Legal

Privacy Policy

We keep this simple and honest. Here is exactly what we collect, why, and what we do with it.

Last updated: January 2025 · threewebsite Studio · Indonesia

We don’t sell your data

Your information is never sold or shared with third parties for marketing.

Minimal collection

We only collect what is strictly necessary to deliver our services.

You’re in control

You can request deletion of your data at any time by contacting us.

01

Who We Are

threewebsite is a solo web design studio based in Indonesia. We design and develop websites for businesses and individuals.

For any privacy-related questions, contact us at: privacy@threewebsite.com

02

What Information We Collect

Contact form: name, email, company name, budget range, project description.

Registration: name, email, password (stored as encrypted hash — never plain text).

Orders: service selection, payment proof image, payment date.

Technical: IP address, browser type, pages visited (via server logs only — no tracking scripts).

We do not use Google Analytics, Facebook Pixel, or any third-party tracking tools.

03

Why We Collect It

  • To respond to your project inquiry
  • To create and manage your client account
  • To process your service order and verify payment
  • To send transactional emails (OTP verification, order status updates)

We do not send marketing emails unless you explicitly request them.

04

How We Store & Protect Your Data

  • Passwords are hashed using bcrypt — we cannot see your password
  • Payment proof images are stored on our private server, not publicly accessible
  • Database access is restricted and password-protected
  • We use HTTPS for all data transmission

No system is 100% secure. If a breach occurs, we will notify affected users within 72 hours.

05

Data Retention

  • Account data: retained while your account is active
  • Order records: retained for 2 years for accounting purposes
  • Contact form submissions: retained for 1 year
  • OTP codes: deleted immediately after use or expiry

You may request full deletion of your account and associated data at any time.

06

Cookies

We use one session cookie to keep you logged in. No advertising cookies, no tracking cookies, no third-party cookies.

You can disable cookies in your browser settings. This will log you out of your account.

07

Third-Party Services

PHPMailer / SMTP: used to send OTP and order notification emails. Your email provider receives your email address as part of normal email delivery.

We do not integrate with any advertising or analytics platforms.

We do not share your data with any other third parties.

08

Your Rights

  • Access: request a copy of all data we hold about you
  • Correction: request correction of inaccurate data
  • Deletion: request deletion of your account and all associated data
  • Portability: request your data in a readable format

To exercise any of these rights, email us at privacy@threewebsite.com. We will respond within 7 business days.

09

Children’s Privacy

Our services are not directed at anyone under the age of 13. We do not knowingly collect data from minors. If you believe a minor has submitted data to us, contact us immediately for removal.

10

Changes to This Policy

We may update this policy as our services evolve. Changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance.

11

Contact

Questions about your privacy?

Send us a message and we will get back to you within 7 business days.

Contact us