Privacy Policy
How PT Nex Solusi Teknologi (NEX Network) collects, uses, stores, and protects your personal data in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection (PDP Law).
General Provisions
This Privacy Policy explains how PT Nex Solusi Teknologi (“NEX Network” or “we”), as a Personal Data Controller, processes the personal data of visitors to nex.co.id, prospective customers, and customers of our services, including broadband and dedicated internet, hosting, cloud, VPS, colocation, business email, VoIP, and managed IT services.
This policy is based on Indonesian Law No. 27 of 2022 on Personal Data Protection (PDP Law), Government Regulation No. 71 of 2019 on the Operation of Electronic Systems and Transactions, and telecommunications regulations applicable to internet service providers.
By using our website and services, you acknowledge that you have read and understood this Privacy Policy. Where processing requires consent, we will clearly ask for your consent before processing your data.
Personal Data We Collect
Data you provide directly
- Identity and contact details: full name, phone or WhatsApp number, email address, company name, and job title.
- Installation and subscription data: installation address and location, chosen plan, and copies of identification (such as an ID card or tax ID) where required for customer registration and billing.
- Communications: messages sent through contact forms, WhatsApp, email, phone, and support tickets.
- Account data: usernames and passwords (stored encrypted) for the customer portal or login pages.
Data collected when you use our services
- Technical service data: IP addresses, device identifiers such as modem or ONT MAC addresses, connection status, bandwidth usage, and fault records needed to operate and maintain the network.
- Billing data: invoice history, payments, and transaction records.
Data collected automatically when you visit our website
- Server logs: IP address, browser type, pages visited, access time, and referring page.
- Cookies and similar technologies: see Cookies and Similar Technologies.
We do not collect specific personal data as referred to in Article 4 of the PDP Law, such as health, biometric, or genetic data or criminal records, unless required by law or with your consent.
Purposes and Legal Bases
We process personal data only for clear and lawful purposes, on the legal bases set out in Article 20 of the PDP Law:
| Purpose | Legal basis |
|---|---|
| Answering enquiries, preparing quotes, and surveying installation sites | Your request prior to entering an agreement and/or your consent |
| Customer registration, activation, installation, and service maintenance | Performance of the subscription agreement |
| Billing, payments, and customer administration | Performance of the agreement and legal obligations, including taxation |
| Technical support, fault handling, and network monitoring | Performance of the agreement and legitimate interest in maintaining service quality |
| Network security and preventing fraud and misuse | Legitimate interest and legal obligations |
| Responding to official requests from competent authorities | Legal obligations |
| Website analytics and service improvement | Your consent and legitimate interest |
| Promotions, new product information, and satisfaction surveys | Your consent, which you may withdraw at any time |
Cookies and Similar Technologies
The nex.co.id website uses cookies to run basic site functions, protect forms from spam, and understand how visitors use the site.
- Necessary cookies: keep the site secure and working, including Cloudflare protection and Google reCAPTCHA on forms.
- Analytics and advertising cookies: Google Analytics and Google Ads to measure visits and ad effectiveness.
- Embedded content: Google Maps, Google Fonts, and WhatsApp links may set cookies or log visits according to their providers’ policies.
You can delete or block cookies in your browser settings. Blocking certain cookies may prevent some site features from working properly. To opt out of Google Analytics measurement, you can use the Google Analytics Opt-out Browser Add-on.
Sharing Data with Others
We do not sell or rent your personal data. Data is shared only as necessary with:
- installation and network maintenance partners working on our behalf;
- infrastructure, data center, cloud, email, and software providers that support our services;
- banks and payment service providers to process invoices;
- professional advisers, such as auditors or legal counsel, who are bound by confidentiality;
- government agencies or law enforcement, where required by law.
Every party that processes data on our behalf (a Personal Data Processor) must keep the data confidential and secure in accordance with its agreement and applicable regulations.
Transfers Outside Indonesia
Some of the service providers we use, such as Google, Cloudflare, and Meta (WhatsApp), may process data on servers outside the jurisdiction of the Republic of Indonesia. Such transfers are carried out in accordance with Article 56 of the PDP Law: to countries with an equal or higher level of data protection, with adequate and binding safeguards, or based on your consent.
Storage and Retention
We keep personal data only for as long as needed for its processing purpose:
- Prospective customer data: no longer than 12 months after the last communication if it does not result in a subscription.
- Customer data: for the duration of the subscription and afterwards for as long as required by law, for example financial and tax records that must be kept for up to 10 years.
- Technical and security logs: for as long as needed for network operations and security, or as required by regulations.
- Website analytics data: according to the retention settings of the analytics provider.
When the retention period ends, data is deleted or destroyed, or anonymized so it can no longer identify you.
Data Security
We apply reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, and destruction, including:
- encrypted connections (HTTPS) on the website and customer portal;
- access restricted to job needs, with two-factor authentication for administrator accounts;
- firewalls, 24/7 network monitoring, regular system updates, and data backups;
- confidentiality obligations for employees and partners.
In the event of a personal data protection failure, we will notify you and the competent authority in writing within 3 × 24 hours in accordance with Article 46 of the PDP Law. The notice will include the personal data disclosed, when and how it was disclosed, and the steps taken to handle and recover from it.
Your Rights as a Data Subject
Under the PDP Law, you have the right to:
- obtain information about our identity, the legal basis, the purpose of requesting and using the data, and the accountability of the party requesting it;
- complete, update, and/or correct inaccurate personal data;
- access and obtain a copy of your personal data;
- end processing and delete and/or destroy your personal data;
- withdraw consent you have given for processing;
- object to decisions based solely on automated processing, including profiling, that have legal effects or significantly affect you;
- suspend or restrict processing in proportion to its purpose;
- sue and receive compensation for violations in the processing of your personal data;
- obtain your personal data in a commonly used, machine-readable format and transmit it to another data controller.
Certain rights may be limited for the interests set out in Article 15 of the PDP Law, such as national defense and security or law enforcement. Withdrawing consent or deleting data may also mean we can no longer provide certain services, where the data is needed to perform the subscription agreement.
How to Submit a Request
Send your request by email to info@nex.co.id with the subject “Personal Data Request”, or via WhatsApp Customer Service at +62 811-1011-1833. Please include your name, customer number (if any), registered contact details, and the type of request.
To protect your data, we will verify your identity before processing the request. Requests for access and for updating or correcting data will be followed up within 3 × 24 hours of receiving a complete request, in accordance with the PDP Law. Other requests will be processed within the time limits set by applicable regulations.
Children’s Personal Data
Our services are intended for adult users and businesses. We do not knowingly collect personal data from children under 18 without the consent of a parent or guardian, as required by Article 25 of the PDP Law. If you know that your child has provided personal data to us, please contact us so it can be deleted promptly.
Links to Other Sites
Our website may contain links to third-party sites or apps, such as WhatsApp, Google Maps, and social media. This Privacy Policy does not apply to those third-party sites, so we recommend reading their own privacy policies.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our services or regulations. The latest version is always available on this page with its update date. For significant changes, we will notify customers by email, WhatsApp, or a notice on the website.
Contact Us
For questions, requests, or complaints about personal data, please contact:
PT Nex Solusi Teknologi (NEX Network)
Mustika Park Place, Jl. Kawista Blok C7 No.15, Burangkeng, Setu, Bekasi Regency 17320, Indonesia
Phone: +62 21-82636544
Email: info@nex.co.id
WhatsApp Customer Service: +62 811-1011-1833