Privacy Policy

This Privacy Policy explains how TM Motor Group (“TM Motor”, “we”, “us”) collects, uses, stores, and shares personal data when you use our website, mobile application, and related services (the “Platform”). It is intended to meet typical marketplace practice and Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) as well as other applicable rules.

By creating an account, checking out, booking a service, or otherwise using the Platform, you acknowledge this Policy. If you do not agree, please do not use the Platform.

Controller: TM Motor Group, Jl. DR. Sitanala No. 2, Neglasari, Tangerang, Indonesia. Contact: WhatsApp 0819 305 99998.

1. Personal data we collect

• Account data: name, email, password (stored as a hash), gender, date of birth, WhatsApp number, member code, and verification status.
• Order and delivery data: shipping or pickup details, recipient name and number, city/province, products purchased, payment method, order status, and notes you provide.
• Payment data: payment channel, transaction status, and, for manual transfer, proof of payment you upload. Card numbers and similar secrets are processed by the payment provider (for example Midtrans), not stored in full on our servers.
• Loyalty and booking data: points balance and history, member tier, vouchers used, and service booking details (branch, date, time, vehicle type).
• Device and usage data: IP address, browser or app type, device label, approximate logs needed for security, rate-limiting, and fraud prevention. We use session cookies and similar technology to keep you signed in and to remember your cart.
• Social login: if you sign in with Google or Apple, we receive the identifier, name, and email the provider shares with your consent.
• Communications: messages you send via WhatsApp, email, reviews, and customer-service forms.

We do not intentionally collect sensitive personal data beyond what is needed to provide the service. Please do not submit other people’s data unless you have the right to do so.

2. How we use personal data

• Create and manage your account, including email and WhatsApp verification.
• Process orders, payments, shipping, pickup, refunds, and after-sales support.
• Allocate workshop booking slots and contact you about your booking.
• Calculate loyalty points, member tiers, and voucher eligibility.
• Send transactional notices (order status, payment reminders, password reset). Marketing messages are sent only where allowed and you may opt out of non-essential promotions.
• Improve the Platform, prevent fraud, enforce our Terms, and comply with law.

3. Legal bases

We process personal data because it is necessary to perform a contract with you (account, purchase, booking), to comply with legal obligations (tax, consumer, anti-fraud), based on our legitimate interests (security, service improvement) in a manner that does not override your rights, or based on your consent where required (for example certain cookies or optional marketing).

4. Sharing of data

We do not sell your personal data. We share it only as needed with:

• Courier and logistics partners, to deliver your order.
• Payment providers (including Midtrans and banks) to complete payment.
• IT, hosting, email, and WhatsApp gateway providers who process data on our instructions.
• Our branches and authorised staff who fulfil orders or service bookings.
• Public authorities when required by law or to protect our rights, users, or the public.
• A successor in the event of a merger, restructuring, or sale of assets, subject to this Policy or equivalent protection.

Social-login providers (Google, Apple) process your data under their own policies when you use those buttons.

5. Cookies and similar technologies

We use essential cookies and local storage for login sessions, CSRF protection, and shopping-cart functions. Analytics or advertising cookies, if introduced later, will be described here and, where required, made optional. You can block cookies in your browser; some features may stop working.

6. Retention

We keep account and transaction data for as long as your account is active and thereafter as needed for warranties, accounting, dispute handling, and legal retention periods in Indonesia. Proof of payment, logs, and backups are kept only as reasonably necessary, then deleted or anonymised.

7. Security

We use industry-typical measures such as HTTPS, hashed passwords, access controls, and payment via certified providers. No method of transmission or storage is 100% secure. Please use a strong password and do not share OTPs or reset links.

8. Your rights

Subject to Indonesian law, you may request access to, correction of, or deletion of personal data we hold, withdraw consent where processing is based on consent, and lodge a complaint with the relevant Indonesian authority. Some requests may be refused where we must keep data for a contract, legal claim, or statutory duty.

You can update much of your profile, addresses, and password in the Account pages after login. To request deletion of an account, contact us via WhatsApp and verify that you are the account holder.

9. Children

The Platform is not directed at children under 18. If you believe we have collected data from a child without proper consent, please contact us and we will take appropriate steps.

10. International processing

Our primary operations are in Indonesia. Some processors (for example cloud, email, or social login) may store or access data outside Indonesia. We take steps we consider reasonable so that such processing remains consistent with this Policy and applicable law.

11. Changes

We may update this Policy when our practices or the law change. The current version is always published on this page with the last-updated date. Material changes may also be announced in the Platform or by email where appropriate.

12. Contact

For privacy requests: WhatsApp 0819 305 99998, or write to TM Motor Group, Jl. DR. Sitanala No. 2, Neglasari, Tangerang, Indonesia. Please describe your request clearly and allow reasonable time for us to respond.