Effective date: 29 October 2026
PT Mega Kreasi Pensil Media ("Pensil Media", "we", "us" or "our") respects the privacy of visitors, prospective clients, partners, job applicants, and other individuals who interact with www.pensilmedia.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, retain, protect, and otherwise process personal data in accordance with applicable Indonesian law, including Law No. 27 of 2022 on Personal Data Protection ("PDP Law"). Where consent is required, simply browsing the Website does not replace a specific consent request.
For Website-related activities, the personal data controller is:
PT Mega Kreasi Pensil Media
Cyber 2 Tower, 18th Floor
Jl. HR Rasuna Said, Block X-5
Jakarta 12950, Indonesia
Phone: +62 21 5799 8283
Email: [email protected]
For certain client engagements, we may instead act as a personal data processor on documented instructions from a client acting as controller. Roles depend on the actual processing activity and applicable agreements.
This Policy covers visits to the Website, Contact Us submissions, enquiries and proposals, communications by email, phone or WhatsApp, Website analytics and advertising, recruitment directed through the Website, and interactive features such as GITA where available. Separate products and platforms, including AYA, may have their own privacy notices governing their accounts, licensed model information, uploads, payments and other platform-specific processing.
Please do not submit sensitive or third-party personal data unless necessary and lawful.
We obtain data directly from you, automatically through your device and Website technologies, from authorized organizational representatives and service providers, and from public sources where legally permitted. We seek to ensure that data is collected lawfully and is relevant to a specified purpose.
We use personal data to respond to enquiries and requests for proposals; arrange consultations and manage business relationships; provide contracted services; operate, secure and improve the Website; assess content, advertising and conversion performance; administer recruitment; operate interactive AI features; prevent spam, fraud and unauthorized access; and comply with legal obligations. Any materially different purpose will be assessed and, where required, separately notified or consented to.
Depending on the activity, processing may rely on valid consent; performance of a contract or pre-contractual steps requested by you; compliance with a legal obligation; legitimate interests assessed against individuals’ rights; or another legal basis recognized by the PDP Law. We do not treat all Website processing as automatically authorized by a single blanket consent.
The Name and Email fields help us identify and respond to your enquiry; Subject and Message help us understand the request. Information may be routed to authorized team members and stored in email, business systems or customer relationship management tools, depending on the actual configuration. Do not include confidential, sensitive or third-party information that is unnecessary for your enquiry. Promotional opt-in, where required, should be requested separately.
If GITA or another AI assistant is offered, messages or prompts may be transmitted to technology or infrastructure providers to generate responses. Where voice functionality is enabled, audio may be processed into text and transcripts or interaction history may be stored according to the feature configuration. Avoid entering passwords, financial secrets, unnecessary sensitive information or third-party data without authorization. AI outputs may be inaccurate and should not be treated as binding professional advice. Using conversations to train or improve third-party models beyond what is necessary to deliver the service requires an appropriate legal basis and clear disclosure.
Where enabled, analytics and advertising tools may process usage events, cookie identifiers, traffic sources and conversion activity. Analytics, attribution, remarketing and personalized advertising must follow the applicable consent and transparency requirements. We do not assume that every tool is installed merely because it is mentioned in this Policy; the final published notice must match the Website’s actual configuration.
Access is limited to authorized personnel and, as necessary, providers of hosting, cloud infrastructure, security, email, CRM, analytics, advertising, AI technology and professional advisory services. Data may also be disclosed to clients or competent authorities where justified by a lawful basis. We do not sell personal data as a data commodity. Appropriate contractual, confidentiality and security safeguards should govern processors acting on our behalf.
Cloud, analytics or AI providers may process data outside Indonesia. Any cross-border transfer will be assessed under the PDP Law, including applicable adequacy, appropriate and binding safeguards, or consent requirements, as relevant. The actual countries, recipients and transfer mechanisms should be verified before publication.
We retain personal data only as long as necessary for the stated purposes, contractual obligations, legal requirements, security and the establishment or defense of legal claims. Specific periods for leads, contact submissions, email correspondence, logs, cookies, applicants and AI conversations must be documented internally. At the end of the applicable period, data will be securely deleted, destroyed or anonymized, subject to lawful exceptions and controlled backup cycles.
We implement risk-appropriate organizational and technical safeguards, which may include role-based access controls, authentication, encryption in transit where appropriate, vendor oversight, logging, backups, vulnerability management and incident response procedures. No online system is entirely risk-free; we continuously evaluate safeguards in light of the nature and sensitivity of the information processed.
Subject to the PDP Law and its exceptions, you may request information about processing; access to and copies of your data; correction or completion; erasure or destruction; withdrawal of consent; termination, restriction or postponement of processing; data portability where applicable; and objection to solely automated decisions with legal or similarly significant effects. You may also submit complaints and seek available legal remedies.
Send requests to [email protected] describing the right you wish to exercise and the relevant information. To protect personal data, we may verify your identity or authority. We will respond within the legally applicable timeframe and explain any lawful refusal or limitation. Withdrawal of consent does not invalidate processing lawfully carried out before withdrawal.
If we send information about services, events or industry insights, you may opt out through an available unsubscribe mechanism or by contacting our privacy address. Opting out of promotions does not prevent necessary contractual, security or legally required communications.
The Website may contain links to social media platforms, client websites, third-party services, as well as other products and platforms developed or operated by Pensil Media, including AYA. Certain products, platforms, and external services may be subject to their own privacy policies and data protection practices. We encourage users to review the applicable privacy policies before accessing these services or providing personal information.
The Website is primarily intended for business and professional audiences. We do not knowingly solicit children’s personal data through general enquiry forms. If processing children’s data becomes necessary, we will apply parental or guardian consent and additional safeguards where required by law. Parents or guardians may contact us regarding information provided without appropriate authorization.
If a personal data protection failure occurs, we will investigate, contain and mitigate the incident, restore systems where appropriate, document our findings, and notify affected individuals and competent authorities when required and within applicable statutory deadlines. Privacy-related complaints may be directed to our privacy contact.
We may update this Policy to reflect changes in our services, technologies, operations or legal requirements. The updated version will be published on the Website with a revised effective date. Where material changes require additional notice or renewed consent, we will provide it before the relevant processing.
This Policy is governed by the laws of the Republic of Indonesia without limiting mandatory rights of personal data subjects. For enquiries or complaints, contact us through:
PT Mega Kreasi Pensil Media
Cyber 2 Tower, 18th Floor
Jl. HR Rasuna Said, Block X-5
Jakarta 12950, Indonesia
Phone: +62 21 5799 8283
Email: [email protected]
Digital Marketing itu kayak kopi hitam. Kalo nggak strong, ya nggak nendang!
Makanya, kita siapin yang paling powerful biar brand lo makin WOW! Cus, kontak kita sekarang!
Pensil Media
PT Mega Kreasi Pensil Media
Cyber 2 Tower, 18th Floor
Jl. HR Rasuna Said, Block X-5
Jakarta, 12950 - Indonesia
