This website is published and operated by PT Consilio Consulting Asia, a company incorporated in the Republic of Indonesia (“Consilio”, “we”, “us”).
Jl. Gn. Tangkuban Perahu No.145, Padangsambian Klod, Kecamatan Denpasar Barat, Kota Denpasar, Bali 80117, Indonesia
Email: info@consilio-asia.com
For the purposes of the EU General Data Protection Regulation (GDPR) and Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), PT Consilio Consulting Asia is the controller of the personal data described below.
This policy explains what happens to personal data when you visit consilio-asia.com or contact us through it.
It does not cover the handling of client files and engagement records once you become a client of Consilio. That is governed by our engagement documentation and by the professional and statutory obligations that apply to the work itself.
When you simply read the site, we do not ask you for anything, and we do not require you to identify yourself.
Our hosting provider records standard server log information, which includes your IP address, browser type, the pages requested and the time of the request. This happens automatically on essentially every website and is necessary to serve pages and to keep the site secure and available.
When you use the consultation form, we collect the information you choose to put in it. Typically that is your name, your email address, and whatever you tell us about your situation.
When you subscribe to our newsletter, we collect your email address.
We do not operate user accounts, we do not take payments through this website, and we do not ask for identity documents, financial information or any other sensitive category of data through the site.
This is worth stating plainly, because it is unusually simple.
Our website forms do not store submissions in a website database. When you submit a form, the content is sent to us as an email and nothing is retained on the website itself. Your enquiry therefore lives in our business email system, not on this website.
The practical consequence is that there is no store of past enquiries sitting on the website that could be exposed if the website were compromised.
To respond to your enquiry. So we can answer the question you asked and, where relevant, discuss whether we can help. Our basis is the steps taken at your request before entering a contract, together with our legitimate interest in responding to people who contact us.
To keep a record of correspondence. So we have a coherent history of our dealings with you. Our basis is our legitimate interest in running our practice properly.
To send the newsletter. Because you asked us to. Our basis is your consent, which you may withdraw at any time.
To operate and secure the website. To serve pages, prevent abuse and keep the site available. Our basis is our legitimate interest in a functioning and secure website.
Under Indonesia’s Personal Data Protection Law we rely on the corresponding grounds, principally your consent, the performance of pre-contractual steps at your request, and our legitimate interests.
Strictly necessary cookies. A small number of cookies and similar technologies are needed to serve the site and keep it secure, including those set by our hosting and content delivery infrastructure. These cannot be switched off and do not require your consent.
Analytics. We use Google Analytics to understand how the site is used: which pages people read, how they arrived, and broadly which country they are in. It tells us what to write more of and what to fix. It is not used to identify you personally, to build advertising profiles, or to follow you across other websites.
Analytics only runs if you agree to it. The first time you visit, you are asked to accept or decline. If you decline, no analytics cookies are set and no analytics data is collected about your visit. You can change your mind at any time through the cookie settings link in the footer.
Where you do consent, Google acts as our processor for that data, and it may be transferred outside the European Economic Area and the United Kingdom. Google publishes its own privacy terms describing how it handles it.
What we do not do. We run no advertising trackers, no social media pixels, no profiling tools, and no cross-site tracking of any kind.
Web fonts. The typefaces used on this site are served from our own servers. Loading a page makes no request to Google Fonts or to any other font provider, so no third party sees your IP address for this purpose.
Embedded map. Our contact page includes a map from Google Maps. It does not load when you arrive. You see a placeholder in its place, and the map loads only if you consent to it. If you do, Google receives your IP address and may set its own cookies, governed by its terms rather than ours. If you would rather not, the same address is written out in text on the page.
Links to other services. Some pages link out to Google Maps and to WhatsApp. Those are ordinary links. Nothing is loaded from them unless you choose to click through, at which point that service’s own terms and privacy policy apply.
We do not sell personal data, and we do not share it for anyone else’s marketing.
Personal data is handled on our behalf by the service providers that let us run a website and a business email system, specifically our website hosting and content delivery provider, our email and productivity provider, and Google Analytics where you have consented to it. They act on our instructions and are bound to protect the data.
We may also disclose personal data where we are required to by law, by a regulator, or by a court.
We are based in Indonesia, and our service providers operate internationally. If you are in the European Economic Area or the United Kingdom, this means your personal data will be transferred outside that area.
Where such transfers happen, we rely on appropriate safeguards, including the European Commission’s standard contractual clauses where our providers offer them.
We keep enquiry correspondence for as long as needed to deal with your enquiry and, where a relationship follows, for as long as our professional, statutory and tax record-keeping obligations require.
Where an enquiry does not lead to any engagement, we do not keep it indefinitely, and we remove correspondence that no longer serves a purpose.
Newsletter subscriptions are kept until you unsubscribe.
Subject to the conditions and exceptions in the applicable law, you can ask us to:
To exercise any of these, email info@consilio-asia.com. We will respond within the period the applicable law allows. We may need to verify your identity first, which is a protection for you rather than an obstacle.
If you are in the EEA or the UK, you also have the right to complain to your national data protection authority. If you are in Indonesia, you may raise the matter with the relevant supervisory authority under the Personal Data Protection Law. We would rather you came to us first so we can put it right.
We take reasonable technical and organisational measures to protect personal data, including encrypted connections to this website and access controls on the systems where correspondence is held.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send us identity documents, financial account details or other sensitive material through the website form. If we need that material, we will tell you a secure way to provide it.
This website is directed at businesses and adults. We do not knowingly collect personal data from children.
We may update this policy. When we do, we will change the date at the top. If a change is significant, in particular any change to the tracking position described in section 6, we will make that clear rather than relying on a quiet edit.
PT Consilio Consulting Asia
Jl. Gn. Tangkuban Perahu No.145, Padangsambian Klod, Kecamatan Denpasar Barat, Kota Denpasar, Bali 80117, Indonesia
Email: info@consilio-asia.com