This Privacy Policy was last updated on September 29, 2025.

This Privacy Policy explains how TOLA Solutions (“TOLA”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you visit our website, communicate with us, subscribe to our updates, or become our client. By using our site or services, you agree to this Policy.

1. Who We Are & Scope

TOLA Solutions is a technology partner providing custom software, web and mobile development, analytics/BI, UI/UX, and digital marketing services to global clients. This Policy applies to data we process through our website and in connection with our sales, support, and project delivery activities.

• Controller: TOLA Solutions
• Contact: tolasolutions.tech@gmail.com, +62-813-8939-6434
• Address: Bali, Indonesia (operating globally)
• Not intended for children under 13 (or under 16 where applicable).

2. What Data We Collect

We collect the minimum data necessary to operate our website, respond to inquiries, deliver projects, and improve our services. The categories below depend on your interaction with us.

• Identifiers & contact details: name, email, phone, company, role, country/region.
• Business context: project briefs, requirements, design assets you share, meeting notes, contractual information (e.g., billing contact, tax details).
• Marketing preferences: newsletter subscription status, topic interests.
• Usage & device data: pages viewed, interactions, approximate location, IP address, device/browser info, referral/UTM data, timestamps (collected via cookies or similar technologies).
• Support communications: emails, messages, and attachments you send to us.
• Recruitment (if you apply): CV/resume, portfolio links, professional history, references (where provided lawfully).

3. How We Collect Data

• Directly from you: forms, email, calls, meetings, proposals, statements of work.
• Automatically: cookies, pixels, and analytics tools that log usage and performance.
• From third parties: referrals, publicly available business sources, or tools you connect (e.g., calendar, file-sharing or task systems used in a project).

4. Why We Use Your Data

1. Provide, operate, and secure our website and services.
2. Respond to inquiries, schedule demos, and prepare proposals.
3. Perform contracts and deliver projects, support, maintenance, and invoicing.
4. Improve quality, performance, and user experience (analytics, diagnostics).
5. Send service, transactional, and administrative messages.
6. Send marketing communications where permitted (you can opt out).
7. Comply with legal obligations and enforce our agreements.

Legal bases (where applicable): consent, contract performance, legitimate interests, and legal obligations.

5. Cookies & Similar Technologies

We use strictly necessary cookies (for core site functionality), and may use analytics and performance cookies to understand site usage. If enabled, we may also use marketing pixels to measure campaign effectiveness. You can control cookies in your browser settings; disabling some may affect site functionality.

6. How We Share Information

We do not sell personal information. We share data only as needed to operate our business and provide services, or when required by law.

• Service providers (processors): hosting and cloud infrastructure, analytics, error monitoring, email and newsletter platforms, communication and project tools, file storage, and invoicing/accounting systems.
• Professional advisors and auditors, under confidentiality.
• Legal and compliance: to comply with applicable law, lawful requests, or to protect our rights, users, or the public.
• Business transfers: in a merger, acquisition, or asset sale, subject to safeguards.

7. International Transfers

We operate globally. Your data may be processed in countries with different data-protection standards. Where required, we implement appropriate safeguards (e.g., contractual clauses) to protect your information.

8. Data Retention

We keep personal data only for as long as necessary for the purposes described above, including to meet legal, tax, or accounting requirements. Typical periods: marketing leads up to 24 months from last interaction; support emails and project records for the life of the engagement plus a reasonable period; site logs generally up to 12 months unless needed longer for security or legal reasons.

9. Security

We apply reasonable administrative, technical, and physical safeguards to protect personal data. No system is 100% secure; please use caution when transmitting information online.

10. Your Rights & Choices

• Access, correction, deletion, and portability of your personal data where applicable.
• Object to or restrict processing where permitted by law.
• Withdraw consent at any time for processing based on consent.
• Opt out of marketing by using the unsubscribe link in our emails.
• Manage cookies via your browser or device settings.

Residents of certain regions (e.g., the European Economic Area/UK and California) may have additional rights under local law.

11. Regional Notices

• Indonesia (PDP Law): If you are in Indonesia, you may request access, correction, deletion, and cessation of processing as provided by law.
• EEA/UK (GDPR/UK GDPR): We rely on lawful bases including consent, contract, legitimate interests, and legal obligation; you may have rights to access, rectify, erase, restrict, object, and data portability.
• California (CCPA/CPRA): We do not sell or share personal information as defined by CPRA. You may have rights to know, delete, correct, and opt out of sale/sharing and certain profiling.

12. Children's Privacy

Our site and services are not directed to children under 13 (or under 16 where applicable), and we do not knowingly collect personal data from them. If you believe a child provided personal data, please contact us so we can delete it.

13. Third-Party Links

Our website may contain links to third-party sites or integrations. Their privacy practices are governed by their own policies.

14. Changes to This Policy

We may update this Policy to reflect changes in our practices, technology, or legal requirements. We will post the updated version with a new "last updated" date. Material changes may be communicated by additional notice.

15. How to Contact Us

Questions or requests about privacy? Email tolasolutions.tech@gmail.com or call +62-813-8939-6434.