Privacy Policy — Aman Point

Effective Date: 08-09-2025
Data Controller: PT AMAN POINT INTERNATIONAL GROUP
Address: MENARA CAKRAWALA, 12th Floor Unit 5A, Jalan M.H. Thamrin, Kebon Sirih, Menteng, Jakarta Pusat, DKI Jakarta 10340, Indonesia
Site: https://shop.amanpoint.com
Contact: info@amanpoint.com (Subject: Privacy Request)

1) Who We Are

Aman Point is an Indonesia-based company selling cosmetics, herbal, and personal-care products. We respect your privacy and protect your data under applicable laws.

2) Data We Collect & Why

We collect only what is necessary for legitimate purposes:

  • Account Data (if you create one): name, email, hashed password, preferences.
    Purpose: account creation, login, support, fraud prevention.

  • Order & Payment Data: name, address, phone, email, basket items, amounts and currency. We never store full card numbers; payments are processed by third-party providers (e.g., PayPal when used).
    Purpose: order fulfillment, invoicing, shipping, tax/legal compliance.

  • Comments & Reviews: form inputs + IP address and user-agent to fight spam/abuse.
    Purpose: moderation, security, quality.

  • Uploaded Media: avoid uploading images with embedded location data (EXIF-GPS). Visitors could extract location data from images.

  • Device & Usage Data: truncated/anonymized IP where feasible, browser/OS info, visited pages for security and performance analytics.
    Purpose: site security, fraud detection, aggregated stats (minimized/anonymous where possible).

Gravatar: We may send a hash of your email to Gravatar to check for an avatar. Their policy: https://automattic.com/privacy/ . After a comment is approved, your avatar may appear with it.

3) Cookies

We use cookies necessary to run the site and enhance your experience. Typical WordPress/WooCommerce cookies include:

  • Strictly Necessary: wordpress_logged_in_*, wordpress_sec_* (login session), wp-settings-* (UI prefs),
    woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* (cart/order).

  • Optional/Analytics: only with your consent (if enabled).

Typical durations (for guidance):

  • Display preferences: up to 1 year.

  • Login session: 2 days (or 2 weeks if “Remember Me” is enabled).

  • Comment convenience cookies: up to 1 year.

You can control cookies in your browser. Removing strictly necessary cookies may break certain features.

4) Embedded Content

Articles may include embedded content (videos, images, articles). Such content behaves as if you visited the third-party site and may collect data per its own policy.

5) How We Share Data

We do not sell personal data. Minimal sharing occurs with:

  • Payment processors: e.g., PayPal (when used) for secure payments.

  • Logistics/shipping partners: to deliver your orders and provide tracking.

  • Hosting/support/security providers: to operate the Site and detect fraud/attacks.

  • Regulators/law enforcement: if legally required.

We maintain data processing agreements with our vendors to safeguard confidentiality and security.

6) Retention

We keep data only as long as necessary then delete or anonymize it:

  • Comments & metadata: indefinitely by default to streamline future approvals (you may request deletion).

  • Security/server logs: typically up to 12 months.

  • Orders/billing: 5–7 years for tax/accounting.

  • Customer accounts: while active or as legally necessary.

7) Your Rights

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to processing, and to withdraw consent. Request via info@amanpoint.com with identity verification. We will respond within a reasonable timeframe.

8) Security

We use HTTPS (TLS), hashed passwords (never stored in plain text), role-based access controls, event logging, and least-privilege practices. No method of transmission/storage is 100% secure; we will notify, where required, of any material incident.

9) Children’s Privacy

Our services are not directed to children under 13 (or the higher local age). If we learn of data collected from a minor without proper consent, we will delete it.

10) International Transfers

Your data may be processed on servers/providers outside your country. We implement reasonable safeguards (contracts/security standards) to protect your data.

11) Changes to This Policy

We may update this policy. Changes become effective upon posting with an updated Effective Date. Continued use constitutes acceptance.

Contact: info@amanpoint.com