Kebijakan Privasi
Privacy Policy
3.1 Pengendali Data / Data Controller
PT. Muwaffaqah Sukses Mandiri mengendalikan data pelanggan yang dikumpulkan langsung melalui website dan kanal resmi Yura Bites. Penyedia pembayaran, logistik, hosting, atau komunikasi dapat bertindak sebagai pengendali atau pemroses tersendiri sesuai layanannya.
PT. Muwaffaqah Sukses Mandiri controls customer data collected directly through the website and official Yura Bites channels. Payment, logistics, hosting, or communication providers may act as separate controllers or processors for their services.
3.2 Data yang Dikumpulkan / Data Collected
Data dapat mencakup identitas dan kontak, tanggal/bulan lahir untuk program Birthday, alamat, Member ID, jenis Membership dan loyalty tier, saldo serta ledger Yura Points, reward/voucher, relasi referral, isi order, lifetime spend eligible, jadwal, tracking, status pembayaran, pengiriman, keluhan, bukti foto/video, komunikasi pelanggan, serta data teknis dan keamanan yang wajar.
- Secure Member QR menggunakan token acak berumur singkat. Sistem menyimpan hash/token metadata yang diperlukan untuk verifikasi dan masa berlaku; QR tidak dirancang untuk memuat nama, email, nomor WhatsApp, atau data pribadi langsung.
- Yura Bites tidak menyimpan PIN, OTP, CVV, atau password pembayaran.
- Data yang diminta dibatasi pada kebutuhan layanan, transaksi, keamanan, dan program Membership.
Data may include identity and contact details, birthday day/month for the Birthday program, address, Member ID, Membership type and loyalty tier, Yura Points balance and ledger, rewards/vouchers, referral relationships, order contents, eligible lifetime spend, schedules, tracking, payment status, shipping, complaints, photo/video evidence, customer communications, and reasonable technical and security data.
- Secure Member QR uses a short-lived random token. The system stores the hash/token metadata needed for verification and expiry; the QR is not designed to contain the member's name, email, WhatsApp number, or direct personal data.
- Yura Bites does not store payment PINs, OTPs, CVVs, or passwords.
- Requested data is limited to service, transaction, security, and Membership program needs.
3.3 Cara Data Diperoleh / How Data Is Collected
Data diperoleh saat pengguna mengisi form, mendaftar membership, memesan, membayar, melacak order, menghubungi layanan pelanggan, atau menggunakan website. Informasi tertentu juga dapat diterima dari penyedia pembayaran, kurir, dan penyedia teknologi.
Data is collected when users submit forms, register for membership, order, pay, track orders, contact customer service, or use the website. Certain information may also be received from payment providers, couriers, and technology providers.
3.4 Tujuan Pemrosesan / Processing Purposes
Data digunakan untuk memverifikasi dan memenuhi order, menghitung transaksi, memproses pembayaran/refund, pengiriman dan tracking, menerbitkan serta mengamankan Membership, menghitung Yura Points dan tier, memproses reward, Birthday dan Referral, menampilkan Exclusive Member Access yang relevan, memverifikasi Secure Member QR, mencegah penyalahgunaan/penipuan, menangani keluhan, memenuhi kewajiban hukum, dan meningkatkan layanan secara proporsional.
Data is used to verify and fulfill orders, calculate transactions, process payments/refunds, shipping and tracking, issue and secure Membership, calculate Yura Points and tiers, process rewards, Birthday and Referral programs, display relevant Exclusive Member Access, verify Secure Member QR, prevent abuse/fraud, handle complaints, comply with legal duties, and proportionately improve services.
3.5 Dasar Pemrosesan / Legal Basis
Data diproses sejauh diperlukan untuk melaksanakan transaksi atau permintaan, memenuhi kewajiban hukum, menjaga kepentingan sah dalam keamanan dan operasional, serta berdasarkan persetujuan untuk kegiatan yang memerlukannya.
Data is processed as necessary to perform transactions or requests, comply with legal obligations, protect legitimate security and operational interests, and based on consent where required.
3.6 Pembagian Data / Data Sharing
Data relevan dapat dibagikan secara terbatas kepada Midtrans atau penyedia pembayaran, Biteship dan/atau kurir, penyedia hosting/database, layanan email dan komunikasi, konsultan profesional, serta instansi berwenang. Yura Bites tidak menjual data pribadi untuk pemasaran pihak ketiga.
Relevant data may be shared on a limited basis with Midtrans or payment providers, Biteship and/or couriers, hosting/database providers, email and communication services, professional advisers, and authorized authorities. Yura Bites does not sell personal data for third-party marketing.
3.7 Retensi dan Keamanan / Retention and Security
Data disimpan selama diperlukan untuk transaksi, Membership, Points/reward audit, referral, pembukuan, keamanan, pencegahan penipuan, kewajiban hukum, dan sengketa. Ledger Points dan riwayat reward dapat dipertahankan untuk integritas perhitungan serta audit. Token Secure Member QR berlaku singkat dan metadata token kedaluwarsa dibersihkan secara berkala. Setelah tujuan berakhir, data akan dihapus, dianonimkan, atau dibatasi sesuai kemampuan teknis dan ketentuan. Langkah administratif dan teknis yang wajar diterapkan untuk membatasi risiko.
Data is retained as needed for transactions, Membership, Points/reward audit, referrals, accounting, security, fraud prevention, legal duties, and disputes. Points ledgers and reward history may be retained to preserve calculation integrity and auditability. Secure Member QR tokens are short-lived and expired token metadata is periodically cleaned up. Once purposes end, data will be deleted, anonymized, or restricted as technically and legally appropriate. Reasonable administrative and technical safeguards are applied to reduce risk.
3.8 Hak Pelanggan / Customer Rights
Pelanggan dapat meminta akses, informasi, koreksi, penghapusan atau pembatasan yang sah, menarik persetujuan untuk pemrosesan berbasis persetujuan, serta menyampaikan keberatan atau keluhan. Permintaan dapat dikirim ke shop.mwsm@gmail.com atau membership@jajankeren.com dan dapat memerlukan verifikasi identitas.
Customers may request access, information, correction, lawful deletion or restriction, withdraw consent for consent-based processing, and submit objections or complaints. Requests may be sent to shop.mwsm@gmail.com or membership@jajankeren.com and may require identity verification.
3.9 Cookies dan Analitik / Cookies and Analytics
Website dapat menggunakan cookies atau teknologi serupa untuk fungsi dasar, keamanan, preferensi, analitik, dan peningkatan layanan. Pembatasan cookies melalui browser dapat membuat sebagian fungsi tidak berjalan optimal.
The website may use cookies or similar technologies for core functionality, security, preferences, analytics, and service improvement. Browser restrictions on cookies may prevent some functions from operating properly.
3.10 Anak, Perubahan, dan Kontak / Children, Changes, and Contact
Transaksi ditujukan bagi pengguna yang dapat memberikan persetujuan secara sah. Orang tua atau wali bertanggung jawab atas data anak. Kebijakan dapat diperbarui dan versi terbaru akan dipublikasikan. Gunakan subjek “Permintaan Data Yura Bites” untuk pertanyaan privasi.
Transactions are intended for users who can lawfully consent. Parents or guardians are responsible for children's data. This policy may be updated and the latest version will be published. Use the subject “Yura Bites Data Request” for privacy inquiries.