Privacy Policy

Last updated March 16, 2026

Versi v1.0Berlaku sejak 16 Maret 2026 Riwayat perubahan

PERSONAL DATA POLICY

Kyou Hobby Shop or Kyou Group (“Kyou”, “we”, “us”, or “our” ) is a group of companies within Kyou Group domiciled in Indonesia and established under Indonesian Law. This Personal Data Policy represents Kyou’s commitment to respect and protect any personal data or information of users of the website http://www.kyou.id and its derivative websites (hereinafter referred to as the “Site”).

A. Applicability of the Personal Data Policy

This Personal Data Policy explains and applies to information relating to you (“Personal Data”) that we collect, obtain, or process when you:

conduct business with Kyou, whether as a contractor, vendor, or business partner of Kyou; and/or
become a customer of Kyou, use Kyou’s products or services, visit Kyou’s facilities and/or the Site.

Where a more specific personal data policy exists, the provisions regarding personal data shall follow such specific policy. We encourage you to read this Personal Data Policy together along with the Terms and Conditions of our products/services, as those documents may contain more specific information relating to such products/services.

In summary, this Personal Data Policy applies to:

all services offered by Kyou;
existing customers; and
prospective customers of Kyou.

B. Legal Basis for the Collection and Use of Personal Data by Kyou

Kyou acts as the Data Controller of all information and Personal Data received, unless otherwise stated. In general, we collect and process Personal Data on several legal bases, including:

Your consent to this Personal Data Policy;
To carry out operational activities as part of fulfilling our commitments to you, for example to provide the availability of services and/or products for your needs, process service billing to your credit card and/or your preferred payment system, provide promotional offers, and other related activities;
To fulfill our obligations as a Personal Data controller under applicable laws and regulations; and/or
To fulfill our obligations based on legitimate interests, while taking into consideration the purpose, necessity, and balance between our interests and your rights.

C. Collection of Personal Datai

Kyou collects Personal Data for the purpose of processing User transactions, managing and facilitating the use of the Site, and other purposes permitted by applicable laws and regulations. The Personal Data collected includes the following:

Personal Data that you provide directly, including but not limited to when you:
1. cooperate with Kyou, for example as a business partner in Kyou’s procurement system and/or accounting and billing system, correspondence, or registering your company as a Kyou business partner;
2. create and/or update an account on the Kyou Site, including username, email address, telephone number, password, address, photograph, and others;
3. register as a user of our Site using your social media account;
4. conduct transactions through our Site;
5. provide payment information when conducting payment transactions through the Site, including but not limited to bank account details, credit card information, virtual account information, instant payment, and internet banking;
6. visit facilities provided by us, such as stores and/or bazaars;
7. interact with us, including through telephone calls (which may be recorded), letters, facsimile, face-to-face meetings, social media platforms, email, and chat applications such as WhatsApp;
8. participate in Kyou's social media pages
9. participate in promotional events organized by Kyou;
10. contact Kyou's customer call center physically, by telephone, or electronically to submit complaints, obtain information, or receive other services;
11. submit any forms, including but not limited to application forms or other forms related to our products and services, whether online or in physical form; and
12. submit your Personal Data to us for any reason.
Data recorded when Users use the Site, including but not limited to:
1. real-time or approximate location data such as IP address, Wi-Fi location, geo-location, and similar information;
2. time-related data from each of your activities, including registration, login, transactions, and others;
3. usage or preference data obtained through cookies, pixel tags, and similar technologies that create and maintain unique identifiers;
4. device data, including the type of device used to access the Site, hardware model, operating system and version, software, IMEI number, file name and version, language preference, unique device identifiers, advertising identifiers, serial number, device motion information, and/or mobile network information
5. log data, including server records that receive data such as device IP address, date and time of access, Site features or pages viewed, and/or third-party sites or services used before interacting with the Site.
Data obtained from other sources, including but not limited to:
1. kyou's business partners who assist Kyou in developing and delivering services on the Site to you, including payment service providers, logistics or courier partners, site infrastructure providers, and other partners;
2. financial service providers;
3. marketing service providers; and
4. publicly available sources.

The above list is not intended to be exhaustive and only provides general examples of the types of Personal Data that may be collected and how such data may be obtained.

D. Use of Personal Data

We may collect, use, disclose, and/or, process your Personal Data for purposes including but not limited to:

responding to, processing, handling, or completing transactions, complaints, and/or fulfilling your requests for Kyou products and services;
contacting you or communicating with you through telephone calls, text messages, facsimile messages, email, postal mail, or other methods for the purpose of managing and/or administering your relationship with us or your use of Kyou services, including but not limited to communicating administrative information relating to Kyou products and services. You acknowledge and agree that such communications may involve sending letters, documents, or notices that may include certain disclosures of your Personal Data necessary for such delivery and may also appear on the exterior of envelopes or postal packages;
marketing and advertising purposes, including sending you marketing and promotional information and materials relating to Kyou services and/or products through various communication channels; and
ulfilling our legal obligations, such as when requested by government authorities, handling legal processes, protecting your interests, carrying out duties in the public interest upon request of government authorities or public services, exercising our authority under applicable laws and regulations, and fulfilling other legitimate interests while taking into consideration the purpose, necessity, and balance between our interests and your rights.

E. User (Personal Data Owner) Rights

In relation to the processing of Personal Data by Kyou, Users have the following rights with respect to their Personal Data:

To access Personal Data held by Kyou;
To recitify any innacuracy on their Personal Data;
To withdraw consent to the processing of Personal Data;
To restrict the processing of certain Personal Data; and
To submit complains regarding the processing of Personal Data.

F. Retention of Personal Data

Personal Data that has been collected will be stored for the period necessary to fulfill the purposes described above.

Kyou may retain your Personal Data to provide the services you request or for other legitimate interests, such as complying with our legal obligations under applicable laws and regulations and government authority requirements, as well as carrying out our business operations.

The retention period for Personal Data is determined based on applicable legal requirements. However, if there are no relevant legal provisions, your Personal Data will be retained for as long as you remain registered as a user of the Kyou Site.

Your Personal Data may be stored in printed or electronic form.

G. Information Regarding Childrenk

The Site is not intended for children under the age of 13. We do not knowingly collect or store any personal or non-personal information from anyone under the age of 13.

As a parent or legal guardian, please do not permit children under your care to submit Personal Data to Kyou. If Personal Data of children under the age of 13 under your supervision is disclosed to Kyou, you hereby consent to the processing of such child's Personal Data and agree to accept and be bound by this Personal Data Policy on behalf of such child.

H. Commitment to Personal Data Protection

We implement various security measures and endeavor to ensure the security of your Personal Data within our systems. Users’ Personal Data is stored behind secure networks and is only accessible by a limited number of Kyou employees who have special access rights to such systems.

In conducting our business, we may need to use, process, disclose, and/or transfer your Personal Data to third-party service providers, agents, and/or our affiliates or related companies, and/or other third parties located in Indonesia or outside Indonesia for one or more of the purposes described above.

Such third-party service providers, agents, affiliates or related companies, and/or other third parties will process your Personal Data on our behalf or on behalf of another party for one or more of the purposes described above.

We make reasonable efforts to ensure that our third parties and affiliates maintain the security of your Personal Data from unauthorized access, collection, use, disclosure, processing, or similar risks and retain your Personal Data only for as long as necessary for the purposes described above.

These third parties include, but are not limited to

our subsidiaries, affiliates, and related companies;
contractors, agents, service providers, and other third parties that we engage to support our business and/or whose products and/or services are available or provided on the Site. This includes, but is not limited to, parties providing administrative or other services and/or products to us and/or to users such as postal services, logistics providers, financial service providers, information technology companies, and data centers;
buyers or successors of Kyou in the event of a merger, divestiture, restructuring, reorganization, dissolution, sale, or other transfer of some or all of Kyou's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceedings in which Personal Data held by Kyou forms part of the transferred assets; and
other third parties for the purpose of fulfilling one or more of the purposes described above.

Third parties may unlawfully intercept or access Personal Data transmitted to or stored on the Site, technologies may malfunction or not operate as expected, or someone may access, exploit, or misuse information without any fault on our part.

Nevertheless, we will implement reasonable security measures to protect your Personal Data as required under applicable laws and regulations. However, absolute security cannot be guaranteed, including unauthorized disclosures resulting from sophisticated and malicious hacking activities by third parties without any fault on our part or other circumstances beyond our control.