Data Deletion Policy

1. How to request deletion

To help us verify your identity and locate your records, please include the phone number and (if available) email address associated with your account.

2. What we delete

On verification, we delete or fully anonymize:

• Your profile (name, email, phone number, saved addresses, preferences).
• Saved payment method references (tokens and masked details).
• Loyalty, rewards, and referral balances.
• Marketing consent and communication preferences.
• Messages exchanged with us that are not required for dispute resolution or legal obligations.
• Device identifiers and session data linked to your account.

3. What we are required to retain

Some categories of data must be kept to comply with legal obligations in Indonesia, typically for up to ten (10) years:

• Order and invoice records required by tax and accounting law.
• Payment transaction records retained by our payment processor (Xendit) and required for financial reconciliation.
• Records required to defend legal claims, prevent fraud, or comply with lawful orders.

4. Timeframe

We acknowledge receipt of deletion requests within three (3) business days and complete processing within thirty (30) days. For complex requests we may extend this period by up to sixty (60) additional days and will notify you if we do so.

5. Data held by third parties

Some of your data is stored independently by our service providers. A deletion request to us does not automatically delete data held on their own systems — you may need to contact them directly: Meta/WhatsApp, Xendit, Google.

6. Consequences of deletion

After your data is deleted, you will lose access to your order history, saved addresses, saved payment methods, loyalty points, and any unredeemed rewards or credits. You can create a new account at any time, but past data cannot be restored.

7. Contact