Victory Smart Home
Privacy Policy
Who we are
Victory Smart Home is a sole-proprietor smart-home integration business owned by Victor, based in Surabaya and serving clients across Indonesia. This policy explains how we handle personal data in connection with victorysmarthome.com and enquiries about our services.
Contact: [email protected] or our WhatsApp business number shown on the site.
Information we receive
Our website is static. It has no accounts or forms. We do not set cookies or use analytics or tracking.
Apart from standard web-server and Cloudflare security logs (IP address, browser type, pages requested), which are kept briefly and not used to identify visitors, the only information we receive is what you choose to send us by email or WhatsApp. This may include a name, contact details, project location, messages, and information about a home automation project. Please send only what is needed for your enquiry and avoid sending passwords or other sensitive access details.
Website hosting and communication providers
Our website is served through Cloudflare, which may process technical information, including IP addresses, for security and service delivery.
Email and WhatsApp providers also process communications under their own privacy policies. These providers may process data outside Indonesia. These providers may store or process messages outside Indonesia. By contacting us through email or WhatsApp you agree to that transfer, as permitted under Article 56 of UU No. 27 of 2022.
How we use information
We use information you send to respond to enquiries, prepare project quotations, arrange and deliver services, provide support, and meet legal obligations.
Depending on the circumstances, we process personal data with your consent, to take steps you request before an agreement, to perform an agreement, or to meet legal obligations, as permitted by Indonesia’s Personal Data Protection Law (UU No. 27 of 2022).
We do not sell personal data or use it for advertising or tracking.
Sharing and security
We share information only with people needed for your project, for example a hardware supplier delivering to your address or an electrician working with us, where you authorise it, or where required by law.
We take reasonable steps to protect personal data from unauthorised access, loss, or disclosure. No online service or communication method can guarantee complete security.
Remote maintenance of client systems takes place only with the client’s consent, through an encrypted WireGuard VPN. Credentials you give us for a project are used only for that project and deleted when the work is finished, unless ongoing support needs them. During remote maintenance we access only what the agreed work requires and do not copy or keep data from your system.
How long we keep information
We keep personal data only as long as needed for the enquiry, project, ongoing support, or applicable legal obligations. When it is no longer needed, we delete it or remove identifying details.
Your rights
Subject to applicable conditions under UU No. 27 of 2022, you may request access to, correction of, or deletion of your personal data, withdraw consent, or exercise other rights provided by that law.
Email [email protected] to make a request or raise a privacy concern. We may need to verify your identity before acting. We respond within the time limits set by UU No. 27 of 2022. If a breach affects your personal data, we will notify you within 3 × 24 hours of becoming aware of it, as that law requires. Withdrawing consent does not affect processing that was lawful before withdrawal.
Changes to this policy
We may update this policy as our services or legal requirements change. The date above identifies the latest version.