Who manages your data
PT Orbitcore Network Services, operating as Orbitcore ID, manages personal data submitted through orbitcore.id. Contact us at contact@orbitcore.id for questions or requests relating to your personal data.
This policy covers this company website, enquiries and recruitment communications. Products and services linked from this website may have their own privacy notices. Please read those notices before using a separate product.
Information we collect
When you send an enquiry, we collect your name, email address, optional company name, selected service, message and submission language. We record a submission reference and timestamps. Our team may add relevant follow-up notes, project requirements, proposals and progress to the enquiry record.
If you apply by email, we receive the contact details, CV, portfolio and other information you choose to include. Please avoid sending identity documents, financial credentials or sensitive personal information unless our team explains why it is needed through an appropriate channel.
Our hosting and security providers may process technical information, such as IP addresses, browser information and request logs, to deliver the website, prevent abuse and investigate errors. The contact form uses Cloudflare Turnstile to check submissions.
Why we use this information
We use enquiry information to respond to you, understand your requirements, prepare a proposal and manage discussions that may lead to a project. We use application information to assess suitability for a role and communicate about recruitment.
We process information as needed to take steps at your request before an agreement, perform an agreement, meet applicable legal obligations, and protect the security of our services. Where processing requires consent, we will ask for it and explain the purpose. An enquiry does not sign you up to marketing messages.
Where information is processed
We use Vercel to host the website, Supabase for application data and administrator authentication, and Cloudflare for network and form security. Enquiry information is stored in our restricted leads system. Email correspondence is processed through our email infrastructure and any delivery provider configured for that communication.
These providers may process information on infrastructure outside Indonesia. We are responsible for considering applicable data protection requirements when using these services, including requirements for transfers outside Indonesia. Access by our team is limited to people who need it for the relevant enquiry, project, recruitment or administration.
We do not sell personal data. We may disclose necessary information to service providers supporting these purposes, or where required by law. A project may require additional recipients or processing; we will address that in the relevant agreement or notice.
Cookies and local storage
The website stores your selected light or dark theme in your browser. Administrator login uses authentication cookies, and the admin language preference may be saved in a cookie. Security services may process browser signals for abuse prevention.
The current website does not include advertising trackers or marketing analytics scripts. You can clear browser storage or change browser settings, although this may reset preferences or affect login and security features. If optional tracking is introduced, this notice and the relevant choices will be updated.
How long we keep information
We keep enquiry and project records while they are needed to manage the discussion, deliver work, meet recordkeeping obligations or resolve a dispute. Recruitment information is kept while needed for the recruitment process and related legitimate recordkeeping. Records are not automatically deleted when an enquiry is closed or a job advert expires.
You may ask us to review whether a record is still needed. We assess deletion requests against ongoing projects, applicable obligations and any lawful reason to retain the information. Backup copies and provider logs may take additional time to expire under the relevant infrastructure processes.
Your choices and rights
Subject to applicable Indonesian data protection law, you may request information about processing, access to your data, correction of inaccurate information, withdrawal of consent where consent is the basis, and cessation, restriction or deletion of processing where applicable. Other rights, including data portability, apply where the legal requirements are met.
Email contact@orbitcore.id with the request and enough detail for us to locate the relevant record. We may need to verify your identity before sharing or changing personal data. We will explain any lawful restriction on a request and respond within the period required by applicable law.
Security and incidents
We use access controls, authenticated administrator access and encrypted website connections to help protect information. No system can guarantee absolute security. If an incident occurs, we will assess it, take appropriate steps and provide notices where required by applicable law.
Changes to this policy
The effective date and version shown on this page identify the current policy. We retain an internal version history. Material changes to purposes or processing will be communicated as required, and additional consent will be sought when necessary.