Privacy Policy (v1, EN)
Last updated: July 25, 2026
Introduction
Welcome to ijalfauzi.com. This Privacy Policy explains how I (Ijal Fauzi) collect, use, and protect your information when you visit my website or buy a package. Please read it alongside my Terms of Service.
This policy is published in English and in Bahasa Indonesia.
Contact Information
For any questions about this Privacy Policy, please contact me at:
- Email: [email protected]
- Website Owner: Ijal Fauzi
I am the controller of the personal data described here — I decide what is collected and why.
Information I Collect
Through my forms
When you start a project inquiry (on my Hire Me page or a project page), I collect your name, email address, business or company name, project type, project details, timeline, and budget, so I can understand the work before replying. If you arrived from a package page, the form also records which package you came from, so I know what you were looking at.
When you request my CV (on my CV page), I collect your name, email address, phone number, company, occupation, the reason you’re reaching out, and any optional LinkedIn link or message you add, so I can send you the CV and follow up.
Each form has a consent checkbox: by ticking it you agree to this Privacy Policy and to my contacting you about your enquiry. When you submit, your details are emailed to me and saved in the website’s database so I have a record. The forms are protected by Cloudflare Turnstile, and I use what you send only to respond to you.
When you buy a package
To take an order and deliver the work, I collect and store:
- Your details: name, email address, and the billing details you enter at checkout, including country.
- Order details: what you bought, the price, the currency, the deposit and balance amounts, and the status of each payment.
- Bank transfer (Indonesia): the payer name and transfer reference you give me, so I can match your payment to your order.
- PayPal (international): PayPal handles the payment. I receive confirmation and a transaction identifier. I never see or store your card number.
- Acceptance record: when you tick the terms box and submit a payment, I record the identifiers and content fingerprints of the exact Terms and Privacy Policy versions you were shown, their version label, the exact wording of the acceptance checkbox and the privacy notice as they appeared to you, whether this was the deposit or the balance stage, which price book applied, and the date and time in GMT. This record is written when you submit the payment, which may be shortly before the payment itself succeeds — so a record can exist for an attempt that did not complete. It exists so that both of us can later prove precisely what was agreed — it protects you as much as me.
Comments
When you leave a comment on one of my blog posts, I collect your name, email address, comment content, IP address, and browser user agent string (the last two automatically).
Automatically Collected Information
Like most websites, mine collects standard log data, including IP addresses, browser type, pages visited, time and date of visits, and referring websites.
Why I Use Your Information, and On What Basis
| What for | Basis |
|---|---|
| Replying to your inquiry and following up about a project | Your consent, given via the form’s consent checkbox |
| Taking your order, delivering the work, and handling payment, refunds, and support | Performing the contract between us |
| Keeping the record of which terms you accepted | My legitimate interest in being able to evidence the agreement, and my legal obligations around contracts and records |
| Keeping the site working, preventing spam and security problems | My legitimate interest in running the site safely |
| Understanding traffic and how pages and ads perform | My legitimate interest in knowing how the site performs — see “Analytics and your choices” below |
| Managing and moderating comments | My legitimate interest in running the blog |
I may reply by email or, if you share the details with me, through a messaging app such as WhatsApp or Telegram. I never sell your contact details, and I do not use them for marketing or add you to any broadcast list without your explicit consent.
Beyond replying to you, your details are handled by the service providers I use to run the website, listed in “Where your data is processed” below — hosting, email delivery, payments, and site delivery. If you choose to message me through WhatsApp or Telegram, that conversation also sits on that app’s servers under its own privacy policy; that is your choice of channel, and email is always available instead. Other than those, I do not pass your details to anyone.
Third-Party Services
Google Analytics & Conversion Tracking
I use Google Analytics (and, when configured, Google Tag Manager) to understand how visitors use my website and to measure how well my pages and any advertising perform. This may collect pages visited, time spent on the site, technical information about your browser and device, and your IP address.
Analytics and your choices. I want to be straightforward about how this works, because it matters: analytics loads by default — I do not ask you to opt in first. I rely on my legitimate interest in knowing how the site performs, not on your consent, so please do not read the presence of analytics as something you agreed to.
What I do instead of an opt-in banner:
- You can turn analytics off here, and back on again. The control below sets a preference on this browser. While it is off, no analytics scripts load, and any order you place from then on is marked not to be measured. An order placed before you switched it off keeps the setting it had at the time, so its purchase measurement may still be sent when that payment completes — email me if you want that stopped.
- I honour Do Not Track and Global Privacy Control. If your browser sends either signal, the analytics scripts are not loaded at all — nothing is sent to Google for your visit.
- You can block or clear these cookies through your browser settings, or use Google’s own opt-out browser add-on.
- Analytics is never used to make decisions about you individually — only to see how pages perform in aggregate.
Analytics is currently on for this browser.
Because that preference lives in a cookie on the browser you are using, it applies to that browser only and is lost if you clear your cookies. Turning analytics off stops future collection; it does not erase what was collected before. To ask about data already held, email me.
I have written down my reasoning for relying on legitimate interest rather than consent, including how I weighed it against your rights. If you would like me to explain it, just ask.
When you successfully submit one of my forms, a “lead” conversion event is recorded so I can see which pages bring real inquiries. When an order is paid, a “purchase” event is recorded with the order number, amount, currency, and which package was bought. Neither event includes your name, email, address, or payment details.
PayPal
International payments are processed by PayPal. When you pay, you are dealing with PayPal directly and their own privacy policy applies to that transaction. I receive confirmation of payment and a transaction identifier, not your card details.
Blog comments
Comments are handled by this website and are not sent to a separate third-party commenting platform. Like everything else on the site, they sit on the hosting described under “Where your data is processed”.
Cloudflare Turnstile
My forms use Cloudflare Turnstile, a privacy-focused alternative to CAPTCHA, to tell humans and bots apart. It looks at signals from your browser to verify your submission and may set a cookie for that purpose. It is designed not to track you across websites.
Email delivery
Emails from the website — order confirmations, payment links, and replies — are delivered through an email delivery provider, which processes the recipient address and message content in order to send them.
Embedded Content
Some posts embed content from other websites (for example videos or social posts). Embedded content behaves as if you visited that other site directly, so it may collect data about you, use cookies, and track your interaction with that content.
Cookie Policy
My website uses essential cookies for basic functionality, including keeping your cart and checkout working. Google Analytics sets its own cookies to measure traffic and conversions — these load by default, on the basis described under “Analytics and your choices” above, and not at all if your browser sends a Do Not Track or Global Privacy Control signal. My forms’ spam protection (Cloudflare Turnstile) may set a cookie to verify you’re not a bot. You can control or clear cookies through your browser settings. Fonts are served from my own website rather than a third-party font service, so simply loading a page does not call out to an external font provider.
How Long I Keep Things
| What | How long |
|---|---|
| Inquiry and CV form submissions | As long as needed to handle your enquiry, and up to 2 years afterwards |
| Orders, payment records, and the acceptance record | 10 years from the order date, to meet Indonesian record-keeping expectations for commercial documents and to be able to evidence the agreement |
| Archived projects (a balance left unpaid for 30 days) | Kept offline as part of the order record, on the same 10-year basis. Archiving means stored offline — it does not mean deleted |
| Comments | Until you ask me to remove them |
| Server logs | Typically a few months |
Where I must keep an order record for the period above, I keep it even if you ask for deletion of other data — but I will delete anything not needed for that purpose.
Data Security
I take reasonable measures to protect your information, and I keep contact details only as long as I need them. That said, no method of transmission over the internet is completely secure.
Where your data is processed
My website is primarily intended for Indonesian visitors but is accessible globally. I am based in Indonesia, and Indonesian law governs how I handle your data — but you should know where it physically sits.
The website is hosted in Singapore. The server is located there, so the website’s own records — orders, payment records, acceptance records, comments, and form submissions — are stored there rather than in Indonesia.
Other service providers described above also process data outside Indonesia as part of providing their service: PayPal (payments), Google (analytics), Cloudflare (site delivery and form spam protection), and my email delivery provider.
These are the services involved, and what each one handles:
| Service | What it handles | Where |
|---|---|---|
| Website hosting | The site and its own records | Singapore |
| PayPal | International payments | Outside Indonesia |
| Google Analytics | Visitor measurement | Outside Indonesia |
| Cloudflare | Site delivery and form spam protection | Outside Indonesia |
| Email delivery provider | Sending the website’s emails | Outside Indonesia |
PayPal is not simply working on my behalf. When you pay through PayPal you are also their customer, and they decide how they handle your payment data under their own privacy policy. The others handle data as part of running my website, under the terms of the service I buy from them.
I keep what is collected to what the work actually needs, and you can ask me at any time where a particular piece of your data is held.
Your Rights
In line with Indonesia’s Personal Data Protection Law (UU No. 27 of 2022), you have the right to:
- Be told what personal data I hold about you and how it is used
- Request access to your personal data, and a copy of it
- Request correction of inaccurate or incomplete data
- Request deletion of your comments and contact information
- Withdraw consent you previously gave — this does not affect processing already carried out
- Object to certain processing, and to ask me to restrict it — including the analytics described above, which runs on legitimate interest rather than consent
- Block or clear non-essential cookies, and have Do Not Track or Global Privacy Control honoured
To exercise any of these rights, just email me at [email protected]. I aim to respond within 3 working days. If you are not satisfied with how I have handled your request, you may raise it with the relevant Indonesian authority.
Children
This website and my services are not directed at children. I do not knowingly collect personal data from children.
Changes to This Policy
I may update this Privacy Policy from time to time. Any changes will be posted on this page with a new revision date. If you have an order with me, the version you were shown when you paid is kept published, so you can always read the exact version that applied to your order.
Governing Law
This Privacy Policy is governed by the laws of Indonesia.