Privacy
What we collect, who sees it, and what we deliberately never ask for. Written against Law 27/2022 (UU PDP).
What we collect
Your name, email address and phone number; the bookings you make; the delivery address or accommodation you give us; and ordinary technical records such as your IP address and the pages you requested.
What we never collect from renters
Your passport, your driving licence, or any other identity document. The owner checks them in person at handover and nothing is uploaded, stored, or shown to anyone. We also never collect your payment details — see below.
Who sees what
The owner of the vehicle you booked sees your name, your phone number, and where to bring the vehicle — they have to, in order to hand it to you. Everyone else sees only what you choose to publish: a review carries your first name, never your full name and never your contact details.
Your rental record
When you book, the owner sees three counts from your past Kutalok rentals: rentals completed, late cancellations, and times an owner reported you did not turn up. They never see which owners, the dates, or any note. A first booking reads "New to Kutalok". We show it to prevent no-shows, which cost an owner a day's rental because nothing is paid in advance. It never blocks a booking by itself. You can see your own record on your account page and contest a no-show report you believe is wrong; if our team agrees, it no longer counts. Late cancellations and no-show reports stop counting after 12 months.
Condition photos
If you or the owner add condition photos at pickup or return, only the two of you and the Kutalok team can see them, and they are deleted 14 days after the rental ends (kept longer only while a dispute or a no-show contest about the booking is open).
Payments
You pay the owner in cash, so Kutalok takes no payment from you and collects no card, e-wallet or bank details of yours.
Your rights
You can ask to see the personal data we hold about you, to correct it, and to have it deleted. Bookings and payment records are kept for as long as Indonesian tax and accounting rules require, so a deletion request may leave those in place while removing everything else.
Keeping it safe
Data is stored on servers in Singapore, encrypted in transit, and reachable only by the parts of Kutalok that need it. Names, phone numbers and addresses are stripped from our own diagnostic logs before they are written.