Last updated: October 4, 2026
This Privacy Policy explains what personal data avicenafilyakako.com (the “Site”) collects, why, and what rights you have. It is written to meet Indonesia’s Law No. 27 of 2022 on Personal Data Protection (the “PDP Law”) and, where they apply to you, the EU and UK General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is Avicena Fily A Kako, an individual based in Jakarta, Indonesia. Contact: hello@avicenafilyakako.com.
2. What I collect
When you browse the Site
- Usage data collected by Google Analytics 4, such as pages viewed, approximate location (country or city), device and browser type, and how you arrived at the Site.
- Technical data that any web server receives, such as your IP address and browser information, which my hosting provider processes to deliver and secure the Site.
- Cookie and advertising data, described in section 5.
When you request a project or contact me
- The information you enter in the project brief form: your name, email address, website URL, the package you are interested in, your goals, your target audience, and anything else you choose to share.
- The content of emails you send me.
When you become a client
- Information needed to deliver the service and invoice you, such as your billing name, business details, and payment records. I do not store full card or bank account numbers; payments are handled by the bank or payment provider you use.
- Access or data you choose to share about your website, such as analytics or Search Console exports.
I do not knowingly collect sensitive (specific) personal data as defined in the PDP Law, such as health, biometric, or financial account data, and I ask you not to send it.
3. Why I use it, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Running, securing, and improving the Site | Usage and technical data | Legitimate interest in operating a secure, useful website |
| Measuring traffic with Google Analytics | Usage data, analytics cookies | Your consent where required by law (for example in the EU and UK); otherwise legitimate interest |
| Showing advertising on articles | Advertising cookies and identifiers | Your consent where required by law; otherwise legitimate interest |
| Replying to your brief and preparing a quote | Brief and email content | Steps you ask me to take before entering into an agreement |
| Delivering services and invoicing | Client and project data | Performance of our agreement |
| Keeping financial records | Invoices and payment records | Legal obligation, including Indonesian tax record-keeping rules |
I do not sell your personal data, and I do not use it for automated decision-making that produces legal or similarly significant effects on you.
4. Who I share it with
I use the following service providers, who process data on my behalf or as independent controllers under their own terms:
- Google — Google Analytics (traffic measurement), Google AdSense (advertising on articles), Google Forms and Google Sheets (project briefs), and Gmail (email).
- Hostinger — website hosting and email.
- Loom — hosting the recorded video walkthroughs I prepare for clients.
- Gravatar (Automattic) and Google Fonts — profile images and fonts loaded on Site pages, which means these providers receive your IP address when a page loads.
- Banks and payment providers — processing client payments.
I may also disclose data where required by law or to protect my legal rights.
5. Cookies and advertising
The Site uses cookies and similar technologies for analytics, advertising, and remembering your consent choices.
- Analytics. Google Analytics sets cookies (such as
_ga) to distinguish visitors and measure usage. - Advertising. Articles on the Site show ads through Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this Site or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this Site and/or other sites on the internet. You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info.
- Consent. Visitors from the European Economic Area, the UK, and Switzerland are shown a consent message managed through Google, where you can accept or decline cookies for personalised ads. You can change your choice at any time through the privacy link in that message.
- Affiliate links. Some articles contain affiliate or referral links, such as to Hostinger. If you click one, the merchant may set its own cookies on its website to record that you arrived through my link. That processing is covered by the merchant’s privacy policy.
You can also block or delete cookies in your browser settings. Some parts of the Site may then work less well.
Learn more about how Google uses information from sites that use its services.
6. International transfers
My service providers, including Google, may process your data on servers outside Indonesia, such as in the United States or Singapore. Where data leaves Indonesia, I rely on providers that offer a level of protection consistent with the PDP Law, or on your consent where the law requires it.
7. How long I keep it
- Project briefs and emails that do not lead to a project: up to 12 months after our last contact, then deleted.
- Client records and invoices: for as long as Indonesian tax and accounting rules require, and otherwise no longer than needed for the project and any follow-up.
- Analytics data: according to the retention period set in Google Analytics, up to 14 months.
8. Your rights
Under the PDP Law, and the GDPR where it applies, you have the right to:
- be informed about how your data is processed;
- access and obtain a copy of your personal data;
- correct inaccurate or incomplete data;
- request deletion of your data;
- withdraw consent at any time, without affecting processing that took place before;
- object to processing, or ask me to limit or delay it;
- receive your data in a commonly used format, or have it sent to another controller, where technically possible;
- object to decisions based solely on automated processing;
- file a complaint with the relevant data protection authority, and seek compensation for violations as provided by law.
To use any of these rights, email hello@avicenafilyakako.com. I may need to confirm your identity before acting on a request, and I will respond within the time required by applicable law.
9. Security
I use reasonable technical and organisational measures to protect personal data, including HTTPS across the Site, access controls on my accounts, and limiting access to client data to what each project needs. No method of transmission or storage is completely secure. If a personal data breach occurs that affects you, I will notify you and the relevant authority as required by the PDP Law.
10. Children
The Site is intended for adults, and my services are only offered to adults and businesses. I do not knowingly collect personal data from anyone under 18. If you believe a child has sent me personal data, please contact me and I will delete it.
11. Changes to this policy
I may update this policy as the Site changes, for example if I launch a newsletter. The “Last updated” date above shows the current version. If a change significantly affects how I use your data, I will make that clear on this page.
12. Contact
Questions or requests about your personal data: hello@avicenafilyakako.com