Legal — BikesIndo

Privacy Policy

What the site collects, why it is kept, and how to ask for access, correction or deletion.

Applies to bikesindo.com Last updated 12 November 2026

BikesIndo uses a contact form, a small amount of browser storage, a Google Tag Manager measurement container and a hosting provider. This page describes those practices plainly, including the parts that depend on the site owner's details.

Who this policy covers

This policy explains how bikesindo.com handles personal information. It applies to the public website, the contact form and the enquiries stored through that form. It does not cover third-party websites that we link to.

The site is published by BikesIndo, an independent motorcycle workshop and information portal. The operator is [LEGAL ENTITY / OPERATOR NAME — owner to confirm], and the contact address for privacy matters is [PRIVACY EMAIL — owner to confirm].

Owner action required. Replace the bracketed details on this page with the verified legal entity or operator name, privacy email address and postal address (if one is required) before relying on this policy.

Information we collect

We collect only what is needed to read and answer a message.

  • Contact form details: the name, email address, subject, message and consent confirmation you submit. You may also include an optional service choice, a donor or bike description, and the services you selected on the site.
  • Language version: the form records which language version you were using so the message can be read in context.
  • Anti-spam data: the form includes a hidden field that should remain empty, and the server uses your IP address for a short-lived rate-limit key. The rate-limit key expires after 60 seconds. The IP address is not stored as part of the enquiry record.
  • Technical request data: like any website, the hosting and content-delivery provider may process your IP address, browser type, requested URL and timestamp to deliver the page and protect the service. That processing is described in the provider's own privacy policy.

We do not operate user accounts, a newsletter, a payment system or a comments section on this site.

Cookies, analytics and local storage

The site uses Google Tag Manager (container GTM-K3X42XTP) to manage measurement tags. Loading the container means your browser requests a script from googletagmanager.com and sends technical request data such as your IP address, user agent, the requested URL and the referring page.

Tags configured in that container can send measurement data to Google Analytics, including the pages you visit, an approximate location derived from your IP address, your browser and device type, and a randomly generated client identifier. Google Analytics identifiers are normally stored in first-party cookies such as _ga. Google processes that data under Google's privacy policy. The site operator sees aggregated reports about how the site is used and uses them to improve content and navigation.

The site does not use this measurement for advertising or remarketing. If advertising or remarketing tags are added later, this policy will be updated before they are enabled.

Owner action required. Confirm that the Tag Manager container sends data to the correct Google Analytics property and that no advertising or remarketing tags are active. Update this section if those settings change.

Your browser may also store a few preferences locally. These values stay in your browser and are not sent to us unless you include them in a form:

  • indobikes-theme remembers whether you chose the light or dark theme.
  • indobikes-lang remembers your language choice.
  • indobikes-request remembers the service selection used by the request list on the site.

You can clear this data through your browser settings. The site does not need it to display the pages.

The site loads fonts from Google Fonts. When your browser requests a font, Google receives technical request data such as your IP address and user agent, and handles it under Google's privacy policy. Cloudflare provides hosting, storage and security for the site and may process technical data as part of that service.

How we use information

We use contact-form information to:

  • read and answer your enquiry;
  • understand the machine, guide or correction you are asking about;
  • keep a record of a workshop request while it is being reviewed;
  • detect spam, abuse and repeated automated submissions;
  • maintain the security and reliability of the site; and
  • comply with applicable law.

We do not sell personal information, rent it or add you to a marketing list. We do not use your message to send unrelated promotions.

Where a legal basis is required, we rely on your consent when you submit the form, and on our legitimate interest in running and protecting the site. You can withdraw consent by asking us to delete your enquiry, subject to any legal obligation to keep it.

Third-party services and sharing

We share information only where it is necessary to run the site or where the law requires it:

  • Cloudflare provides hosting, content delivery, security and the key-value storage used for enquiries. Data may be processed on Cloudflare's global network, including outside Indonesia.
  • Google Fonts serves the typefaces used on the site and receives the technical request data needed to deliver them.
  • Google Tag Manager and Google Analytics load the measurement container and, when a Google Analytics tag is active, provide aggregated reports about site usage. Google may process this data outside Indonesia under Google's privacy policy.
  • Legal and safety requests: we may disclose information if required by a valid legal process, or if disclosure is necessary to protect a person, the site or the public.

We do not otherwise sell or trade personal information. Links to third-party sites are provided for reference; their privacy practices are their own.

Data retention and security

Contact enquiries stored by the site are set to expire after 180 days. The rate-limit key based on your IP address expires after 60 seconds. Hosting and security logs are retained according to the provider's configuration and are outside the site's direct control.

The site is served over HTTPS. Access to the enquiry store is limited to the site operator's Cloudflare account and anyone the operator authorises. We keep the stored data to what the form collects and do not ask you to send identity documents, payment details or other sensitive records.

No method of transmission or storage is completely secure. If you believe a message was sent in error, contact us so it can be reviewed and deleted.

Your privacy rights

Subject to applicable law, you may ask to:

  • access the personal information we hold about you;
  • correct information that is inaccurate or incomplete;
  • delete your enquiry or ask us to restrict how it is used;
  • object to processing based on legitimate interests;
  • withdraw consent; and
  • complain to a data-protection authority in your jurisdiction.

To make a request, use the privacy contact below. We may need to verify that the request relates to you before acting on it. We will respond within the period required by applicable law.

If you are in Indonesia, you may also have rights under Indonesian personal-data protection law. This policy does not limit any right you have under the law that applies to you.

Children and sensitive data

The site is written for people who ride, maintain or are considering a motorcycle. It is not directed at children. Do not submit personal information about a child, and do not send identity documents, financial details, medical information or other sensitive records through the contact form.

Changes to this policy

We may update this policy when the site's data practices change. The revised version will be published on this page with a new “last updated” date. If a change materially affects how enquiries are handled, we will describe it here rather than rely on a silent edit.

Privacy contact

Privacy questions and requests can be sent to [PRIVACY EMAIL — owner to confirm]. Until that address is published, you can use the contact form and begin the subject with “Privacy request”.

Postal address, if one is required for your request: [POSTAL ADDRESS, IF REQUIRED — owner to confirm].

This policy is informational and does not create rights beyond those provided by applicable law.