Privacy Policy
In accordance with the Republic of Indonesia Personal Data Protection Law (UU No. 27/2022 - Undang-Undang Pelindungan Data Pribadi).
Last Updated: January 15, 2026 | Effective Date: January 1, 2026
1. Data Controller Identification
This Privacy Policy governs the processing of personal data by PT Prana Harmoni Nusantara ("PranaFlow Sanctuary", "we", "us", or "our"), operating the yoga and Pilates studio facility at Jl. Kemang Timur Raya No. 48, Bangka, Mampang Prapatan, Jakarta Selatan 12730, Indonesia.
2. Personal Data We Collect
We collect personal information necessary to deliver safe studio services, process reservations, and manage customer communications, including:
- Identity Data: Full name, national identity number (NIK/KTP or Passport number for foreign nationals), and date of birth.
- Contact Data: WhatsApp mobile number, email address, and residential domicile.
- Health & Wellness Screening: Voluntary disclosures regarding physical conditions (such as pregnancy stage, spinal disc history, hypertension, or recent joint injuries) to allow instructors to provide safe pose modifications.
- Transaction Data: Payment receipt records via Indonesian QRIS, bank transfer reference numbers, and membership activation dates.
- Technical Data: IP address, device browser type, and cookie identifiers collected during website browsing.
3. Legal Basis and Purpose of Processing
Your personal data is collected and processed under the lawful bases defined in Article 20 of UU PDP No. 27/2022:
- Performance of Contract: Facilitating class reservations, membership check-ins, and schedule confirmations.
- Explicit Consent: Sending wellness newsletters, workshop announcements, or studio event updates (consent may be revoked at any time).
- Vital Interests & Physical Safety: Enabling yoga and Pilates teachers to suggest appropriate anatomical adaptations to prevent injuries.
- Legal Compliance: Retaining financial transaction ledgers for Indonesian tax and accounting audits under applicable national statutes.
4. Data Storage and Security
All electronic data is stored within encrypted cloud servers compliant with Indonesian electronic data standards (PP No. 71/2019). We maintain strict role-based access limitations so only certified instructors and studio managers can view relevant practice notes.
5. Disclosure to Third Parties
We do not sell, rent, or trade your personal data. Disclosures are limited to authorized payment gateway operators (licensed by Bank Indonesia) and emergency medical services if an acute health incident occurs on studio premises.
6. Your Rights Under UU PDP No. 27/2022
As a data subject, you hold statutory rights including:
- Right to access and obtain a copy of your personal data records.
- Right to correct inaccurate or incomplete wellness profile data.
- Right to request deletion or destruction of your personal data upon cancellation of membership.
- Right to withdraw previously granted promotional marketing consent.
7. Data Protection Officer (DPO) Contact
To exercise your rights or submit a privacy query, contact our designated Data Protection Officer:
PT Prana Harmoni Nusantara – Legal & Compliance
Jl. Kemang Timur Raya No. 48, Bangka, Mampang Prapatan, Jakarta Selatan 12730
Email: [email protected] | WhatsApp: +62 812-3322-1100