1. Introduction
Smooth Kids (“we”, “us”, or “our”) operates the website at smoothkidswear.com (the “Service”). We are committed to protecting your personal data and your right to privacy in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection (UU Pelindungan Data Pribadi).
This Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you consent to the practices described here.
2. Information We Collect
2.1 Information you provide
- Account information: name, email address, password (hashed), and phone number when you create an account.
- Order information: shipping address, billing details, and order history when you place an order.
- Communication: messages you send us via WhatsApp, email, or social media.
2.2 Information collected automatically
- Device and usage data: IP address, browser type, pages visited, referring URLs, and time spent on the site.
- Cookies and similar technologies: see Section 6 below.
2.3 Information from third parties
We may receive information about you from third-party services you use to sign in or pay (e.g. your email from social login providers, or payment metadata from our payment processor).
3. How We Use Your Information
- To fulfil and ship your orders, including processing payments.
- To communicate with you about your orders, account, and customer service requests.
- To improve our products, store layout, and shopping experience (including personalization).
- To send marketing communications (only if you opt in; you may unsubscribe at any time).
- To measure and analyze traffic and conversions (e.g. via Meta Pixel).
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations under Indonesian law.
4. Legal Basis for Processing
We process your personal data on the following bases:
- Consent — when you create an account, subscribe to marketing, or otherwise agree.
- Contract performance — to fulfil orders and process payments you initiate.
- Legitimate interests — fraud prevention, analytics, and service improvement.
- Legal obligation — tax reporting and other regulatory requirements.
5. How We Share Your Information
We do not sell your personal data. We share it only with the following categories of recipients, strictly for the purposes listed above:
- Payment processors — Xendit (invoice & payment gateway). Your card data is handled entirely by Xendit; we never see or store it.
- Shipping providers — Biteship (domestic) and RajaOngkir (international). We share your name, address, phone, and parcel details to deliver your order.
- Marketing & analytics — Meta (Facebook) Pixel for ad attribution. See Section 7.
- Communication tools — WhatsApp, email providers, to respond to your inquiries.
- Authorities — when required by law or to protect our rights.
6. Cookies
We use cookies and similar technologies to keep you logged in, remember cart contents, and measure traffic. The categories we use:
- Essential — session ID, cart ID. Required for the site to function; cannot be disabled.
- Analytics & advertising — Meta Pixel cookies, used to measure campaign effectiveness and show relevant ads on Facebook/Instagram.
You can disable non-essential cookies via your browser settings. This may affect some site features.
7. Meta Pixel
We use Meta Pixel to understand how people use our site and to measure the effectiveness of our ads on Facebook and Instagram. The Pixel records events such as page views, product views, add-to-cart, checkout, and purchases. Metadata shared with Meta may include your IP address, device info, and the actions you take on our site. Meta's privacy policy is at facebook.com/privacy/policy.
8. Data Retention
We retain your personal data only as long as needed to fulfil the purposes described in this Policy or as required by Indonesian tax and commercial law (typically 10 years for transaction records). After that, data is deleted or anonymized.
9. Data Security
We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls, and secure storage. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
10. Your Rights
Under UU PDP, you have the following rights regarding your personal data:
- Right to access and obtain a copy of your data.
- Right to correct inaccurate or incomplete data.
- Right to delete your data (subject to legal retention).
- Right to restrict or object to processing for marketing.
- Right to withdraw consent at any time.
- Right to data portability.
- Right to lodge a complaint with the relevant Indonesian authority.
To exercise any of these rights, please contact us at smoothkids833@gmail.com.
11. International Data Transfers
Your data may be processed in countries other than Indonesia (e.g. Meta in the US, Xendit in Indonesia/Philippines). We only transfer data to countries that provide an adequate level of protection or under appropriate safeguards.
12. Children’s Privacy
Our products are for children, but our Service is intended for adults — parents or guardians placing orders on behalf of children. We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, please contact us and we will delete it.
13. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified by email or via a notice on this page. The “Last updated” date above indicates when the Policy was last revised.
14. Contact Us
For any privacy-related questions or requests, contact our Data Protection Officer at:
Email: smoothkids833@gmail.com
WhatsApp: +62 811 1111 9739