Renée Beauty Care is operated by PT Renée Rawat Nusantara, Jakarta Selatan, Indonesia, which is the data controller for the processing described here.

For anything in this policy, including a request to access or delete your data, write to halo@reneebeauty.care.

• Order details. Name, email, mobile number, delivery address, city, province, postal code, any preferred delivery date, any note for the courier, and the items ordered.
• Messages. Whatever you send through the contact form or by email, including an order reference if you provide one.
• Analytics. Aggregate page and product view counts, only if you enable analytics cookies.

Payment is made by QRIS. The code is scanned in your own banking or wallet application, and the transfer takes place between your provider and ours.

Card numbers, bank account numbers, PINs and wallet credentials are never seen or stored by this site.

While the payment layer is in sandbox mode, no transfer takes place and no bank is contacted.

• Performance of a contract for order and delivery details.
• Legal obligation for transaction records that tax law requires us to retain.
• Consent for analytics and marketing cookies, withdrawable at any time from the footer.
• Legitimate interest in keeping the site working and preventing fraudulent orders.

Three categories. Only the first is active before you choose.

• Strictly necessary. Cart contents, your consent answer and the checkout session. These cannot be switched off.
• Analytics. Off by default. Aggregate page and product counts.
• Marketing. Off by default. Attribution and frequency capping.

Change your answer at any time with Cookie settings in the footer. Clearing browser storage also clears it.

• The courier receives the name, address and mobile number needed to deliver the parcel.
• The payment provider receives the order reference and amount.
• The hosting provider processes requests to this site.

Personal data is not sold, rented or exchanged for advertising reach.

Transaction records are kept for as long as Indonesian tax law requires. Contact messages are kept while the matter is open and for a reasonable period afterwards. Analytics data is retained in aggregate form only. Data is deleted when it is no longer needed for the purpose it was collected for.

Under Indonesian Law No. 27 of 2022 on Personal Data Protection you may request access to your data, correction, deletion, restriction of processing, or a portable copy, and you may withdraw consent where processing is based on it.

Send the request to halo@reneebeauty.care. Deletion is honoured except for records that law requires us to retain, and we will say which those are.

The site is served over HTTPS. Order tokens are signed and rejected if altered. Access to order records is limited to those who need it. In the event of a personal data breach, affected individuals and the relevant authority are notified in line with applicable law.

This site is not directed at children, and we do not knowingly collect their personal data. If you believe a child has provided information, contact us and it will be deleted.

This policy may be updated. When the cookie categories or the parties behind them change, the consent banner asks again rather than relying on a previous answer.