Teladan Prima Agro

Compliance Document

Privacy Policy

PT Teladan Prima Agro Tbk ("TPA") is committed to protecting the confidentiality and integrity of personal data of website visitors, prospective employees, shareholders and business partners in a transparent, accountable manner and in accordance with applicable laws and regulations in the Republic of Indonesia.

Scope & Definitions

This Privacy Policy governs the acquisition, collection, processing, analysis, storage, correction, updating, display, announcement, transfer, disclosure, deletion and destruction of Personal Data by PT Teladan Prima Agro Tbk and its subsidiaries (collectively referred to as "TPA", "we" or the "Company").

Personal Data Subject

An individual to whom Personal Data relates, including shareholders, business partners, suppliers, employees, job applicants and website visitors.

Personal Data Controller

A party that determines the purposes of and controls the processing of Personal Data, carried out centrally by the management of PT Teladan Prima Agro Tbk.

Information We Collect

The personal data we collect depends on your interaction with our digital platforms, operational facilities and business activities.

Personal Identity

  • Name, contact details and identification information.
  • Employment, applicant or shareholder-related information.
  • Account information and records submitted through our official channels.

Technical & Navigation Logs

  • Device, browser and connection information.
  • Access logs, cookies and usage patterns on our digital platforms.
  • Technical data needed to maintain platform security and performance.

Partner & Fresh Fruit Bunch Supplier Data

  • Partner, supplier and contractual relationship information.
  • Operational, transaction and verification records.
  • Documents required for responsible business administration.

Communication & Complaints Data

  • Contact details and correspondence submitted through our channels.
  • Questions, feedback, reports and complaint information.
  • Follow-up records to help us improve our services and relationships.

Disclosure & Sharing of Data with Third Parties

TPA does not sell, lease or commercialise your data to any party for marketing purposes. Data disclosure is only carried out in the limited circumstances below:

Regulators & Government

Authorities and government institutions, including the Indonesia Stock Exchange, Financial Services Authority, tax authorities and other competent authorities where required by applicable law.

Auditors & Verifiers

Independent public accounting firms, internal auditors, sustainability assurance bodies and technical verification partners, including ESG, ISPO and NDPE-related assessors.

Technology Providers

Cloud-data hosting providers and certified technology partners that support our corporate website, digital platforms and data-processing activities.

Personal Data Security & Storage

We apply layered defence-in-depth measures across physical, managerial and technical controls to help protect data from unauthorised access, manipulation, loss or disclosure.

Modern Cryptography

AES-256 encryption for data at rest and TLS 1.3 for data transmission in transit.

Least-Privilege Access Principle

Role-Based Access Control (RBAC) and Multi-Factor Authentication are applied for authorised access.

Proportional Data Retention

Personal data is retained for a maximum of two years or longer where required under applicable laws and regulations.

Data Centre Location

All data is stored and processed in data centres located within the territory of the Republic of Indonesia.