Privacy Policy

Last updated: 28 November 2025
‍
This Privacy Policy explains how LAB Foundation (Yayasan Lingkar Arah Berdaya) (“we”, “our”, “us”) collects, uses, stores, and protects your personal data when you visit our website, interact with our programs, or engage with our services.

We are committed to safeguarding your privacy and ensuring that your personal information is handled responsibly, transparently, and in compliance with applicable laws, including GDPR for international visitors.

1. Information We Collect

We collect personal data in the following ways:

  • Information Your Provide Directly

Through

  1. Contact forms (name, email address, message, and any information you choose to share)
  2. Newsletter sign-ups (email address)
  3. Program registration forms (name, email, phone number, demographic information, organization/affiliation, application details, and other voluntary data through Typeform or similar tools)
  4. Event RSVP forms (name, email, attendance information)
  • Information Collected Automatically

When you visit our website, we collect:

  1. IP Address
  2. Browsert type and version
  3. Operating system
  4. Pages visited, time spent, and referring URLs
  5. Approximate location
  6. Cookie data and identifiers

This data is collected through tools such as Google Analytics and Meta (Facebook) Pixel.

  • Cookies and Tracking Technologies

We use:

  1. Functional cookies
  2. Analytics cookies
  3. Advertising and retargeting cookies
  4. Essential cookies (requires for website performance)

You may choose to disable cookies through your browser settings, but some features may not function correctly.

2. How We Use Your Information

We process your personal data for the following purposes:

  • Program registration & communication
  • Sending newsletters, program updates, and announcements
  • Donor communication and reporting
  • Event invitations and confirmations
  • Monitoring and improving website performance
  • Analytics and impact measurement
  • Internal reporting and program evaluation
  • Compliance with legal obligations
  • Developing community insights and research (non-identifiable form)

We do not sell or trade your personal information.

3. Legal Basis for Processing

For international (including EU) users, we rely on the following legal bases under the GDPR:

  • Consent — for newsletters, cookies, marketing, and application forms
  • Legitimate Interest — for analytics, program improvement, impact measurement
  • Contractual Necessity — when registering for events or programs
  • Legal Obligations — where required by Indonesian or international law

4. Sharing Your Information

We may share your information with:

  • Verified Vendros and Service Providers

Such as:

  1. Google Analytics
  2. Meta/Facebook Pixel
  3. Google Form/Typeform
  4. Cloud storage providers (e.g., Google Drive, AWS)
  5. Webflow hosting services

These vendors process data on our behalf under strict confidentiality agreements.

  • Program Partners

(Universities, NGOs, government agencies, coalitions, or ecosystem collaborators involved in program delivery.)

Only relevant and necessary information is shared, and always with due safeguards.

  • Donor Reporting

In cases where program funders require aggregated or anonymized reporting.

We do not share personally identifiable data unless legally required or explicitly consented to.

5. Data Retention

We retain your data only for as long as necessary to fulfill the purposes described in this policy.

  • Program documentation and reporting
  • Donor compliance
  • Legal or audit requirements
  • Analysis and improvement of future initiatives

When data is no longer needed, it will be securely deleted or anonymized.

6. Data Protection & Security

We implement industry-standard safeguards to protect your data, including:

  • Encrypted data storage
  • Access restrictions
  • Secure servers
  • Regular security monitoring
  • Third-party vendor compliance checks

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct or update your data
  • Request deletion (“right to be forgotten”)
  • Withdraw consent
  • Object to certain processing activities
  • Request data portability
  • Lodge a complaint with a relevant data authority

To exercise these rights, please contact us at the email provided below.

8. International Data Transfers

Because we use global service providers (such as Google, Meta, Typeform), your data may be transferred and processed outside your country.

We ensure that such transfers comply with applicable data protection regulations.

9. Links to External Websites

Our website may contain links to third-party platforms.

We are not responsible for the privacy practices or content of those websites.

10. Children's Privacy

Our website and programs are not directed at children under the age of 13, unless explicitly stated for specific educational programs.

We do not knowingly collect personal data from children without parental consent.

11. Updates to This Privacy Policy

We may update this policy periodically to reflect changes in practices or legal requirements.

Updates will be posted on this page with a revised “Last Updated” date.

12. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or your personal data, you may contact us at:

LAB Foundation
Yayasan Lingkar Arah Berdaya

(+62) 82211502211
‍contact@lingkararahberdaya.org

Jl. Taman Radio Dalam Raya No.28,
Gandaria Utara, Kebayoran Baru
DKI Jakarta, Indonesia 12140