site stops redirecting you by country. Written only when you click the language switch. | 12 months |
Why there is no cookie banner. Consent is required for storage that is not strictly necessary — analytics, advertising, tracking. This site has none. What it stores are first-party preferences you set yourself, which are exempt under Article 5(3) of the ePrivacy Directive and equivalent Indonesian practice. Showing a consent banner for them would ask you to approve something that needs no approval. You can clear both at any time in your browser settings.
Third parties
We keep these to the minimum, and we name every one:
- Cloudflare — hosts this site and our ordering system, and processes connection data as our infrastructure provider.
- Our payment provider — a payment institution licensed and supervised by Bank Indonesia. When you pay online, the amount, the invoice reference, and the contact details needed to process and receipt that payment are shared with them. They act as an independent controller for the payment itself and apply their own policy to it.
Fonts are served from this domain rather than from Google Fonts, precisely so that your IP address is not disclosed to a third party in order to render a page. There is no analytics or advertising service of any kind.
Rhema, Sunnyside, and Forgia have their own websites, but they are product lines of this same company — this policy covers them too.
Your rights
Under Indonesian Law No. 27 of 2022 on Personal Data Protection, and under the GDPR where it applies to you, you may ask us to access, correct, delete, or stop using your personal data, and you may withdraw consent or object to processing. Write to hello@sdkgroup.my.id and we will respond within 30 days. You also have the right to complain to your data protection authority.
Children
This site is not directed at children and we do not knowingly collect data from them.
Changes
If this policy changes we will update the date at the top. Material changes will be described in the section they affect.