Privacy
What we collect, who sees it, and what we deliberately never ask for. Written against Law 27/2022 (UU PDP).
What we collect
Your name, email address and phone number; the bookings you make; the delivery address or accommodation you give us; and ordinary technical records such as your IP address and the pages you requested.
What we never collect from renters
Your passport, your driving licence, or any other identity document. The owner checks them in person at handover and nothing is uploaded, stored, or shown to anyone. We also never see your card number — see below.
Who sees what
The owner of the vehicle you booked sees your name, your phone number, and where to bring the vehicle — they have to, in order to hand it to you. Everyone else sees only what you choose to publish: a review carries your first name, never your full name and never your contact details.
Payments
Card and QRIS payments are handled by a licensed Indonesian payment gateway. Your card details go to them and never to us: Kutalok stores the amount, the method and whether it succeeded, and nothing that could be used to charge you again.
Your rights
You can ask to see the personal data we hold about you, to correct it, and to have it deleted. Bookings and payment records are kept for as long as Indonesian tax and accounting rules require, so a deletion request may leave those in place while removing everything else.
Keeping it safe
Data is stored on servers in Singapore, encrypted in transit, and reachable only by the parts of Kutalok that need it. Names, phone numbers and addresses are stripped from our own diagnostic logs before they are written.