Ukuraja

Privacy Policy

Effective date: 7 August 2026
Last updated: 7 August 2026

This Privacy Policy explains how PT Angka Teknik Sepadan, operating the UKURAJA service (“UKURAJA”, “we”, “us”, or “our”), collects, uses, discloses, stores, and protects personal data when you visit ukuraja.com, request a demonstration, communicate with us, or use the UKURAJA industrial gas monitoring platform.

1. Who We Are

UKURAJA is an industrial gas monitoring service operated by PT Angka Teknik Sepadan, Indonesia. UKURAJA enables authorized business users to monitor data from existing gas meters, electronic volume correctors (EVCs), gateways, and related infrastructure.

For website enquiries, sales contacts, account administration, security logs, and our own business communications, PT Angka Teknik Sepadan generally acts as the personal data controller. Where we process personal data solely on the documented instructions of a corporate customer, that customer may be the controller and PT Angka Teknik Sepadan may act as a processor or service provider.

2. Controller and Processor Roles

Data-protection roles are determined separately for each processing activity, based on who actually determines its purposes and essential means. A contractual label alone does not determine the role.

Processing activityTypical role allocation
Public website, demo requests, sales enquiries, UKURAJA marketing, and direct business communications PT Angka Teknik Sepadan acts as an independent controller.
User information supplied by a corporate customer and processed only to provide the contracted platform The corporate customer normally acts as controller and PT Angka Teknik Sepadan acts as processor, subject to the applicable Data Processing Agreement (“DPA”).
Platform security, authentication, fraud prevention, access logs, service administration, legal compliance, and defence of legal claims PT Angka Teknik Sepadan may act as an independent controller for the minimum personal data it determines is necessary for those purposes.
Customer support PT Angka Teknik Sepadan may act as processor for customer-controlled content and as independent controller for its own support, security, audit, and claim records.
Operational telemetry Normally business or equipment data. If it identifies an individual, the role follows the purpose and factual control of the relevant processing activity.

When acting as processor, PT Angka Teknik Sepadan will process personal data only on documented instructions from the customer, except where applicable law requires otherwise. We will not use customer-controlled personal data for unrelated marketing or another independent purpose. If we determine a new purpose outside the customer’s documented instructions, we may become a controller for that separate processing and must provide an appropriate legal basis and notice.

Corporate customers are responsible for giving required privacy information to their employees, contractors, and other authorized users, establishing a lawful basis, and issuing valid instructions to us. The DPA should identify the subject matter, duration, purposes, data categories, data subjects, security measures, subprocessors, assistance, incident handling, audits, international transfers, and return or deletion of data.

Document consistency. The DPA governs the parties’ contractual allocation for customer-controlled personal data; the customer service agreement governs commercial service and billing matters; and this Privacy Policy governs PT Angka Teknik Sepadan’s public disclosures and independent-controller activities. No document reduces mandatory statutory rights. If the documents or actual operations are inconsistent, the parties should promptly correct them, and the role will be assessed from the actual processing and applicable law.

3. Scope

This Policy applies to:

  • ukuraja.com and UKURAJA web pages that link to this Policy;
  • demo, pilot, contact, and sales forms;
  • UKURAJA dashboard accounts and authorized user access;
  • customer support, technical support, and business communications; and
  • security, audit, and service-operation records related to UKURAJA.

A customer contract, data processing agreement, or specific privacy notice may supplement this Policy. If a customer organization provides your UKURAJA account, you should also review that organization’s privacy information.

4. Personal Data We Collect

Information you provide

  • Demo and contact data: full name, company, position, business email, phone or WhatsApp number, location or site, requested service, estimated number of meters or sites, message, and communication preferences.
  • Account data: name, username, business email, phone number where used, organization, site, assigned role, account status, and authentication or password-reset records. We do not store your password in readable form.
  • Support and correspondence: emails, messages, call notes, support requests, files or screenshots you choose to provide, and our responses.
  • Commercial and administrative data: business contact details, contract references, service selections, billing contacts, and records needed to administer a customer relationship.

Information collected automatically

  • IP address, browser type, device and operating-system information;
  • date and time of access, pages or dashboard areas accessed, session identifiers;
  • login attempts, authentication events, audit logs, errors, and security events; and
  • cookie or similar-technology information, subject to applicable consent requirements.

Industrial and operational data

UKURAJA may process meter, EVC, gateway, telemetry, pressure, temperature, flow-rate, volume, device identifier, site identifier, and equipment-status data. These records are normally operational or confidential business data rather than personal data. They may become personal data where they are linked to an identifiable individual, such as a named user, sole trader, technician, or access record.

Data we do not intentionally request

We do not intentionally request government identification numbers, biometric data, health data, precise personal-home location, or other sensitive personal data through the public demo form. Please do not submit sensitive personal data unless it is specifically required, lawfully requested, and protected by an appropriate agreement.

5. How We Collect Data

We collect personal data:

  • directly from you through forms, account setup, email, WhatsApp, calls, or support;
  • from your employer or organization when it authorizes your account;
  • automatically when you access our website or platform;
  • from equipment and systems connected to the UKURAJA service; and
  • from lawful business sources, referrals, events, or professional directories.

6. Why We Use Personal Data

PurposeTypical legal basis, where applicable
Respond to demo, pilot, quotation, survey, and contact requests Steps requested before a contract; legitimate business interests; consent where required
Create and administer accounts and deliver the contracted service Contract performance; customer instructions; legitimate interests
Authenticate users, maintain logs, prevent fraud, and protect systems Legitimate interests; legal obligations; establishment or defence of legal claims
Provide technical support, maintenance, alerts, and service communications Contract performance; legitimate interests
Improve reliability, usability, capacity, and service quality Legitimate interests; consent for non-essential analytics where required
Send product news or marketing communications Consent or another lawful basis permitted by applicable law; you may opt out at any time
Meet accounting, tax, regulatory, audit, dispute, and law-enforcement obligations Legal obligation; legitimate interests; legal claims

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing completed before withdrawal. Where processing is based on legitimate interests, we assess those interests against your rights and reasonable expectations.

7. Cookies and Similar Technologies

We may use strictly necessary cookies for security, authentication, session management, load balancing, and user preferences. We will not activate non-essential analytics, advertising, or social-media tracking technologies for users in jurisdictions requiring prior consent unless a valid consent choice has been obtained.

Where non-essential cookies are used, a cookie notice or consent control will describe the relevant categories and allow you to accept, reject, or change your choices. Browser settings may also permit you to block or delete cookies, although essential functions may then be unavailable.

8. When We Share Personal Data

We may share personal data only as reasonably necessary with:

  • the customer organization that requested or administers your UKURAJA access;
  • authorized personnel, contractors, installers, and support providers under confidentiality duties;
  • hosting, cloud, backup, email, communications, security, and IT service providers;
  • analytics or advertising providers only where enabled and permitted by your consent or applicable law;
  • professional advisers, auditors, insurers, banks, and transaction counterparties;
  • regulators, courts, law-enforcement authorities, or other parties where legally required; and
  • a successor or relevant party in a lawful merger, restructuring, financing, or transfer of business.

We do not sell personal data. We do not disclose personal data for cross-context behavioural advertising unless such processing is clearly disclosed and a legally required choice mechanism is provided.

9. International Data Transfers

We seek to use infrastructure and service providers appropriate to the service and customer requirements. If personal data is transferred outside Indonesia or another applicable jurisdiction, we will use measures required by applicable law, which may include an adequacy assessment, contractual safeguards, binding protections, customer instructions, or explicit consent where no other lawful safeguard is available.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy. Retention is determined by the type of record, account or contract status, security needs, customer instructions, backup cycles, limitation periods, and applicable legal, tax, accounting, or regulatory obligations.

  • Demo and sales enquiries are retained while the enquiry or prospective relationship remains active and for a limited follow-up period.
  • Account records are retained while the account is active and for a limited period after closure for security, audit, and dispute handling.
  • Security and access logs are retained for a period proportionate to system-security and investigation needs.
  • Support, contract, invoice, and compliance records are retained for applicable business and legal periods.
  • Operational telemetry is retained according to the customer contract, platform configuration, and applicable retention schedule.
  • Backups are deleted or overwritten through controlled rotation unless preservation is required for an incident, dispute, or legal obligation.

Data may be kept longer where required to establish, exercise, or defend legal claims, investigate security events, comply with law, or follow a customer controller’s lawful instructions. Data that has been irreversibly anonymized may be retained for service improvement and statistical analysis.

11. Operational Data, Measurement, and Billing

This Privacy Policy addresses personal-data processing. It does not determine the metrological validity, commercial settlement status, or contractual accuracy standard of gas measurement data.

Unless a signed customer agreement expressly states otherwise and all applicable legal-metrology and verification requirements are satisfied, dashboard values, charts, alerts, exports, summaries, and derived calculations are intended for remote monitoring, trend analysis, anomaly detection, operational planning, and preliminary reconciliation. They are not, by themselves, the final official basis for invoicing, custody transfer, tax reporting, regulatory certification, or safety-critical control decisions.

The applicable service agreement should define the authoritative billing-data hierarchy, which may include the legally valid and verified meter or EVC at the measurement point, official supplier or utility records, signed joint reconciliation records, and any specific written calculation method agreed by the parties. A discrepancy should be investigated using available source-instrument records, configuration and verification status, raw gateway or EVC registers, timestamps, transformation logic, audit logs, and relevant supplier records.

This statement does not exclude responsibility that cannot lawfully be excluded and does not remove PT Angka Teknik Sepadan’s obligation to use reasonable skill and care, maintain agreed processing logic, protect data integrity, investigate reported defects, and correct errors within the agreed service scope.

12. Security

We use administrative, technical, and physical safeguards appropriate to the nature and risk of the data, which may include role-based access, access logging, encryption in transit, credential controls, network protections, backups, monitoring, vulnerability management, and incident-response procedures. No system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials, using unique passwords, limiting account sharing, and promptly reporting suspected unauthorized access.

13. Personal Data Incidents

We investigate suspected personal-data incidents and take containment, recovery, documentation, and notification steps required by applicable law and customer contracts. Where notification is legally required, we will notify affected persons and the competent authority within the applicable statutory timeframe.

14. Your Privacy Rights

Depending on applicable law and our role in the processing, you may have the right to:

  • receive clear information about processing;
  • access and obtain a copy of your personal data;
  • correct incomplete or inaccurate personal data;
  • request deletion or destruction of personal data;
  • withdraw consent;
  • object to or request restriction of certain processing;
  • receive or transfer eligible data in a commonly used, machine-readable format;
  • object to qualifying solely automated decisions;
  • opt out of qualifying sale, sharing, or targeted advertising where applicable; and
  • complain to the competent data-protection or regulatory authority.

Some rights are subject to legal exceptions, verification, the lawful basis used, and whether PT Angka Teknik Sepadan is acting as controller or processor. If we process data on behalf of your organization, we may direct your request to that organization. We may request information reasonably necessary to verify identity and authority.

We respond within applicable legal deadlines. Where Indonesia’s Personal Data Protection Law requires specified action within 3 × 24 hours after a valid request, we will apply that deadline to the relevant action.

15. Marketing Choices

You may opt out of marketing emails by using the unsubscribe method provided in the message or contacting us. You may ask us to stop marketing messages sent through other channels. We may still send non-promotional messages needed to respond to your request, administer an account, provide security notices, or deliver a contracted service.

16. Automated Decision-Making

UKURAJA does not currently make decisions producing legal or similarly significant effects about individuals solely through automated processing. If this changes, we will provide additional information and legally required safeguards.

17. Children

UKURAJA is a business-to-business industrial service and is not directed to children. We do not knowingly collect personal data from children through the public website. Contact us if you believe a child has submitted personal data without appropriate authorization.

18. Third-Party Sites and Services

Our website may link to third-party sites or services. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing personal data.

19. Changes to This Policy

We may update this Policy to reflect service, legal, security, or operational changes. We will publish the updated version with a revised date and, where required, provide additional notice before a material change takes effect.

20. Contact Us

Privacy contact / Data Protection Function
PT Angka Teknik Sepadan — UKURAJA
Indonesia
Email: privacy@ukuraja.com
Website: https://ukuraja.com