This Privacy Policy is an overview of how we collect, use, and process your personal data when you use our website, web application, and mobile app (jointly called: "Services"). Please read this Policy carefully, as it becomes legally binding when you use our Services.
1. Responsible Authority
The responsible authority for the collection, processing and use of personal data is:
PT Monit Teknologi Indonesia ("Monit", "us", "we", "our") an Indonesian business with headquarters on the Equity Tower Lvl. 49, Jl. Jendral Sudirman, Kav. 52-53, Jakarta 14120. If you have any questions about how we protect or use your data, please email us at privacy@monit.id.
2. Data We Collect About You
We will collect and process the following data about you:
2.1 Information You Give Us
- You may give us information about you when you sign up to use our service, e.g. when you provide us with personal details like your name and email address.
- This also includes information you provide through your continued use of our Services, participation in discussion boards or other social media functions, through entering a competition, promotion or survey, and by reporting problems with our Services.
- The information you give us may include your name, address, email address, phone number, financial information (including credit card, debit card, or bank account information), payment reason, geographical location, social security number, personal description and photograph.
- In some cases, such as when you send or receive high value or high volume transactions, or where we need to comply with anti-money laundering regulations, we may also need more commercial or identification information from you.
2.2 Information We Collect About You
With regard to your use of our Services, we may automatically collect the following information:
- Details of the transactions you carry out when using our Services, including geographic location from which the transaction originates
- Technical information, including the Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
- Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our Website or App
2.3 Information We Receive From Other Sources
We may receive information about you if you use any of the other websites we operate or the other services we provide. We are also working closely with third parties and may receive information about you from them. For example:
- The banks you use to transfer money to us will provide us with your basic personal information, such as your name and address, as well as your financial information such as your bank account details
- Business partners may provide us with your name and address, as well as financial information, such as card payment information
- Advertising networks, analytics providers and search information providers may provide us with pseudonymised information about you
2.4 Information From Social Media Networks
If you log in to our Services using your social media account (for example, Facebook or Google) we will receive relevant information that is necessary to enable our Services and authenticate you. The social media network will provide us with access to certain information that you have provided to them, including your name, profile image and email address.
2.5 Sensitive Data
We process a limited amount of sensitive data when we carry out verification of identity documents that contain biometric data.
2.6 Children's Data
Our products and services are directed at adults aged 18 years and over, and not intended for children. We do not knowingly collect data from this age group. Our verification process prevents Monit collecting this data.
3. How We Protect Your Personal Information
We take the safeguarding of your information very seriously, and take a number of steps to ensure it stays secure:
- Communication over the Internet between you and Monit servers is encrypted using strong asymmetric encryption
- We update and patch our servers in a timely manner
- We run a Responsible Disclosure and bug bounty program to identify any security issues in Monit services
- Our technical security team proactively monitors for abnormal and malicious activity in our servers and services
- When information you've given us is not in active use, it is encrypted at rest
We do regular audits such as SOC 2 and PCI DSS. As part of these audits, our security is validated by external auditors.
4. Ways We Use Your Information
We use your information:
- To carry out our obligations relating to your contract with us and to provide you with the information, products and services
- To comply with any applicable legal and/or regulatory requirements
- To notify you about changes to our Services
- As part of our efforts to keep our Services safe and secure
- To administer our Services and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes
- To improve our Services and to ensure that they are presented in the most effective manner
- To measure or understand the effectiveness of advertising we serve and to deliver relevant advertising to you
- To provide you with information about other similar goods and services we offer
5. Legal Basis for Processing in Indonesia
The lawful basis we use for collecting and processing your information in Indonesia are as follows:
- Where it is necessary for entering into or performing a contract with you
- Where we have a legitimate interest to do so, provided your rights do not override those interests
- Where you have consented to its uses
- Where our colleagues believe it is in your vital interests to share your personal details
- Where required to comply with our legal obligations
6. Disclosure of Your Information
We may share your information with selected third parties including:
- Affiliates, business partners, suppliers and subcontractors for the performance and execution of any contract we enter into with them or you
- Advertisers and advertising networks solely to select and serve relevant adverts to you and others with your consent
- Analytics and search engine providers that assist us in the improvement and optimisation of our site
- Our group entities or subsidiaries
We may disclose your personal information to third parties:
- In the event that we sell or buy any business or assets
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation
- To assist us in conducting or co-operating in investigations of fraud or other illegal activity
- To prevent and detect fraud or crime
- In response to a subpoena, warrant, court order, or as otherwise required by law
7. Sharing and Storing Your Personal Data
We may transfer and store your data at a destination outside the Indonesian Economic Area. It may also be processed by staff operating outside the Indonesian Economic Area who work for us or for one of our suppliers. By submitting your personal data, you agree to this transfer, storing and processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
8. Profiling and Automated Decision Making
We may use some elements of your data to customise our Services and the information we provide to you, and to address your needs — such as your country of residence and transaction history. When we do this, we take all necessary measures to ensure that your privacy and security are protected — and we only use pseudonymised data wherever possible. This activity has no legal effect on you.
We may use Automated Decision Making (ADM) to improve your experience, or to help fight financial crime. None of our ADM processes have a legal effect on you.
9. Cookies
We use small files (known as cookies) to distinguish you from other users, see how you use our site and products while providing you with the best experience. They also enable us to improve our services.
10. Data Retention
As a regulated financial institution, Monit is required by law to store some of your personal and transactional data beyond the closure of your account with us. We only access your data internally on a need to know basis, and we'll only access or process it if absolutely necessary.
We will always delete data that is no longer required by a relevant law or jurisdiction in which we operate.
11. Your Rights
Subject to applicable laws, you may have the right to access information we hold about you. Under certain conditions, you may have the right to require us to:
- Provide you with further details on the use we make of your information
- Provide you with a copy of the information that you have provided to us
- Update any inaccurate, incorrect, or out of date personal information we hold
- Delete any personal information that is no longer necessary
- Where processing is based on consent, to withdraw your consent so that we stop that particular processing
- Cease direct marketing to you, by contacting us or adjusting your notification preferences in the settings section of your account
- Object to any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights
- Restrict how we use your information whilst a complaint is being investigated
12. Third-Party Links
Our Services may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility for them. Please check these policies before you submit any personal data to these websites.
13. Changes to Our Privacy Policy
To keep up with changing legislation, best practice and changes in how we process personal information, we may revise this Privacy Policy at any time without notice by posting a revised version on this website. To stay up to date on any changes, check back periodically.
14. Contact
Please send any questions, comments or requests regarding this privacy policy to our global privacy team at privacy@monit.id. You can also write to us at the following address:
PT Monit Teknologi Indonesia
Pakuwon Tower Lvl. 5, Kota Kasablanka
Jl. Casablanca No. 88, Jakarta 12190