Privacy Policy — Designlof

Who is responsible

Designlof is operated by Wiryo Saputra, based in Jakarta, Indonesia. For personal information collected through designlof.com, Wiryo Saputra is the data controller: the person responsible for deciding why and how that information is used. Contact: hello@designlof.com.

This policy covers the public Designlof website, its enquiry and template-request forms, newsletter registration, and live contact. Separate products, client websites and third-party platforms may have their own notices. Where we process client data only on a client’s instructions, the project agreement must define that separate role.

Information you choose to share

Project enquiries: your name, email address, selected service, website address if supplied, project description and any details you include in the message. Template requests also include your chosen template, requested assistance and contact consent.

Newsletter registration: your email address, the consent value submitted and the submission time. Registering interest in a project does not automatically subscribe you to promotional messages.

Live contact: your name, email address, messages, timestamps and conversation status. If comments are enabled on a journal entry, your submitted name and comment can be published after moderation; your email address is not displayed publicly.

Please send only information needed for the conversation. Do not put passwords, payment-card numbers, identity documents or sensitive third-party information into a general form or chat. If a project requires confidential material, we will agree a suitable transfer method first.

Technical information and site analytics

Our servers process technical request information needed to deliver and protect the website, including IP addresses, browser information, requested URLs and request times. Security controls use hashed rate-limit identifiers to help prevent abuse. Infrastructure logs may contain request information; they are distinct from our traffic reports.

The CMS produces first-party aggregate traffic reports using page paths, day, referral domain, campaign parameters and a broad device category. A country category can be used where provided by trusted infrastructure. These reports do not store visitor profiles, raw IP addresses or unique visitor identifiers. The analytics collector skips requests with Do Not Track or Global Privacy Control enabled.

The current Designlof pages do not load Google Analytics, advertising pixels or session-replay tools. If we introduce materially different tracking, we will update this notice and provide any choices required before that tracking operates.

Why we use information

We use enquiry details to understand your request, answer questions, prepare a proposal and communicate about a possible or active project. Where relevant, this is processing needed to take steps at your request before an agreement or to perform that agreement.

We use newsletter details to send the studio notes or release updates you specifically request, based on consent. You may withdraw that consent without affecting an unrelated project or the lawfulness of earlier processing.

We process limited technical information to maintain the website, prevent abuse and understand aggregate use, based on legitimate operational interests balanced against your rights. We may also retain or disclose relevant records where necessary to meet a legal obligation or handle a legal claim. We do not use website submissions to make solely automated decisions with legal or similarly significant effects.

Cookies and browser storage

dl_session is a first-party session cookie used for functions such as form security, preventing duplicate submissions and authenticated sessions. It is not an advertising cookie. It is configured as a session cookie; when the browser removes it depends in part on browser session-restore settings.

dl_chat_token is a random identifier stored in your browser’s local storage when the live-contact widget loads. It allows that browser to reconnect to its conversation. It remains until you clear the site’s storage or the browser removes it. Clearing it can prevent you from reopening an earlier conversation, but does not itself delete the server-side messages.

You can manage cookies and local storage through your browser settings. Blocking essential storage may stop forms, sign-in or chat from working correctly. The aggregate analytics described above does not set an analytics cookie.

Who can receive information

Information is available to the Designlof personnel who need it to handle the enquiry or deliver the agreed work. Hosting, infrastructure, communication and support providers may process information required for the services they supply. Access should be limited to the purpose of that work and appropriate confidentiality and security requirements.

Form submissions are stored in the CMS dashboard. The current form system does not automatically email their field contents to third parties. If administrative email notifications are enabled, the built-in notification contains a form name and response reference rather than the submitted message.

We do not sell personal information or share it for third-party advertising. We may disclose necessary information in response to a valid legal requirement, to protect people or systems from abuse, or with your specific instructions.

AI-assisted design and external links

Designlof uses an AI-assisted creative workflow alongside human review. Sending a website form or live-contact message does not automatically send that submission to an AI model. Use of confidential client content in external AI tools must be addressed in the project’s agreed data-handling arrangements; this policy is not blanket permission to upload such content.

Links to DesignLof Studio, the CMS, template demonstrations, WhatsApp and social platforms take you to another service or environment. When you follow them, the destination may receive technical information and anything you submit there. Review its applicable privacy information before sharing confidential details.

International processing

Designlof is based in Indonesia, while infrastructure or communication providers may process information in other countries. The location and data flows for a specific client project depend on its agreed services and providers.

Where personal information is transferred outside Indonesia, the transfer must meet applicable Indonesian requirements, including the required level of protection or suitable safeguards, and consent where the law requires it. Contact us for information about the arrangements relevant to your enquiry or project. This policy does not represent that every provider or destination has been certified to a particular privacy standard.

How long records are kept

Enquiry and chat records are kept while needed to respond, manage the relationship or resolve a related issue. For active projects, relevant correspondence and agreements may need to be kept after delivery for accounting, legal obligations or claims. The appropriate period depends on the record and the applicable obligation; we do not apply one fixed deletion period to every category.

Newsletter details are used until you unsubscribe or the list is discontinued. A limited record of withdrawal may be retained to prevent further promotional contact. Published comments can remain with the article unless removed through moderation or a valid request.

The CMS does not automatically expire form entries or chat messages. Closing a conversation is not deletion. Requests for deletion are reviewed and carried out manually, subject to any justified legal retention. Backup copies may remain until the relevant backup is replaced or removed; deleting a browser cookie does not delete those copies.

Our retention principle is to keep identifiable records only while their purpose or a legal requirement remains. You can ask us what records we hold, request deletion, or ask why a particular record still needs to be retained.

Your choices and rights

Under applicable data-protection law, you may request information about processing, access and a copy of your data, correction, withdrawal of consent, restriction or ending of processing, and deletion. Rights to portability, objection to certain automated decisions and remedies may also apply. Some requests are subject to statutory conditions or exceptions.

Email hello@designlof.com with the subject “Privacy request” and tell us the request and the email address used in your interaction. For a newsletter opt-out, use “Unsubscribe”. We may ask for proportionate verification to avoid disclosing or deleting another person’s information; please do not send identity documents unless requested through an appropriate channel.

We will respond within the time limits required by applicable law, explain any justified refusal or retained records, and tell you if more information is necessary. You may raise a complaint with us and use the competent authority or legal remedies available under applicable law. Contacting us does not waive those rights.

Security and children

The website uses HTTPS, authenticated administration and access controls. No online service can promise that an incident will never occur. If a personal-data incident occurs, we will assess it and provide notifications required by applicable law.

Our services are intended for people able to enter business arrangements and are not directed at children. Do not submit a child’s personal information through the public forms. If you believe a child’s information has been submitted, contact us so we can assess and remove it where required.

Privacy policy.

On this page