KFCKU ONLINE SERVICE PRIVACY POLICY

This Privacy Policy is subject to and prepared in accordance with the provisions of the applicable Personal Data Protection Law in the Republic of Indonesia, namely Law No. 27 of 2022 on Personal Data Protection and its implementing regulations.

This Privacy Policy applies to the Online Services ("Platform," "KFCKU App," "Application," "Site," which may be used interchangeably) provided by PT Fast Food Indonesia Tbk (also known as "FFI," "we," or "our") and explains how we may collect, use, and disclose "personal data," "personally identifiable information," or other personal information (collectively, "Personal Data") when you visit, use, order from, or create an account with the Online Services we provide to you. We may provide additional or supplemental privacy policies for specific products or services that we offer at the time we collect personal information.

We are committed to privacy, and the security of your personal data is our priority. We understand that such information may include personal data related to or linked with an individual, such as name and phone number. By accessing or using the Online Services, you acknowledge that you have read, understood, and agreed to the collection, storage, use, and disclosure of your personal information as described in this Policy and our Terms of Use, which are available and may be updated from time to time.

From time to time, Users need to provide their Personal Data to us in connection with access to and use of the Online Services. If Users do not provide their Personal Data to us, we may not be able to provide services on the Online Services or comply with laws or guidelines issued by authorized officials and institutions.

In this Privacy Policy, the term "including" shall not be construed as limiting.

COLLECTION OF PERSONAL DATA
We may obtain User's Personal Data from various sources (e.g., directly from Users or through third parties), including:
1. Information obtained (directly or indirectly) about the computer, phone device, or other hardware used to access the Online Services (including Users' IP address, geographic location, browser/platform type and version, internet service provider, operating system, gender, access to device cameras, referral/exiting pages, visit duration/usage, page views, and any search terms used by Users) ("Device Information").
2. Information obtained (directly or indirectly) on the Online Services when Users place orders, register accounts, participate in loyalty programs, make online purchases, submit inquiries or complaints, subscribe to mailing lists, bulletins, or other marketing communications, surveys, or use other features of our services, including name, date of birth, gender, address, phone number, and email address of Users.
3. We may link or combine activities and information collected from you on the Online Services with information we collect from you offline (e.g., at KFC Indonesia outlets), information received from third parties, and information automatically collected through tracking technology (as defined below). These third parties include, but are not limited to, services like Google Analytics, Meta Pixel, or similar.
USE OF PERSONAL DATA
We may use the Personal Data we obtain about Users for the following purposes:
1. To verify the User's eligibility to use the features and functions of the Online Services.
2. To process the registration of the User's KFC Account as an Online Services User, maintain, and manage User registration.
3. To develop and provide services within the Online Services.
4. To provide services to Users and customer service related to the use of Online Services, including collaborating with third parties to facilitate payments for the purchase of goods and services, shipping, and other related services for purchases, imposing refunds, sending notifications about User transactions, and responding to User inquiries, feedback, claims, or disputes.
5. To improve and develop our offerings through research and development of new functions for Online Services or new products and services that we may offer from time to time.
6. To conduct research, statistical analysis, or surveys, whether verbally or in writing, to manage and protect our business, including information technology infrastructure, measure the performance of Online Services and other services we offer, and ensure User satisfaction with our services.
7. To analyze trends, usage, and other behaviors (both individually and collectively) that help us better understand how Users and our User groups access and use the Online Services and the commercial activities behind them, including for service improvement purposes and responses to User inquiries and preferences.
8. Subject to obtaining User consent in accordance with applicable laws as referred to in section D below, we may provide direct marketing information to Users regarding the services we offer and our affiliates and selected third parties, using the User's Personal Data to contact the User via phone, short message service (SMS), email, mail, and fax.
9. If you make a purchase, your KFC Account financial information (such as balance and purchase details).
10. Customer Support - To facilitate your communication with us, we use your Personal Data:
  - To quickly and securely verify your identity and link directly to your order history.
  - To redeem orders you purchase from the Online Services.
  - To complete the order information you have paid for via the Online Services.
11. To detect, investigate, prevent, or address violations of the Terms and Conditions, all internal policies of the Online Services, applicable industry guidelines, other guidelines, laws, or related regulations.
12. To disclose information to prevent harm or financial loss, report any suspected illegal activity, or respond to any claims or potential claims filed against us or our affiliates. To enable any due diligence and other assessments or evaluations for proposed mergers, acquisitions, financing transactions, or joint ventures.
13. For other legitimate business purposes such as protecting Users from harm, safeguarding lives, ensuring the security of our products and systems, and protecting our rights and/or other property.
14. We may also use User Personal Data in other ways, which we will provide special notice for at the time of data collection or subsequently approved by the User.
DISCLOSURE OF PERSONAL DATA
We may provide information to the following parties for the purposes outlined in section B:
1. KFC accounts and other KFC services.
2. Agents, contractors, or third-party service providers working with us.
3. Entities with whom we have business referral relationships or other agreements.
4. Payment gateways, merchants, and financial institutions.
5. Third-party marketing service providers.
6. Professional advisors, law enforcement, insurance companies, government authorities, etc.
DIRECT MARKETING ACTIVITIES
1. Certain Personal Data may be used in direct marketing and promotional activities.
2. We may offer goods and services we believe are relevant to Users.
3. We may share Personal Data with:
  - Our affiliates
  - Business partners
  - Other third parties
4. User consent will be obtained via opt-in mechanisms.
5. Users can opt out of marketing communications at any time.
SECURITY MEASURES AND DATA STORAGE
We implement technical, administrative, and physical safeguards to protect Personal Data. Data is stored only as long as necessary. Users are responsible for keeping their login credentials secure. FFI is not responsible for misuse of credentials due to User negligence.
THIRD-PARTY SERVICES AND WEBSITES
Links to third-party websites and apps may exist. We are not responsible for their content, privacy, or quality. Users should read their privacy policies.
CHANGES TO THE PRIVACY POLICY
We may update this policy from time to time.
1. This policy is governed by the laws of Indonesia.
2. Disputes will be resolved through deliberation or at South Jakarta District Court.
3. Indonesian version prevails in case of discrepancy.
4. Users transmit data at their own risk. Security cannot be guaranteed.
OTHER PROVISIONS
We may update this policy from time to time.
1. This policy is governed by the laws of Indonesia.
2. Disputes will be resolved through deliberation or at South Jakarta District Court.
3. Indonesian version prevails in case of discrepancy.
4. Users transmit data at their own risk. Security cannot be guaranteed.
DECLARATION
By using Online Services, Users acknowledge and agree to the terms in this Privacy Policy.
FURTHER INFORMATION
To exercise rights or contact us:
PT Fast Food Indonesia Tbk
Address: Jl. MT Haryono Kav 7 Jakarta Selatan 12810, Indonesia
Operating hours:
- Weekday: 08.00 - 20.00
- Weekend: 10.00 - 19.00
Telephone: 14022
E-mail: info@kfcindonesia.com