Skip to main content

Data Subject Rights & Requests

Under Indonesian Law No. 27/2022 on Personal Data Protection (UU PDP) you have a number of rights with respect to your personal data. This page explains those rights and how to exercise them. We currently process requests by email; a self-service portal is on our roadmap.

Last updated: 2026-05-05

1. Your Rights

You have the right to:

  • Access — obtain confirmation of whether we process your personal data, and a copy of that data.
  • Rectify — request correction of inaccurate or incomplete personal data.
  • Delete — request erasure of your personal data, subject to legal retention obligations (e.g. tax records).
  • Restrict — ask us to limit how we use your data while a complaint is being investigated.
  • Port — receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Withdraw consent — at any time, where processing is based on consent. Withdrawal does not affect prior lawful processing.
  • Complain — to the Indonesian Ministry of Communication and Informatics (Kominfo) or, where applicable, your local data-protection authority.

2. How to File a Request

Send an email to hello@nircoffee.id with the subject line [DATA REQUEST] <type> (for example: [DATA REQUEST] Access). Use the template below — copying the relevant fields helps us respond faster.

Email template

To: hello@nircoffee.id
Subject: [DATA REQUEST] <Access | Rectify | Delete | Restrict | Port | Withdraw>

Hello NiR Coffee team,

I am writing to exercise my rights under UU PDP / GDPR.

Full name (as on account):
Email address used with NiR Coffee:
Account ID (if known):
Type of request: <Access | Rectify | Delete | Restrict | Port | Withdraw>
Details (what data, what correction, etc.):

I confirm that the information above is accurate and that I am the data subject (or am authorised to act on behalf of the data subject).

Kind regards,
<Your name>
Open email template

3. Identity Verification

To protect your data we may need to verify your identity before fulfilling a request. We do this in the lightest-touch way available — typically by replying from your registered email address, or in higher-risk cases by asking a small set of account-specific questions. We will never ask for your password or full card number.

4. Our Response Time

We acknowledge requests within 7 working days and respond substantively within 30 days, in line with UU PDP. If a request is unusually complex we may extend the response window by up to a further 30 days; if so we will tell you why before the original deadline. There is no fee for routine requests; for repeated or unfounded requests we may charge a reasonable administrative fee or refuse the request, in which case we will explain why.

5. Right to Complain

If you are not satisfied with how we have handled your request, you have the right to lodge a complaint with the Indonesian Ministry of Communication and Informatics (Kementerian Komunikasi dan Informatika, "Kominfo"). Where applicable you may also contact your local supervisory authority. We would, however, appreciate the chance to address your concerns first — please write to hello@nircoffee.id.

6. Contact

All data-rights requests: hello@nircoffee.id with subject line [DATA REQUEST] <type>.

7. Effective Date

This page is effective as of 2026-05-05.

Cookies & Privacy

We use cookies for essential site functions, analytics, and marketing. You can accept all, reject non-essential, or customize your choice. See our Privacy Policy and Cookie Policy for details.