Privacy Policy

Last updated: 13 June 2026

This Privacy Policy explains how PT Aset Kripto Nusantara ("Crypto Tax Indonesia", "we", "us") collects, uses, and protects your personal data when you use cryptotaxindonesia.com (the "Site") and our services. We process personal data in accordance with Law No. 27 of 2022 on Personal Data Protection ("PDP Law").

1. Who we are

PT Aset Kripto Nusantara, a company registered in Indonesia and operating from Bali, runs Crypto Tax Indonesia, a crypto asset tax compliance practice.

For any question about this policy or your personal data, contact us at info@cryptotaxindonesia.com.

2. What personal data we collect

We collect personal data only when you choose to provide it, and a limited amount automatically when you visit the Site.

Data you give us directly

• When you use our contact form or email us: your name, email address, and anything you choose to include in your message.
• When you sign up to receive information from us: your name and email address.
• When you become a client: information necessary to deliver our services, which may include identity details, tax identification (NPWP), and transaction records you provide for reconciliation.

Data collected automatically

Basic technical information from our hosting provider, such as IP address, browser type, and pages visited, used to keep the Site secure and working.

Our exposure calculator

The exposure calculator runs entirely in your browser. The figures you enter are processed on your own device and are never sent to us or stored by us. We do not see or retain calculator inputs.

We do not currently use analytics or advertising cookies. If this changes, we will update this policy and request consent where the law requires it.

3. Why we use your data and our legal basis

Purpose	Legal basis under PDP Law
To respond to your enquiry or message	Your consent
To send you information you have requested	Your consent
To provide our services to you as a client	Performance of a contract with you
To keep the Site secure and functioning	Our legitimate interest in operating the Site
To meet legal, tax, and record-keeping obligations	Compliance with a legal obligation

We will not use your data for a new purpose without telling you and, where required, obtaining your consent.

4. Who processes your data

We use a small number of third-party service providers ("processors") to operate. These providers process data on our behalf and under our instructions:

• Hosting and deployment: Netlify, which hosts the Site and processes basic technical and server data. Netlify operates infrastructure located outside Indonesia.
• Email: our email service provider, which processes messages sent to our published email addresses.
• Formal tax filing partner: where you engage us and formal SPT submission is required, your relevant information is shared with a licensed (BKP-certified) tax consultant who handles the filing. We share only what is necessary for that purpose, and only with your knowledge.

We do not sell your personal data to anyone.

Because some providers are located outside Indonesia, your data may be transferred and processed abroad. Where this occurs, we take reasonable steps to ensure your data remains protected to a standard consistent with the PDP Law.

5. How long we keep your data

• Enquiry and signup data: kept for as long as needed to respond to you and maintain our relationship, then deleted on request or when no longer needed.
• Client records: kept for a minimum of 10 years, in line with Indonesian tax record-keeping requirements under the General Tax Provisions and Procedures Law (UU KUP), and deleted or anonymised thereafter unless a longer period is required by law.

6. Your rights under the PDP Law

You have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data, subject to our legal retention obligations;
• withdraw consent at any time, where our processing is based on consent;
• object to or restrict certain processing;
• obtain a copy of your data and, where applicable, have it transferred.

To exercise any of these rights, email info@cryptotaxindonesia.com. We will respond within the timeframe required by law.

7. How we protect your data

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, but we take steps appropriate to the sensitivity of the data we handle.

8. Children

Our services are not directed to anyone under 18, and we do not knowingly collect their personal data.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed. Material changes will be communicated where appropriate.

10. Contact

PT Aset Kripto Nusantara — Crypto Tax Indonesia
Email: info@cryptotaxindonesia.com
Bali, Indonesia