Privacy Policy

This Privacy Policy explains how PT Jelajah Bahasa Dunia (“Ngobrol Yuk”, “we”) collects, uses, stores, shares, and protects your personal data when you visit ngobrolyuk.com, sign up for or buy a class, attend classes, contact us, or apply as a tutor. It is prepared with reference to Indonesia’s Law No. 27 of 2022 on Personal Data Protection (the “PDP Law”) and related regulations.

By using our website and services, you confirm that you have read and understood this Privacy Policy.

Contents: 1. Who we are · 2. Data we collect · 3. How we use data · 4. Third parties · 5. Publicly shown information · 6. Cookies · 7. Storage & security · 8. International transfers · 9. Minors · 10. Your rights · 11. Data incidents · 12. Changes · 13. Contact us

1. Who we are

Ngobrol Yuk is a language course provider operated by PT Jelajah Bahasa Dunia, located at Komplek Perkantoran Plaza Bintaro Jaya, Jalan Bintaro Utama 3A Blok C34, Pondok Aren, South Tangerang 15225, Indonesia. We act as the personal data controller for data collected through our website and services.

2. Data we collect

a. Data you give us

• Account and orders: full name, email address, phone/WhatsApp number, city, country, age, expected start date, preferred learning days and times, and order notes. Your account is created when you place an order; your password is stored encrypted (hashed) and we cannot see it.
• Trial class form: name, WhatsApp number, email, age range, language package of interest, and how you heard about Ngobrol Yuk. To prevent abuse, we send a verification code (OTP) to your WhatsApp or email.
• My Account profile: profile photo, social media usernames, and other profile details you choose to add.
• Communications: messages you send via WhatsApp, email, or forms on the website.
• Tests and quizzes: answers and results of placement tests or quizzes you take, with your name/email if provided.
• Tutor applications: CVs, profiles, and other details you send when applying to teach.
• Comments: name, email, and comment text if you comment on the blog.

b. Data created while you learn

• Class schedules, attendance, packages and remaining hours, materials and assignments, tutor notes, and progress reports.
• Class recordings: as set out in our Terms & Conditions, regular classes are recorded (except Conversation Club) and recordings are provided only for participants’ learning.

c. Transaction data

• Order number, products/classes purchased, amount, payment method, and payment status.
• Payments are processed by our payment partner Duitku (bank virtual accounts, QRIS, e-wallets, and credit cards). We do not receive or store your card number, PIN, or bank/e-wallet passwords.

d. Data collected automatically

• IP address, browser and device type, pages visited, visit times, and how you arrived (for example from an ad or search engine).
• Terms & Conditions acceptance records: when you place an order, we record the time, Terms version, IP address, and browser information as proof of acceptance.
• Data from cookies and similar technologies (see section 6).

e. Tutor data

• Identity, contact details, public profile (photo, skills, experience), teaching schedule, attendance, fees, and the details needed to pay tutor fees.

3. How we use data

• Providing our services: creating accounts, processing orders and payments, scheduling, matching you with a suitable tutor, running classes, and providing materials, recordings, and progress reports.
• Communicating with you: confirming sign-ups and schedules, class reminders, payment information, and answering your questions via WhatsApp or email.
• Security: OTP verification and preventing spam, fraud, and account misuse.
• Improving our services: understanding how the website is used and measuring the effectiveness of our ads.
• Marketing: sharing relevant programs or promotions. You can opt out at any time.
• Legal obligations: bookkeeping, tax, and lawful requests from authorities.

We process data on the legal bases recognised by the PDP Law: performance of a contract with you (for example when you buy a class), your consent (for example marketing cookies and promotional messages), legal obligations, and legitimate interests (for example website security), while respecting your rights and interests.

4. Third parties that help us

We do not sell your personal data. We only share data as needed with parties that help us run our services:

• Duitku — payment processing.
• Google — email (Google Workspace/Gmail), Google Analytics, Google Ads, and Google Tag Manager for analytics and ad measurement, and Google Meet when classes are held there.
• Meta — WhatsApp for communication and OTP delivery, and Meta Pixel for ad measurement.
• Cekat.AI — the official WhatsApp Business partner we use to manage conversations and send OTPs.
• Zoom — online class platform.
• Cloudflare — website security, form protection (Turnstile), and content delivery.
• Hosting and backup storage providers — our website servers are located in Jakarta, Indonesia.
• Ngobrol Yuk tutors — receive the names, schedules, and learning details of the participants they teach.
• Competent authorities — where required by law.

These parties process data on our behalf or under their own privacy policies, and only for purposes related to our services.

5. Publicly shown information

• Tutor profiles (name, photo, languages, skills, experience, and rating) are shown on the Tutors page.
• Class schedules on the website may show participants’ names.
• Activity photos/videos and testimonials may be published on our website or Ngobrol Yuk social media.

If you would rather your name or photo not be shown, contact us and we will adjust it.

6. Cookies and similar technologies

Cookies are small files stored by your browser. We use:

You can delete or block cookies in your browser settings. Blocking essential cookies may stop some features (such as login and payment) from working.

7. Storage and security

• Data is stored on servers in Jakarta, Indonesia, protected by encrypted connections (HTTPS), access limited to authorised staff, and regular backups.
• We keep data while your account is active and for as long as needed for the purposes in this policy. Transaction data is kept for as long as tax and company-record regulations require. Data we no longer need is deleted or anonymised.
• No system is completely secure. Keep your password private and never share your OTP code with anyone, including people claiming to be from Ngobrol Yuk.

8. International transfers

Some of our partners (for example Google, Meta, Zoom, and Cloudflare) may process data on servers outside Indonesia. In such cases we make sure the transfer complies with the PDP Law and is made to partners that apply an equal or higher standard of data protection.

9. Minors

Under our Terms & Conditions, participants must be at least 15 years old. Participants under 18 need consent from a parent or guardian, and registration and payment should be made by the parent/guardian. Parents/guardians may contact us to access, correct, or delete a minor participant’s data.

10. Your rights

Under the PDP Law, you have the right to:

• obtain information about how your personal data is processed;
• access and obtain a copy of your personal data;
• correct or complete inaccurate data;
• request deletion or destruction of your data, or end its processing;
• withdraw consent you have given;
• delay or restrict processing;
• object to decisions based solely on automated processing;
• obtain and/or use your data in a commonly used format; and
• file a claim and receive compensation in accordance with the law.

You can change most account details yourself on the My Account page. For other requests, contact us (see section 13). We will first verify your identity and respond within the time limits set by law. Deletion of certain data may be limited where we are legally required to keep it (for example transaction records).

11. Data incidents

If a personal data protection failure affects you, we will notify you and the competent authority no later than 3 x 24 hours after becoming aware of it, as required by the PDP Law, including the data affected, when and how it happened, and the steps we are taking.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version is always available on this page, with the update date at the top. For significant changes, we will let you know by email or on the website.

13. Contact us

For questions, personal data requests, or complaints, contact:

• PT Jelajah Bahasa Dunia (Ngobrol Yuk)
• Email: info@ngobrolyuk.id
• WhatsApp: +62 815-9633-119
• Address: Komplek Perkantoran Plaza Bintaro Jaya, Jalan Bintaro Utama 3A Blok C34, Pondok Aren, South Tangerang 15225, Indonesia

This policy is available in Indonesian and English. If there is any difference in interpretation, the Indonesian version prevails.