This Privacy Policy explains how Zovkai ("we", "us", "our") collects, uses, stores, and protects personal information obtained through your use of zovkai.com (the "Website") and any communications you initiate with us. We are committed to handling your data responsibly and in compliance with applicable privacy laws, including:
Scope: This Policy applies to zovkai.com only. The Pabrik Gula game at pabrikgula.zovkai.com is a separate service with its own privacy terms, which are available at that subdomain.
By using this Website or contacting us, you acknowledge that you have read and understood this Policy.
The data controller responsible for your personal information is:
Zovkai operates as a sole proprietorship. The natural person responsible for the processing of your personal data is Benny, the founder. All enquiries relating to this Privacy Policy, including requests to exercise your data rights, should be directed to the contact email above.
This Website does not operate any forms, registration systems, or on-site data-capture tools. The sole method by which we receive personal data is when you initiate direct email contact with us via the mailto links on this Website. When you do so, we receive:
We do not operate analytics software, tracking pixels, or advertising technology on this Website. However, our hosting provider (Hostinger International Ltd., Lithuania — an EU-based entity subject to GDPR) may automatically collect standard server log data when you visit, including:
This data is processed by Hostinger in accordance with their own privacy policy, available at hostinger.com/privacy-policy. We do not have direct access to or control over this log data beyond what Hostinger provides.
This Website loads fonts from Google Fonts (Google LLC, USA). When your browser requests a font file, your IP address is transmitted to Google's servers. Google processes this data in accordance with their privacy policy at policies.google.com/privacy. Zovkai itself does not receive any personal data from this process; Google's processing is governed by Google's own policy and their Standard Contractual Clauses for international transfers.
In the course of operating this Website and delivering services, personal data may be processed by the following third-party processors:
Where EU GDPR or UK GDPR applies, we rely on the following legal bases (the article numbers are identical under both instruments):
Where Singapore's PDPA applies, processing is based on the purposes notified in this Policy and your implicit consent in initiating contact with us, in accordance with the PDPA's notification and consent obligations.
Under Indonesia's UU PDP, processing is based on the following lawful grounds under Article 20(2):
When you send us an email, this is best characterised as pre-contractual processing under Article 20(2)(b) and legitimate interest under Article 20(2)(f) — not as consent, which under UU PDP requires a separate explicit, informed, and recorded act.
We use the personal data you provide exclusively to:
We do not sell, rent, trade, or otherwise transfer your personal data to third parties for marketing purposes. We do not use your data for automated decision-making or profiling.
We retain email correspondence for as long as necessary to fulfil the purpose for which it was collected, and for a reasonable period thereafter in case of follow-up enquiries or disputes. Where a service contract is formed:
You may request deletion of your data at any time (see Section 7), subject to our obligations to retain records under applicable law.
Zovkai does not set any first-party cookies on this Website. No cookie consent banner is displayed because we do not use tracking, analytics, or advertising cookies. Your browser's standard session behaviour applies, but no persistent cookies are placed by us. If you follow a link from this Website to a third-party platform (such as TikTok or Instagram), that platform's own cookie policies will apply.
Depending on your jurisdiction, you may have the following rights regarding your personal data. Under Indonesia's UU PDP (Articles 5–13), these include:
To exercise any of these rights, contact us at createwithzovkai@gmail.com. We will respond without undue delay and within the timeframes required by applicable law — within 3×24 hours for certain requests under UU PDP, and within 30 days under GDPR or UK GDPR. If you believe we have not handled your data lawfully, you also have the right to lodge a complaint with the relevant supervisory authority for your jurisdiction:
In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and, where required, within 72 hours (or 3×24 hours under UU PDP Article 46). Notification will describe the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed to address the breach.
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. Email communications are transmitted over TLS-encrypted connections where your email provider supports this. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Where personal data is transferred outside of Indonesia (or outside the UK or EEA for those visitors), we rely on the following safeguards in accordance with UU PDP Articles 55–56 and, where applicable, GDPR/UK GDPR Chapter V:
By contacting us, you acknowledge that your data may be processed in jurisdictions outside your own country of residence, subject to the safeguards described above.
This Website contains links to third-party platforms including TikTok and Instagram. We have no control over the privacy practices of these platforms and are not responsible for their content or policies. We encourage you to review their privacy policies before providing any personal information.
This Website is not directed at children. Under Indonesian law (UU 35/2014 on Child Protection), a child is a person under the age of 18 years. We do not knowingly collect personal data from children. Where processing requires consent from a child, we will seek the consent of a parent or guardian. If you believe we have inadvertently collected personal data from a child, please contact us immediately and we will delete it.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Website following any update constitutes your acknowledgement of the revised Policy.
For any questions, concerns, or requests relating to this Privacy Policy: