Privacy Policy

1. Introduction

This Privacy Policy explains how PT Gumelarix Innovation Technology ("Rawooh", "we", "us") collects, uses, discloses and protects personal data when you use Rawooh Platform (the "Platform"). It should be read together with our Terms & Conditions . We process personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (UU PDP) and other applicable Indonesian law.

2. Data We Collect

We collect only what is needed to sell you a ticket and get you into the event:

• Buyer details, entered at checkout: first name, last name, email address and phone number.
• Ticket holder details, for each ticket in your order: first name, last name, email address and phone number. These may be the same as the buyer's.
• Additional attributes required by the Store you are buying from. Organizers may ask for extra information relevant to their event; what is asked is shown on the checkout form before you submit it.
• Order and payment records: order and invoice numbers, tickets purchased, amounts, currency, the payment method used, payment status and timestamps.
• Technical data generated automatically when you use the Platform, such as IP address, browser type and server logs, used for security, fraud prevention and troubleshooting.

3. Data We Do Not Collect

We never collect, process or store payment credentials. Card numbers, CVV codes, expiry dates, bank account credentials, OTPs and e-wallet PINs are entered on the payment gateway's own channel or in your banking application, never on the Platform. There is no card entry form anywhere on Rawooh Platform. We also do not knowingly collect data from children, and we do not collect sensitive personal data such as biometric, health, religious or financial-account information.

4. Data Stored in Your Browser

Your shopping cart is stored locally in your own browser's local storage (under a key named after the Store you are shopping in) so that it survives a page refresh. It is not transmitted to us until you submit an order, and it is cleared automatically once your order has been created. You can clear it yourself at any time by emptying your cart or clearing your browser storage. We also use strictly necessary cookies and equivalent storage for session handling and your light/dark theme preference.

5. How We Use Your Data

• To create, process and confirm your Order.
• To issue tickets to each named ticket holder and to deliver your e-ticket and invoice by email.
• To verify payment status with the payment gateway and reconcile transactions.
• To contact you about your Order, including if a ticket cannot be fulfilled or a refund is required.
• To investigate and resolve complaints, disputes and duplicate payments.
• To detect and prevent fraud and abuse of the Platform.
• To meet our legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for advertising profiling.

6. Legal Basis

We process your personal data because it is necessary to perform the purchase contract between you and the Store, because you have consented at checkout, because we have a legitimate interest in securing the Platform and preventing fraud, and because certain records must be kept to comply with Indonesian law.

7. Who We Share Data With

• The event organizer whose Store you purchased from. They receive the buyer and ticket holder details for their own order so they can admit ticket holders and manage their event. Each organizer is responsible for its own use of that data.
• Our payment gateway, which receives the transaction details needed to process and verify your payment.
• Service providers acting on our behalf, such as hosting, email delivery and customer support tooling, bound by confidentiality obligations.
• Authorities, where disclosure is required by law, court order or a lawful regulatory request.

8. Data Retention

Order, invoice and payment records are retained for as long as needed to provide the service and to satisfy our legal, tax, audit and accounting obligations. Complaint records are retained in accordance with our internal data retention policy and applicable regulations. When data is no longer needed for any of these purposes, it is deleted or anonymised.

9. Security

The Platform is served over HTTPS, so data exchanged between your browser and our servers is encrypted in transit. Requests to our backend systems are made server-side; backend credentials are never exposed to your browser. Access to personal data is limited to personnel who need it. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the risk.

10. Your Rights

Subject to applicable law, you may ask us to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete data we no longer have a lawful basis to keep.
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent, where processing is based on consent.

Send requests to rawooh@gumelarix.com. We may ask you to verify your identity and to provide the order or invoice number concerned. Note that deleting data tied to a completed purchase may not be possible where we are required to retain transaction records, and that deleting ticket holder data before an event may prevent admission.

11. Data Transfers

Our infrastructure and service providers may process data outside Indonesia. Where that happens, we take steps to ensure the data continues to receive a level of protection consistent with UU PDP.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated Effective Date will be reflected at the top of this page. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

PT Gumelarix Innovation Technology
Jl. Perumnas Jl. Melon Mundusaren No.236, Nologaten, Caturtunggal, Kec. Depok, Kabupaten Sleman, Daerah Istimewa Yogyakarta 55281
Email: rawooh@gumelarix.com
WhatsApp: 0858-5222-2844
Business hours: Monday – Friday, 09:00 – 17:00 WIB