This Privacy Policy explains your privacy rights when using Kurolite Services and how your personal information is securely stored. This policy applies to the Kurolite website, as well as all linked sites, applications, and services, regardless of how you access them. You must be at least 18 years old to use our Services.

Kurolite sells and distributes eSIMs primarily through third-party marketplace platforms (such as Shopee, Tokopedia, and Lazada). Where you have been provided access to Kurolite Services through one of these platforms, or through another third party (for example, a travel agency or your employer), Kurolite may receive your personal data from that third party. You are encouraged to review their privacy policy, as their methods of collecting, handling, and processing personal data may differ from Kurolite’s practices.

This Privacy Policy does not apply to third-party websites, services, or applications that are not affiliated with or partnered with Kurolite in any manner. Any violations of the terms and conditions of this Privacy Policy by such third parties are beyond our control, and therefore, we are not responsible for any data provided to or managed by them.

OUR ACTIONS TO PROTECT YOUR PERSONAL INFORMATION

1. We take the security of your personal information very seriously and will do everything reasonably possible to keep it secure. Transport Layer Security (TLS) technology is used to encrypt all of your data.
2. In providing our Services to you, we may need to disclose your information to relevant employees; however, access to your personal information is strictly limited to authorized Kurolite personnel only. To protect your personal information from unauthorized access, we maintain electronic and procedural safeguards that comply with applicable laws and regulations. By accessing our Services, you agree to comply with the terms and conditions set out in our Terms and Conditions and this Privacy Policy.
3. We may share your personal information with authorized third-party service providers who assist us with marketing, business, or legal activities, as applicable. By using our Services, you grant us permission to process your information for the purposes described above.
4. Due to the nature of internet transmissions, we cannot guarantee the security of your data during transmission. However, once we receive your information, we will use strict security procedures and safeguards to protect your personal data.

INFORMATION WE COLLECT AND HOW WE COLLECT IT

We collect personal data in various ways, depending on how you use our Services.

Direct from you — When you provide such data to us, for example when you purchase an eSIM, contact us via email, or communicate with us through customer support chat (WhatsApp and other social media).

Through your use of our Services or website — We may obtain information such as your IP address, cookie identifiers, location data, the device and browser you use, and how you use and interact with our website or other third-party websites. Some of this information is collected through cookies and similar technologies. For more information, please refer to the Cookies section below.

From third parties — Where authorized by you, permitted by law, or necessary to provide our Services in certain circumstances, including:

• When you purchase a Kurolite eSIM through a third-party marketplace platform (such as Shopee, Tokopedia, or Lazada);
• When you receive Services through another third party (such as an employer or travel agency);
• When we collaborate with third parties for marketing purposes; and
• Third-party managed or public sources, such as data providers.

INFORMATION WE COLLECT

Personal data when you purchase an eSIM – Kurolite does not have an account or login system. To process your purchase and deliver your eSIM, we collect the information you provide when transacting, which may include, but is not limited to, your name, email address, and phone number. Your eSIM is delivered via email or through customer support chat (WhatsApp and other social media).

Data generated from the use of the Kurolite website – Kurolite uses cookies, device information, and IP addresses to identify users, log API calls where necessary, and provide customer support. Kurolite does not and will not store private call content, SMS messages, data-based messages, or any data session content.

We request that you do not send or disclose any sensitive personal data to us (such as national identity numbers (NIK), racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, biometric or genetic data, criminal background, or trade union membership) through or in connection with our Services. If you submit such sensitive personal data, you consent to our processing and use of such data in accordance with this Privacy Policy. If you do not agree, you should not submit such data. Please note that even if provided, we will not retain such sensitive personal data.

HOW WE USE YOUR INFORMATION

We use your information to:

• Provide you with information you request about our products and Services;
• Manage and operate our Services, including troubleshooting, data analysis, testing, research, statistical purposes, and surveys;
• Conduct advertising activities;
• Inform you about similar services that we offer;
• Maintain and improve our Services;
• Send information including technical notices, updates, security alerts, and administrative or support messages; and
• Comply with our legal obligations where required.

THIRD-PARTY PLATFORMS WE USE

1. Google Analytics, which uses cookies and usage data;
2. Crisp, for managing customer support and contact requests;
3. Google Services and ZeptoMail, for sending emails.

WHERE WE STORE YOUR PERSONAL DATA

The data we receive from you may be transferred to and stored in high-security cloud data centers. We take all reasonable steps to ensure that your data is handled securely and in accordance with this Privacy Policy.

To further protect your personal information and online transactions, we recommend that you:

• Do not share your access information with anyone;
• Avoid clicking on links in emails or messages claiming to direct you to Kurolite—please use only our official website at lite.kurosim.com; and
• Log out and close your browser after completing transactions before visiting other websites.

YOUR RIGHTS WHEN USING OUR SERVICES

You have the right to:

• Access the data we store about you;
• Update or correct your data, provided the information is accurate;
• Request deletion of the personal data we store about you;
• Request details of the personal data we store about you;
• Request that we stop processing your personal data for marketing purposes by contacting our Customer Support; and
• Opt out of (i) direct marketing communications, (ii) the collection of sensitive personal data, and (iii) any new processing of your personal data beyond its original purpose. Please note that exercising these rights may affect the effectiveness of our Services.

All of your rights may be exercised by contacting us with your request.

COMPLIANCE WITH GDPR AND INDONESIAN PDP LAW

Kurolite is not part of the European Union and does not operate or conduct business in any EU country. Nevertheless, Kurolite will make reasonable efforts to comply with the European General Data Protection Regulation (GDPR) when processing personal data of individuals located in Europe. This does not imply full compliance with GDPR.

Kurolite complies with Indonesia’s Personal Data Protection Law as stipulated under Law No. 27 of 2022.

CHANGES TO THIS PRIVACY POLICY

Any changes to this Privacy Policy will be posted on this website and communicated to you. Such changes do not affect the Privacy Policy previously applicable to you. By accessing or using our Services after the effective date of any changes, you agree to be bound by the updated Privacy Policy.

CONTACT

Questions, comments, complaints, and requests regarding this Privacy Policy are welcome. Please contact us at:
[email protected]

COOKIES

We use cookies to distinguish you from other users. This helps us provide a better experience and improve our Services.

We may also use web beacons (also known as pixel tags or clear GIFs) to indicate whether a webpage or email has been accessed or opened, or whether certain content has been viewed or clicked.

DO NOT TRACK

Some internet browsers may be configured to send “Do Not Track” signals to online services you visit. At this time, we do not respond to “Do Not Track” signals. To learn more about “Do Not Track,” please visit https://www.allaboutdnt.com.