BukaToko.ID ("BukaToko", "we", "us") is a platform that helps merchants build and manage their own online stores. This Privacy Policy explains how we collect, use, share, and protect personal data — both of merchants (platform users) and of buyers who transact through a merchant's store.
1. Introduction
We respect your privacy and are committed to protecting your personal data. This policy applies to our website, the merchant dashboard, and all storefronts operated on the BukaToko platform. By using our services, you agree to the practices described here.
This policy is prepared with regard to Indonesia's Law No. 27 of 2022 on Personal Data Protection ("PDP Law"), as well as the terms of the third-party platforms we integrate with, including the WhatsApp Business Platform and Meta services.
2. Data Controller
The BukaToko.ID service is operated by Akses Digital Indonesia. For merchant data and platform usage data, we act as the data controller.
For buyer data collected through a merchant's store, the merchant acts as the data controller for its own customers, while BukaToko acts as a data processor that processes such data on the merchant's instructions to operate the store.
3. Data We Collect
We collect only the data needed to provide the service. This includes:
a. Merchant Account Data
- Name, email address, and phone/WhatsApp number;
- Store name, store address, and business information you provide;
- Billing and subscription information (plan status, payment history).
b. Buyer Data (via the merchant's store)
- Name, contact number, and shipping address when placing an order;
- Order details and transaction history;
- Communications through store messaging features, including WhatsApp where enabled by the merchant.
c. Technical & Usage Data
- IP address, device type, browser, and operating system;
- Pages visited, access times, and basic interactions within the service;
- Cookies and similar identifiers (see Section 6).
We do not collect sensitive data (such as health, religious, or biometric data) and do not request more data than necessary to operate the service.
4. How We Use Data
We use data for the following purposes:
- To provide, operate, and maintain the platform and your store;
- To process orders, payments, and shipping;
- To send transactional notifications (order confirmations, shipping updates) — including via WhatsApp where enabled;
- To provide customer support and respond to your requests;
- To improve security, prevent abuse, and meet legal obligations;
- To provide analytics and ad-tracking features that you choose to enable.
We process data on lawful bases, namely performance of a contract, your consent, our legitimate interests, and/or compliance with legal obligations.
5. WhatsApp Business & Meta Services
BukaToko offers customer communication features that may use Meta's WhatsApp Business Platform (Cloud API). This feature is optional and active only if a merchant chooses to connect their WhatsApp Business number.
How it works
- Transactional & service messages. WhatsApp is used primarily for order-related communication — for example, order confirmations, shipping notifications, and replying to buyer questions within a conversation session.
- Opt-in consent. Business-initiated messages are sent only to buyers who have provided consent, in accordance with the WhatsApp Business Messaging Policy.
- Processing by Meta. When this feature is used, message content and related phone numbers are processed by WhatsApp/Meta as part of message delivery, subject to the WhatsApp Business Policy and the Meta Privacy Policy.
BukaToko does not use WhatsApp data for mass marketing beyond the transactional scope, and does not sell conversation data to any party. Large-scale promotional/marketing broadcasts are outside the scope of this transactional feature.
6. Cookies & Ad Tracking
We and merchants may use cookies and similar technologies to operate the service, remember preferences, and measure performance.
Merchants may enable third-party ad-tracking tools on their stores, including Meta Pixel and TikTok Pixel, to measure ad conversions. When enabled, these tools may set cookies and collect interaction data under each provider's own policies. Meta's and TikTok's use of data is governed by their respective privacy policies.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect some functionality.
7. Data Sharing
We do not sell your personal data. We share data only in the following cases:
- Service providers that help us operate the platform (e.g. payment service providers, courier services, cloud infrastructure, and WhatsApp/Meta) — limited to what is necessary to perform the relevant function;
- Between merchant and buyer as needed to complete a transaction;
- Legal compliance where required by law or a valid official request;
- Business transfers in the event of a merger or acquisition, maintaining equivalent protection.
8. Storage & Retention
Data is stored on secure infrastructure for as long as your account is active or as needed to provide the service and meet legal obligations. When no longer needed, data is deleted or reasonably anonymized. Merchants may request deletion of their store data under Section 10.
9. Data Security
We apply reasonable technical and organizational measures to protect data, including encryption in transit, access controls, and security monitoring. No system is entirely risk-free; we encourage you to keep your account credentials confidential.
10. Your Rights
Subject to the PDP Law, you have the right to:
- Access and obtain a copy of your personal data;
- Correct inaccurate data;
- Request deletion ("right to be forgotten") within legal limits;
- Restrict or object to certain processing, including withdrawing consent;
- Request data portability.
To make a request, contact us at privacy@bukatoko.id. If your request concerns data collected by a merchant's store, we will forward it to the relevant merchant as the data controller.
11. Children's Privacy
Our services are intended for adult business owners. We do not knowingly collect data from minors. If you believe a child has provided us with data, please contact us so we can take appropriate action.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will communicate material changes through the website or other appropriate channels. The "last updated" date at the top indicates the latest version.
13. Contact
If you have questions about this Privacy Policy or wish to exercise your rights, contact:
Akses Digital Indonesia
Email: privacy@bukatoko.id
General: halo@bukatoko.id
Jakarta, Indonesia