Privacy Policy

1. General Provisions

PT Lintas Network Solusi ("LNS", "We", "Us") is fully committed to respecting and protecting the personal data and privacy of every user, customer, and visitor of our website ("You"). This Privacy Policy is designed to explain how we collect, use, store, and disclose your personal data in connection with the provision of Internet Service Provider (ISP) services and our integrated digital solutions ecosystem.

This policy is structured based on the applicable regulations in the Republic of Indonesia, especially **the Personal Data Protection Law (Law No. 27 of 2022 concerning PDP)** and derivative regulations from the Ministry of Communication and Digital Affairs as well as the National Cyber and Crypto Agency (BSSN). By using our services, you state your agreement to the data collection and processing practices outlined in this document.

2. Types of Data We Collect

To provide reliable internet access and other value-added services, we collect the following categories of personal data:

A. Account Registration & Identity Information

Information you voluntarily provide when applying for installation or service registration:

• Full Name (according to Official Identity Card/KTP/Passport).
• Installation Address and Billing Address.
• Active Contact Number (Phone/WhatsApp) and Email Address.
• Identity verification documents (Copy of KTP for individual customers or corporate legality documents for Enterprise services).

B. Network Usage & Technical Telemetry Data

When you connect to the LNS network infrastructure, we collect the technical data necessary for data routing and maintaining system stability:

• The public IP (Internet Protocol) address allocated to your modem/router device.
• Data usage volume (bandwidth consumption) for quota reporting and transmission quality purposes.
• Basic network connection logs (start/end connection timestamps, session duration).
• **Important Note**: In accordance with the principles of network neutrality and the PDP Law, we **DO NOT** record or store communication content, browsing history of websites you visit, or the *payload* of your online activities unless explicitly required by state law through a formal court order.

C. Payment and Financial Data

Transaction data for your monthly service billing:

• Monthly payment transaction history.
• Debit/credit card details or encrypted bank account data securely processed during payment (if processed through our partner payment gateways).

3. How We Use Your Information

All processing of your personal data is carried out to achieve the following operational and compliance objectives:

• **Service Provision**: Installing, activating, and operating your internet connectivity (Broadband, SOHO, Corporate) and IT infrastructure services.
• **Maintenance & Technical Support**: Monitoring network quality in real-time, detecting disruptions, and processing technical issue tickets through our NOC team.
• **Administration & Billing**: Sending monthly invoices, validating payment transactions, and sending official notifications regarding service changes.
• **Cybercrime Prevention**: Identifying cyberattacks (DDoS, hacking), blocking malware-infected devices spreading botnets to protect the public network, and preventing financial frauds.
• **Legal Compliance**: Fulfilling sectoral reporting and regulatory obligations from authorized government agencies in the telecommunications sector.

4. Security & Data Storage Locations

We implement enterprise-grade cybersecurity standards to protect your personal data from unauthorized access, disclosure, alteration, or destruction without permission:

• **Local Storage**: All personal data and transaction databases are stored on isolated servers located in a **local Tier-3 Data Center in Indonesia**, guaranteeing national personal data sovereignty.
• **Encryption Protocols**: Sensitive data is encrypted both when transmitted across networks (*data-in-transit*) using secure SSL/TLS protocols, and when stored (*data-at-rest*).
• **Strict Access Control**: Only specific internal LNS NOC, IT Administration, and Billing personnel have access to customer databases, strictly controlled via multi-factor authentication (MFA) and their audit logs monitored in real-time.

5. Disclosure to Third Parties

LNS **NEVER** sells, rents, barters, or trades our customers' personal data to third parties for advertising or other commercial purposes.

Disclosure of customer information can only occur in the following specific situations:

• **Supporting Service Providers**: To local LNS field installation subcontractors or trusted billing payment gateways, specifically to process physical device delivery or billing payment processing.
• **Law Enforcement Obligations**: Upon an official written request based on law from the police authorities, the Prosecutor's Office, KPK, or an official court under applicable laws in Indonesia related to the investigation of specific cyber legal cases.

6. Network Log & Retention Policy

As an Internet Service Provider (ISP) network operator, we are subject to strict data retention regulations from the Ministry of Communication and Information:

• **DHCP & Routing Logs**: Public IP address allocation logs (DHCP Logs) and basic connectivity timestamps are retained for a **minimum of 3 (three) months** up to a maximum of 1 (one) year to comply with national communication security regulations.
• **Active Customer Data**: As long as you are bound by an active internet subscription contract with us, your profile registration data will be kept intact.
• **Inactive Customer Data**: When your contract expires or the service is terminated, your identity data will be securely archived or anonymized (identity links removed) after the mandatory administrative waiting period has passed.

7. Data Subject Rights

In accordance with the constitutional rights of personal data subjects set out in the Indonesian PDP Law, you have the right to:

• Access and obtain a copy of your personal data managed by us.
• Request correction or updates to your personal data that is inaccurate or outdated.
• Request deletion (*right to be forgotten*) or withdrawal of consent for the processing of your personal data after the official internet subscription contract period has officially ended.
• Object to the processing of certain personal data for non-essential administrative/technical purposes.

8. Complaints Service & DPO Contact

If you have questions, concerns related to personal data protection, wish to process your right of access to correction/deletion of your data, or wish to file an official cyber privacy complaint, you can contact the internal **Data Protection Officer (DPO)** of PT Lintas Network Solusi through the following communication channels:

• **Email Address**: info@lintasnetwork.net (Subject: "Attn: Personal Data Protection DPO")
• **Head Office**: Prismatiq Business Loft Blok A3 No 9, Desa Sindang Jaya, Kec Sindang Jaya, Kabupaten Tangerang, Banten 15560
• **Alternative Complaint Channel**: Contact our official Customer Service at 085183069334 or 088242888999.