Sample document. This text was written as a sample so the History Outlet site can be reviewed while it is being developed. It has not been reviewed by legal counsel. The official policy will replace it before launch, under a new version number.
Summary
This policy explains what personal data we collect, what it is used for, who it is shared with, and your rights over it, with reference to Indonesian Law No. 27 of 2022 on Personal Data Protection.
Data we collect
- Account: name, email address, password (stored in a scrambled form that cannot be read), preferred language, and your WhatsApp number if you verify it.
- Identity verification: a photo of your ID card and a selfie if you ask for the Verified account level. The files are encrypted, opened only by verification staff, and deleted when the retention period ends.
- Transactions: orders, auction bids, tickets, Balance and Coin, shipping addresses, and the bank account you withdraw to.
- Certificates and NFC cards: the history of certificate checks (method, time, approximate country and city from the internet address).
- Technical: a session cookie that keeps you signed in, a masked internet address for security, and anti-bot checks.
What the data is used for
- Running your account, payments, shipping, auctions, tickets, and the other services you ask for.
- Keeping things secure: preventing fraud, ticket scalping, and unauthorised access.
- Meeting legal obligations, such as keeping records of financial transactions.
- Sending updates about your account and orders. Promotional messages are only sent if you agree to them.
What other people can see
- Checking a certificate number or QR code only shows the item information, with no owner data.
- The full archive only opens for the person who taps the item's NFC card. While you own the item, your name appears the way you choose (full name, alias, or anonymous); your city appears only if you allow it; the sale price stays behind a button or is locked completely.
- After the item changes hands, your account name may appear in the ownership chain of that NFC card archive. Contact details, full address, and ID card number never appear.
- The card check history in the archive only shows the country and month.
Who receives data
We share data only as needed with our payment gateway partner, shipping couriers, email and WhatsApp messaging providers, and site network and security providers, solely to run the service. We do not sell your personal data.
Storage and security
Data is kept while your account is active and for as long as legal obligations require. Sensitive data is encrypted, staff access is limited by role and protected with two-step verification, and every important access is recorded in an audit trail.
Your rights
You can ask for a copy of your data, correct data that is wrong, withdraw consent, or ask us to delete data we are no longer required to keep. Some choices, such as how your name appears in the ownership archive, you can change yourself on the member pages.
Minors
Transaction services are intended for adult users. Minors use the service with the consent and guidance of a parent or guardian.
Changes to this policy
This policy may be updated. Every change is published as a new version with its effective date; the version you agreed to when you signed up is recorded on your account.
Contact
Requests about personal data can be sent to [email protected].
