KOPI KENANGAN PRIVACY POLICY
As of July 22, 2025
This Privacy Policy applies to Kopi Kenangan Application and other applications or websites relating to Kenangan Brands or products (the “Application”) that lead the User to this Privacy Policy. PT Bumi Berkah Boga (“Kopi Kenangan, or “We”) builds the Application as a business purposes application and the Application is meant to be used as is.
This Privacy Policy is used to inform the User concerning Kopi Kenangan’s policy in relation to the collection, use, storage, ownership and disclosure of Personal Information if anyone decides to use Kopi Kenangan’s Services and Application.
If the User chooses to use Kopi Kenangan’s Services and Application, then the User acknowledges that the User has read and understood this Privacy Policy and agrees to all its terms. In particular, the User agrees and gives consent to Kopi Kenangan to collect, use, share, disclose, store, transfer, or process the User's Personal Information in accordance with this Privacy Policy.
This Privacy Policy is effective on the date stated in the Privacy Policy. Kopi Kenangan may change, add, remove, revise and/or update this Privacy Policy at any time by posting the revised Privacy Policy in the Application, where Kopi Kenangan will change the date at the top of this Privacy Policy; and the User hereby waives any rights that the User may have to receive specific notices of such changes or modifications. Therefore, Kopi Kenangan advises the User to review this Privacy Policy page from time to time to see if there are any changes thereto. Such changes are effective immediately being posted in the Privacy Policy page and the User’s continued use of the Application after such changes are posted constitutes acceptance of the User to the revised Privacy Policy.
Please read this Privacy Policy carefully to ensure that the User understands how data is processed at Kopi Kenangan. The terms used in this Privacy Policy have the same meaning as those in the Application Terms of Service (as relevant) (the “Terms and Conditions”, which expression shall include any changes and variations thereto from time to time), which may be accessed through the Application unless stipulated otherwise in this Privacy Policy.
Collection of Personal Information
When the User uses Application, or visits a Kopi Kenangan outlet, Kopi Kenangan may collect information concerning the User and the Services that the User use (the “Personal Information”). The Personal Information may include, but is not limited to, details of the User’s personal identification such as first name and surname, user name, password, e-mail address, phone number, and financial account information such as credit card number, birth date and city, demographic information and device data (such as the User’s Android ID number) and other data that are classified as Personal Information in accordance with the applicable laws and regulations, either individually or in combination with other information, whether directly or indirectly through electronic or non-electronic systems. Kopi Kenangan may also collect certain additional Personal Information, among others, as follows:
1. domicile information for promotional purposes or other purposes designated by Kopi Kenangan from time to time;
2. the User’s transactions in Kopi Kenangan outlets and in the Application, including what products purchased by the User, how often the User makes purchases, and any loyalty or promotional program relating to purchases, the User’s subscription process, the User’s participation process in any event held through the Application, to process and manage the User’s loyalty points; to respond to any questions and requests for concerning the Services; to post the User’s comments or statements on the Kopi Kenangan website; to send the User personalized promotions and offers; to detect, prevent, and investigate security breaches or frauds; to develop, improve, and provide products and Services in order to provide the User with better experience;
3. (in case of any errors whatsoever in the Application) Kopi Kenangan shall collect data and information (through Third Party products) in the User’s mobile phone called “Data Log”. Such Data Log may include information such as the Internet Protocol (“IP”) address for the User’s device, the name of the device, the operating system version, the configuration of the Application when using the Services, the time and date of Service use by the User, and other statistical data;
4. the location of the User’s device, including GPS location, for the purpose of improving and/or facilitating Kopi Kenangan Services and activate the functions of its websites or Application in order to provide the User with information concerning Kopi Kenangan outlets located near the User, to allow long-distance ordering, and to allow remote payment of Kopi Kenangan products and services; and/or
5. the User's financial and payment data, including bank account and payment card details, virtual account data, and details of payments or transfers made by the User on the Application.
Some of the above Personal Information that we collect is sensitive in nature. We collect this information only with your consent and/or in strict compliance with applicable laws. The Personal Information collected by Kopi Kenangan shall be stored by it and used as described in this Privacy Policy.
Kopi Kenangan may also collect the User’s Personal Information from Third Parties (including Kopi Kenangan’s agents, vendors, suppliers, contractors, partners and any others who provide services to Kopi Kenangan, who collect the User’s Personal Information and/or perform functions on behalf of Kopi Kenangan, or whom Kopi Kenangan collaborate with). We may collect data in various forms and for various purposes, including purposes permitted under the applicable laws and regulations.
The Application may use Third Party services that may collect information used to identify the User.
In circumstances where the User provides Kopi Kenangan with Personal Information relating to other individuals (such as Personal Information relating to the User’s spouse, family members, friends, or other parties), the User represents and warrants that the User has obtained such individual’s consent for, and hereby consent on behalf of such individual to, the collection, use, disclosure and processing of his/her Personal Information by Kopi Kenangan.
Use of Personal Information
In addition to the other purposes of using Personal Information as set out in this Privacy Policy, Kopi Kenangan may use the collected Personal Information for the following purposes or other purposes designated by Kopi Kenangan and permitted by prevailing laws and regulations (the “Purpose of Use”):
1. maintain, develop, test, improve, and personalize the Application to meet the needs and preferences of the User;
2. monitor and analyze the User’s activity, behavior and demographic data including habit and usage of various services available on the Application;
3. identify and register the User and to administer, verify, deactivate, or manage the User’s account;
4. process and facilitate orders and payment transactions made by the User, including where applicable, transactions made through any payment card or account available over the Application;
5. notify the User of any transaction, activities, purchaser, program and services occurred within the Application or other system linked to the Application;
6. send the User direct or targeted marketing communications, advertisement, vouchers, surveys, and information on special offers or promotions;
7. process or manage benefits, rewards, achievements, membership levels (including Kenangan Points and Kenangan VIP) earned by the User;
8. provide the User with the information on product security and notify product recalls (if any);
9. post the User’s comments or statements on Kopi Kenangan website or social media;
10. detect, prevent or investigate security breaches or fraud;
11. facilitate the function of the website or Application, including linking of account and/or wallet, if the User performs or activates the linking of accounts and/or wallets between the User Account and Third Party platforms;
12. communicate with the User and send the User information in connection with the use of the Application;
13. process and respond to the questions and suggestions received from the User;
14. notify the User of any updates to the Application or changes to the provided Services; and
15. offer or provide services from affiliates of Kopi Kenangan or Third Party who work with Kopi Kenangan.
Kopi Kenangan may also use Personal Information of the User more generally for the following purposes:
1. monitor usage of the Application and administer, support and improve the performance efficiency, growth, user experience and the functions of the Application;
2. provide assistance in relation to and to resolve any technical difficulties or operational problems with the Application or the Services;
3. generate statistical information and analytics data for the purpose of testing, research, analysis, product development, commercial partnership, and cooperation;
4. prevent, detect and investigate any prohibited, illegal, unauthorized or fraudulent activities;
5. facilitate business asset transactions (which may extend to any mergers, acquisitions or asset sales) involving Kopi Kenangan and/or any of its affiliates; and
6. enable Kopi Kenangan to comply with obligations under any prevailing laws and regulations, including but not limited to, responding to regulatory enquiries, investigations or directives, complying with regulatory filing, reporting, and licensing requirements, and conducting audit checks, due diligence and investigations.
Kopi Kenangan may create, use, license or disclose Personal Information, provided, however, (i) that all identifiers have been removed such that the data, alone or in combination with other available data, cannot be attributed to or associated with or cannot identify any person, and (ii) that has been combined with similar data such that the original data forms a part of a larger data set.
Disclosure of Personal Information
By using the Services, the User hereby agrees that Kopi Kenangan may share Personal Information between companies in the group of Kopi Kenangan, disclose, provide access to or share Personal Information with the Service providers, individuals and other parties (including agents, vendors, suppliers, contractors, partners, financial parties (this includes payment processors and facilitators), the authorized government institution and other parties providing services to Kopi Kenangan or the User, performing tasks on behalf of Kopi Kenangan, or parties with whom Kopi Kenangan has commercial cooperation) (the “Third Party”) for the Purpose of Use, the following purposes or other purposes as regulated in this Privacy Policy or as permitted by prevailing laws and regulations:
1. to facilitate Kopi Kenangan’s Services, provide Services on behalf of Kopi Kenangan (including those performed by Third Party service providers);
2. to assist Kopi Kenangan in analyzing how Kopi Kenangan’s Services is used;
3. to process transactions or the User activities in the Application in the context of cooperation between Kopi Kenangan and the Third Party, which may include, among other things, allowing the Third Party to introduce or offer products or services to the User, authenticate the User or connect the User with an Account or carry out other activities including marketing, research, analysis, research, product development or other purposes as determined in the collaboration between Kopi Kenangan and Third Party. However, the Third Party is obligated to not to disclose or use such User's Personal Information for purposes other than those agreed with Kopi Kenangan;
4. for purposes as stated in the prevailing government policies, regulations or laws (if instructed, requested, required or permitted by the authorised government);
5. for purposes specified in prevailing laws and regulations (including but not limited to respond inquiries regarding regulations, investigations or guidelines, or comply with statutory filing and reporting requirements pursuant to the laws) and if so required or authorized by prevailing laws and regulations;
6. for the purposes of any legal process between the User and Kopi Kenangan, or between the User and other parties, in connection with, or in connection with the Services;
7. for the purposes of a merger, sale of company assets, consolidation or restructuring, financing or acquisition transactions of all or part of the Kopi Kenangan’s business or its affiliates by or to another company (even if the transaction is subsequently discontinued); and/or
8. for any other purposes Kopi Kenangan will notify the User when obtaining the User’s consent.
In circumstances related to the User's health or public interest, Kopi Kenangan may share Personal Information with the authorised government institution and/or other institutions that may be appointed by the authorised government or have cooperation with Kopi Kenangan, for the purpose of contact tracing, supporting initiatives, policies or government programs, public health and other purposes as reasonably necessary.
For the avoidance of doubt, Kopi Kenangan shall not sell, rent or use Personal Information from the User for commercial purposes other than as stated above, and may disclose and share the User's Personal Information if Kopi Kenangan has obtained the User's consent for such disclosure.
International Transfer of Personal Information
Subject to the applicable privacy law, the User’s Personal Information may be transferred to, stored, or processed outside of the User’s country for one or more of the Purpose of Use. The User agrees and gives consent to Kopi Kenangan to transfer the Personal Information outside of the User’s country to the companies in the group of Kopi Kenangan or to the Third Party.
When Kopi Kenangan transfers the User’s Personal Information to the outside of the User’s country, Kopi Kenangan will comply with its legal and regulatory obligations in relation to the User’s Personal Information and putting appropriate safeguards in place to ensure an adequate level of protection for the Personal Information. Kopi Kenangan will also ensure that the recipient in the relevant country is obliged to protect the User’s Personal Information at a standard of protection comparable to the protection under applicable privacy laws.
The User’s Personal Information may also be stored or processed outside the User’s country by our personnel working for us in other countries, or by our third-party service providers, vendors, suppliers, partners, contractors, or affiliates.
Personal Information Security
Confidentiality and security of the User’s Personal Information is the most important thing for Kopi Kenangan. Kopi Kenangan protects the User’s Personal Information using technical, physical, and administrative security steps in order to reduce the risk of loss, misuse, unauthorized access, reveal, or modification of Personal Information, including:
1. when the User sends highly sensitive information (such as credit card number) through the Kopi Kenangan Application, Kopi Kenangan encrypts the transmitted information by following advice of Secure Sockets Layer (SSL) protocols.
2. Kopi Kenangan reviews its information collection, storage and processing practices, including physical security measures to prevent unauthorized access to Kopi Kenangan’s system.
3. Kopi Kenangan restricts access to Personal Information to Kopi Kenangan employees, contractors, and agents who need that information in order to process it. Anyone with this access is subject to strict confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.
Even though Kopi Kenangan uses security technologies and processes to help protect the User’s Personal Information, there is no internet transmission process or electronic storage method that is 100% (one hundred percent) safe for use or guarantee that such Personal Information will not be intercepted, accessed, disclosed, altered or destroyed by unauthorized third parties, due to factors beyond Kopi Kenangan’s control. Therefore, Kopi Kenangan cannot guarantee absolute security. The User is responsible for maintaining the confidentiality of the User’s Account details, including the User’s password and must always maintain and be responsible for the security of the device that the User uses.
Retention and Deletion of Personal Information
The User understands and acknowledges the following:
1. Personal Information collected from the User may be stored, transferred or processed by Third Party service providers. Kopi Kenangan shall use all reasonable efforts to ensure that all such Third Party service providers to provide a level of protection commensurate with Kopi Kenangan’s commitments under this Privacy Policy.
2. Kopi Kenangan stores the User's Personal Information for the period necessary to satisfy the Purpose of Use, or other purposes described in this Privacy Policy or permitted by prevailing laws and regulations unless a longer storage period is required or permitted by law. Once the User's Personal Information is no longer required for the Services, Purpose of Use, other purposes, or Kopi Kenangan no longer has a legal or business purpose for storing Personal Information, or if the User deletes their Account through the Application, Kopi Kenangan will retain the Personal Information for 90 (ninety) calendar days (the “Retention Period”) and take steps to delete, destroy, anonymize or prevent access to or use of such Personal Information for any purpose other than compliance with this Privacy Policy, or for the purposes of safety, security, fraud prevention and detection, in accordance with the prevailing laws.
3. the User understands that some Personal Information may be stored by other parties including government institutions in certain ways. If Kopi Kenangan shares Personal Information with authorized government institutions and/or other institutions that may be appointed by the authorized government or have cooperation with Kopi Kenangan, the User agrees and acknowledges that the storage of Personal Information by the relevant institution shall follow the respective data storage policies from the said institutions.
The User can delete Personal Information whenever the User likes, among others, by visiting the “Me” tab, clicking “Edit Profile” and then “Delete Kopi Kenangan Account” sections in the Application. The User is also required to follow steps and requirements to delete and remove Personal Information in the Application, namely, by confirming the Terms and Conditions, Privacy Policy, the User’s PIN and verification through One Time Password (OTP).
When the User deletes their Personal Information and deactivates their Account, Kopi Kenangan will retain the User’s Personal Information for the Retention Period starting from the date of deletion. This is done for several reasons, including:
1. to fulfill legal obligations, such as tax data retention requirements or obligations related to legal investigations.
2. to process the User requests, such as account recovery requests or requests for transaction-related information.
3. to protect against fraud or other illegal activities.
After the end of the Retention Period, Kopi Kenangan ensures that the User’s Personal Information is securely and completely deleted from Kopi Kenangan’s servers or only transformed into anonymized form.
The User must understand and acknowledge that after such deletion of Personal Information and Account, the User may no longer be able to use the Application or services. A deletion of Personal Information and Account by the User may result in the termination of the User’s Account and the User’s contractual relationship with Kopi Kenangan, with all accrued rights and obligations arising remaining fully protected by law.
The User may recover their Personal Information and reactivate their Account before the end of the Retention Period, subject to the Terms and Conditions.
User Rights as Personal Data Subjects
In accordance with and subject to exceptions under prevailing laws and regulations, the User, as owners of Personal Information, have the following rights:
1. to obtain information about the basis and purpose of the request and use of Personal Information and to obtain access to and a copy of his/her Personal Information in accordance with prevailing laws and regulations.
2. if necessary (including, where possible, to submit a request for access to and a copy of his/her Personal Information in a format that is commonly used or readable by electronic systems), the User has the right to complete, update, and/or correct errors and/or inaccuracies in his/her Personal Information in accordance with the purposes for which the Personal Information is processed.
3. to terminate the processing of, delete, and/or destroy his/her Personal Information, and withdraw consent to the processing of his/her Personal Information that has been provided to Kopi Kenangan, in accordance with prevailing laws and regulations and in a manner determined by Kopi Kenangan.
4. to object to decisions based solely on automated processing of an individual's profile (profiling).
5. delay or limit the processing of Personal Information in a manner proportionate to the purposes for which the Personal Information is processed.
If the User has any questions regarding the User’s Personal Information, please contact us using the contact details provided in the "How to Contact Kopi Kenangan" section in this Privacy Policy. We will respond to the User’s requests within the timeframes stipulated by prevailing regulations.
To protect the User’s privacy, Kopi Kenangan may require the User to verify the User’s identity before processing the User’s request. We may require the User to provide supporting information or documentation to substantiate the User’s request. Once verified, we will implement the User’s request within the timeframes stipulated by prevailing law.
Kopi Kenangan reserves the right to charge the User a reasonable fee for handling and processing the User’s request to access the User’s Personal Information, subject to prevailing regulations, and to notify the User of the estimated cost.
Kopi Kenangan will correct/update the User’s Personal Information based on the User’s request in accordance with prevailing laws and regulations, unless otherwise stipulated in other prevailing regulations.
Manage and Update Personal Information
Subject to the prevailing laws and regulations, the User may access and/or update Personal Information that is in the possession and control of Kopi Kenangan by visiting the ‘Me’ tab and then the ‘Edit Profile’ section or by contacting Kopi Kenangan’s customer service.
Kopi Kenangan reserves the right to refuse the User’s requests to access, or to revise, some or all the Personal Information that Kopi Kenangan owns or controls if permitted or required under the prevailing laws. This includes circumstances where the Personal Information may contain references to others or where a request for access or a request for revision is for reasons that Kopi Kenangan deems irrelevant, unserious or troublesome.
Third Party’s Website or Platform
The Services may contain links to other websites or platforms owned by the Third Parties. If the User clicks a Third Party’s link, the User shall be directed to the relevant website or platform. Please note that such external websites or platforms are not operated by Kopi Kenangan. Therefore, Kopi Kenangan strongly suggests that the User reviews the privacy policy of the websites or on those external platforms in advance. Kopi Kenangan has no absolute control of, and is not responsible for, the content, privacy policy, or practices of any website, platform or services of any third party whatsoever.
When the User uses the Application and enables the fingerprint and/or facial recognition features on their mobile device for authentication purposes, please note that Kopi Kenangan does not store such biometric data. Unless otherwise notified to the User, this data is stored on the User’s mobile device and may be stored by Third Parties, such as the manufacturer of the User’s mobile device. The User agrees and acknowledges that Kopi Kenangan is not responsible for any unauthorized access or loss of any biometric data stored on the User’s mobile device.
Privacy of Children
Kopi Kenangan does not mean for its website or Application Services be used by anyone who is underage according to prevailing laws and regulations, unless under the supervision of their parents or guardians. If the User is a parent or guardian and he/she is aware that a child in his/her charge has provided Personal Information to Kopi Kenangan, please immediately contact Kopi Kenangan so that we will be able to perform all further necessary actions.
Cookies
“Cookies” are files with a small amount of data usually used as unique, anonymous identifiers. They are sent to the User’s browser from the websites that they visit, and they are stored in the internal memory of the User’s device.
When the User uses the Application and Services, certain information may be automatically collected by using Cookies. In addition, the Application may use Third Party’s codes and libraries who uses Cookies to collect information and improve the Services. The User can disable cookies by clearing cache from the User’s Application. If the User disables Kopi Kenangan’s Cookies, the User may not be able to use some parts of the Services.
How to Contact Kopi Kenangan
If you have any questions regarding this Privacy Policy or you would like to obtain access to your Personal Information, please contact dpo@kopikenangan.com.