Privacy Policy for Website PT Kharisma Aroma Nusantara

Last Updated: Rabu, 3 September 2025

This Privacy Policy describes how website PT Kharisma Aroma Nusantara (“we,” “us,” or “our”) collects, uses, and shares your personal information when you use our website www.khan-aroma.com.

By using our website, you consent to the practices described in this policy.

1. Information We Collect

We collect information that you provide directly to us and information about your use of the website automatically.

a) Information You Provide Voluntarily:

  • Comments: When you leave a comment on our site, we collect the data shown in the comments form, your IP address, and browser user agent string to help spam detection.

  • Contact Forms: If you contact us using a form, we collect your name, email address, and any other information you provide in the form.

  • Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included, as other visitors can download and extract this data.

  • Account Registration: If you create an account, we will store your username, name, and email address.

  • Newsletters: If you subscribe to our newsletter, we collect your name and email address.

b) Information Collected Automatically:

  • Technical Data: When you visit, we automatically collect your IP address, browser type, operating system, referring URLs, and device information.

  • Usage Data: We collect information about your interactions with the site, such as the pages you visit, the links you click, and the time spent on the site.

  • Cookies: Our website uses cookies to enhance your experience. See our Cookie Policy below for more details.

2. How We Use Your Information

We use the information we collect for various purposes:

  • To operate, maintain, and improve our website.

  • To respond to your comments, questions, and requests.

  • To send you administrative information, such as updates, security alerts, and support messages.

  • To send you marketing and promotional communications (where you have given your consent).

  • To monitor and analyze trends, usage, and activities in connection with our website.

  • To protect against malicious activity and ensure the security of our website.

  • To comply with our legal obligations.

3. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your information depends on the type of data and the context in which we collect it. We typically process your data because:

  • You have given us explicit consent (e.g., for newsletters).

  • The processing is necessary for the performance of a contract (e.g., providing service you requested).

  • The processing is in our legitimate interests (e.g., site security, analytics) and is not overridden by your rights.

  • To comply with the law.

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

  • Service Providers: We share data with third-party vendors who perform services on our behalf (e.g., payment processing, data analysis, email delivery, hosting services). These providers are obligated to protect your data.

  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

5. Cookies

Our website uses “cookies” to enhance user experience. A cookie is a small file placed on your hard drive with your permission.

Types of Cookies We Use:

  • Strictly Necessary Cookies: Essential for the website to function (e.g., allowing you to log in).

  • Analytical/Performance Cookies: Allow us to recognize and count visitors and see how they move around the site (e.g., Google Analytics). This helps us improve the site.

  • Functionality Cookies: Enable us to personalize content and remember your preferences.

  • Targeting Cookies: Record your visit, pages you have visited, and links you have followed. We may use this information to make our website and advertising more relevant to you.

You can configure your browser to refuse all cookies or to indicate when a cookie is being sent. However, some parts of the website may not function properly without cookies.

6. Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites (like YouTube or Twitter) behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy.

  • Comments: Comment and its metadata are retained indefinitely so we can recognize and approve any follow-up comments automatically.

  • User Accounts: For users that register on our website, we store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

8. Your Data Protection Rights

Depending on your location, you have rights regarding your personal data. These may include:

  • The right to access – You can request copies of your personal data.

  • The right to rectification – You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

  • The right to erasure – You can request that we erase your personal data, under certain conditions.

  • The right to restrict processing – You can request that we restrict the processing of your personal data, under certain conditions.

  • The right to object to processing – You can object to our processing of your personal data, under certain conditions.

  • The right to data portability – You can request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us at [Your Email Address].

9. Where We Send Your Data

Visitor comments may be checked through an automated spam detection service (like Akismet). This means your comment data may be transferred to and processed on servers located outside your country of residence.

10. Children’s Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with information, please contact us, and we will delete it.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: