Bali Product Sourcing collects only the personal data you send us through our enquiry form, WhatsApp, or email, uses it solely to respond to sourcing enquiries and manage projects you commission, and never sells it. This policy explains your rights under Indonesia’s UU PDP (Law 27/2022) and, where applicable, the GDPR. Last updated 22 July 2026.
Who Controls Your Data?
Bali Product Sourcing (baliproductsourcing.com) is a sourcing and procurement brand operated by Juara Holding Group, an Indonesian group operating from Bali across Indonesia since 2015. For the purposes of Indonesia’s Law No. 27 of 2022 on Personal Data Protection (UU PDP) and, for visitors in the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR), Juara Holding Group acts as the data controller for personal data submitted through this website.
All privacy questions and requests go to bd@juaraholding.com or WhatsApp +62 811-3941-4563.
What Personal Data Do We Collect?
We collect nothing beyond what you actively give us. There is no account registration on this site, no login, and no payment processing.
| Data | Where it comes from | Why we need it |
|---|---|---|
| Name (form field csh_name) | Enquiry form | To address you correctly |
| Email address (csh_email) | Enquiry form, direct email | To send replies and quotations |
| Destination market (csh_dest) | Enquiry form | To assess shipping and regulatory context |
| Cargo or product category (csh_cargo) | Enquiry form | To scope supplier vetting and QC work |
| Enquiry type and message (csh_qf, csh_msg) | Enquiry form | To understand your project |
| Phone number and chat content | WhatsApp +62 811-3941-4563 | To reply on the channel you chose |
| Basic technical logs (IP address, browser type, pages visited) | Web server | Security and site stability |
We do not ask for card numbers, bank details, passport scans, or government ID through this website. Where a sourcing project later requires commercial documents, we request them through a direct, agreed channel, never a public web form.
How Do We Use Your Information?
Your data is used for five purposes and nothing else:
- Responding to your enquiry — answering the question you actually asked about sourcing, supplier vetting, QC inspection, consolidation, or private-label work in Bali and Indonesia.
- Preparing your project — building quotations, supplier shortlists, inspection schedules, and shipment plans you have requested.
- Coordinating internally — routing your enquiry to the Juara Holding Group business development desk that handles it.
- Meeting legal obligations — keeping commercial records that Indonesian tax and company law requires us to retain.
- Keeping the site running — reviewing aggregate, non-identifying traffic statistics and security logs.
We do not sell, rent, or trade personal data. We do not run third-party advertising on this site, and we do not build marketing profiles from enquiry data. If you enquire and decide not to proceed, we keep the correspondence for the retention period below, then delete it.
What Is Our Legal Basis Under UU PDP and GDPR?
Indonesia’s UU PDP was enacted in October 2022 and, after its two-year transition, has been fully enforceable since October 2024. As of 2026 it is the primary data protection statute governing this website. Article 20 of UU PDP sets out the lawful bases we rely on: your consent when you submit the form or message us, performance of a contract when you commission sourcing work, and our legitimate interest in answering an enquiry you initiated.
For visitors from the EEA or UK, the equivalent GDPR bases are Article 6(1)(b) (steps prior to a contract, taken at your request), Article 6(1)(f) (legitimate interests), and Article 6(1)(a) (consent). Where the two regimes differ, we apply the stricter standard.
Do We Share Your Data With Anyone?
Only in four narrow situations:
- Within Juara Holding Group — the BD desk that answers your enquiry and the project team assigned to your sourcing brief.
- With suppliers and licensed partners — only after you ask us to proceed, and only the minimum project detail needed to obtain a quote or schedule an inspection. Your contact details are not handed to suppliers without your agreement.
- With service providers — hosting and email infrastructure that processes data on our instructions under confidentiality terms.
- With authorities — where Indonesian law or a valid legal order requires disclosure.
A note on WhatsApp: chats sent to +62 811-3941-4563 pass through WhatsApp, a Meta platform governed by its own privacy policy. Message content is end-to-end encrypted in transit, but Meta processes metadata under its own terms. If that concerns you, use email or the enquiry form instead; we treat all three channels identically once your message reaches us.
How Long Do We Keep Your Data?
| Record type | Retention period | Reason |
|---|---|---|
| Enquiry that does not become a project | Up to 24 months from last contact | Sourcing questions often resume a season later |
| Project correspondence and files | Project duration plus up to 10 years | Indonesian tax administration rules require books and records to be kept for 10 years |
| WhatsApp threads | Same as the related enquiry or project | Continuity of a single conversation |
| Server and security logs | Up to 12 months | Incident investigation |
When a retention period ends, records are deleted or anonymized. You can request earlier deletion at any time, subject to the legal retention duties above.
What Are Your Rights?
Under UU PDP, and under GDPR where it applies, you can ask us at any time to:
- Access a copy of the personal data we hold about you
- Correct inaccurate or outdated information
- Delete your data, where no legal retention duty prevents it
- Withdraw consent for any processing based on consent
- Object to processing based on legitimate interest
- Receive your data in a portable format (a GDPR right we honor for all visitors)
- Complain to the Indonesian data protection authority or, for EEA and UK residents, your local supervisory authority
Send requests to bd@juaraholding.com with the subject line “Privacy request”, or message +62 811-3941-4563. We answer within one month, the GDPR standard, and apply the same clock to UU PDP requests. If a personal data breach ever affects you, UU PDP obliges us to notify you in writing within 3×24 hours of discovery, and we will.
What About Cookies and Analytics?
This site runs no advertising cookies and no cross-site trackers. We may use privacy-respecting, aggregate analytics to see which pages are read; nothing in that data identifies you personally. Your browser settings control any cookies the site sets, and blocking them does not break the enquiry form.
Where Do Commercial Terms Live?
This page governs personal data only. Fees, project scope, and liability for sourcing, vetting, and QC work are set out in each individual project agreement, not here. As stated across this site, vetting and inspection reduce risk but guarantee no outcome, and nothing on baliproductsourcing.com constitutes legal or tax advice.
How Do You Contact Us About Privacy?
The fastest routes to the Juara Holding Group BD desk:
- WhatsApp: +62 811-3941-4563
- Email: bd@juaraholding.com
- Enquiry form: on the contact page of this site
We may update this we privacy policy as Indonesian regulation evolves; material changes will be flagged on this page with a fresh date stamp. Current version: 22 July 2026.