Privacy Policy

Harsono Strategic Consulting (HSC) recognizes the importance of privacy and the sensitivity of personal data, and we are committed to protecting any personal data we hold. This Privacy Policy outlines how we manage your personal data and safeguard your privacy. Your use of our online services or your provision of personal data to us constitutes your acknowledgment of the terms of this Privacy Policy. Please do not send us any of your personal data if you do not want it to be used in the ways described in this Privacy Policy.

Scope

This Privacy Policy applies to all employees, clients, contractors, and third parties whose personal data is processed by HSC. The scope of this data processing encompasses a range of activities and sources, including but not limited to information collected through your engagement of our services, our website (www.harsono-strategic.com), and from other channels or interactions with our firm.

Data Collection

Generally, we collect personal information directly from you at the start and throughout our representation. In some cases, we may also obtain information from other sources, for example, a government agency or registry, recruitment agency, or from your employer if we are representing you at their request.

The types of information we gather include your name, email address, phone number, and other such personal data. HSC collects personal data through lawful and fair means, ensuring the process is not overly intrusive. If you need to provide us with documentation containing sensitive data not necessary for our purposes, we request that you redact this information before submission.

Data Use and Processing

We use and process personal data only for legitimate purposes, such as to:

Fulfill contractual obligations with you or the organization you work for
Comply with our legal, regulatory, accounting, reporting requirements
Include you in any direct marketing activities
Perform our tasks in the context of public interest, where required by the relevant laws and regulations

HSC does not disclose your personal information to any third party to enable them to market their products and services.

Disclosure of Personal Data

HSC may disclose collected personal data under specific conditions, including:

When you have consented to the disclosure
As part of our professional services that necessitate sharing your information with third parties, where your consent is assumed unless otherwise specified
For the purpose of fee establishment or collection
When using third-party services for administrative tasks (e.g., data backup or file storage), where these parties adhere to our privacy and security standards
If engaging other parties on your behalf, as per your request and for your representation
When legally required, such as in response to a court subpoena

Any disclosure of personal data will be carried out in strict compliance with applicable personal data laws and regulations.

Data Protection Measures

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

Data encryption
Data processing recording
Access controls
Regular security assessments
Employee training on data protection

Data Retention

We will only retain your personal data for as long as is reasonably necessary in the circumstances. Personal data provided in connection with the provision of our tax and other professional services will be retained in accordance with the firm’s retention policies and applicable data protection and other legislation unless we agree otherwise with you, in writing.

Your Rights

Individuals whose data is processed by HSC have rights under the Indonesian personal data laws and regulations. These rights encompass the right to access, rectify, erase, or restrict the processing of their data. You can exercise your rights by contacting your contact in HSC or HSC’s IT Department.

Update of Personal Data

To ensure the effectiveness of our tax and professional services, it is crucial that the personal information we hold for you is accurate and current. Please notify us promptly of any changes to your information during our engagement, allowing us to update our records accordingly.

Security

The transmission of personal data via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our online services; any transmission is at your own risk. Once we have received your personal data, we will take reasonable steps to use procedures and security features to try to prevent unauthorized access, modification or disclosure.

Data Breach Response

A data breach includes any failure to protect an individual’s personal data in terms of confidentiality, integrity, and availability, including violations of security, whether intentional or unintentional, leading to the destruction, loss, alteration, disclosure, or unauthorized access to personal data being transferred, stored, or processed.

In the event of a data breach, we have established procedures to:

Identify and contain the breach
Assess the impact on personal data
Notify affected individuals and regulatory authorities as required
Take steps to prevent future breaches

Updates and Review

HSC reserves the right to change this Privacy Policy from time to time. Any updates will be posted on our website. Therefore, a notice will not be sent to any individual and you are deemed to have acknowledged and agreed to any amended versions of the Policy if you continue to use our website after amendments have occurred.

A cookie is a small piece of data or message that is sent from our web server to your web browser and is then stored on your hard drive. Cookies cannot read data off your hard drive or cookie files created by other sites, and do not damage your system. Some of the cookies that we use are strictly necessary for functionality of our website, while others are for enhancing user experience. Please note that if you choose not to use cookies, some of the features of our site may not work as well as we intend.

Contact Information

For further information regarding this Privacy Policy, including to exercise your rights, please contact dataprotectionofficer@harsono-strategic.com.

Last updated April 2026