Privacy Policy

Last updated: 1 March 2026

This document explains how PT. Honda Precision Parts Manufacturing ("we," "us," or "our") collects, uses, discloses, stores, protects, and processes Personal Data through the website hppm.co.id and related online services (collectively, the "Site"). We are committed to complying with applicable laws and regulations concerning personal data protection.

1. Scope

This Notice applies to visitors, contact form users, job applicants, potential customers, and other parties who interact through the Site. Specific provisions may apply to certain services/portals and will be notified separately where relevant.

2. Data Controller

1. Entity name: PT. Honda Precision Parts Manufacturing
2. Office address: Kota Bukit Indah, Indotaisei Industrial Estate, Sector 1A, Block S, Kalihurip, Cikampek, Karawang 41373, West Java, Indonesia.
3. Privacy contact email: privacy@hppm.co.id
4. Telephone number: 0264-350380

If we act as a processor on behalf of a third party, processing will follow the instructions of the relevant data controller.

3. Categories of Personal Data We Collect

1. Data you provide directly

   • Basic identity: name, position, company, country/city
   • Contact: email, telephone number
   • Correspondence data: messages/forms you submit, attachments
   • Recruitment (if applying): CV, employment history, education, certifications

2. Data collected automatically

   • Device & log data: IP address, browser type, device identifiers, operating system
   • Usage data: pages visited, time of visit, referrer, clicks
   • Cookies & similar technologies: essential, preference, analytics, and (optional) marketing cookies

3. Data from third-party sources (if any)

   • Recruitment recommendations/references
   • Analytics platforms, form providers, or social media (in accordance with their permissions and policies)

   Note: Please do not submit sensitive data (e.g., health data, biometric data, beliefs, etc.) unless we specifically request it and provide a clear legal basis.

4. Purposes of Processing & Legal Basis

We process Personal Data for the following purposes (with the appropriate legal basis):

1. Provision and operation of the Site
   Basis: performance of legitimate interests to provide reliable and secure services.
2. Responding to inquiries & correspondence
   Basis: performance of pre-contractual/contractual relationship obligations, or legitimate interests in customer service.
3. Marketing & business communications (e.g., newsletters, event invitations)
   Basis: your consent; you may withdraw consent at any time.
4. Recruitment & candidate management
   Basis: pre-contractual steps, legitimate interests, and/or consent (as required).
5. Analytics, UX improvement, and Site performance measurement
   Basis: consent (for non-essential cookies) and/or legitimate interests (aggregated analytics).
6. Security & abuse prevention
   Basis: legal compliance and legitimate interests in maintaining system integrity.
7. Regulatory compliance & rights enforcement
   Basis: legal obligations, establishment or defense of legal claims.

5. Cookies & Similar Technologies

Our Site uses essential cookies to ensure the website functions properly and provides a smooth browsing experience. These cookies do not store personal data that can directly identify you. By continuing to use our Site, you agree to the use of these simple cookies to improve access convenience.

6. Sharing of Personal Data

We may share Personal Data with:

• Service providers/processors: hosting, CDN, email, analytics, forms, security.
• Affiliates & group companies: for internal operational needs.
• Government authorities/law enforcement: where required by law.
• Third parties in corporate transactions (e.g., merger/acquisition), with appropriate safeguards.

All third parties are bound by appropriate data processing agreements and confidentiality obligations.

7. Cross-Border Transfers

Data may be processed/transferred to jurisdictions outside Indonesia. We will ensure equivalent protection through relevant legal mechanisms (e.g., data transfer agreements, contractual safeguards, and transfer impact assessments where required), as well as notification to regulators when required.

8. Retention Period

We retain Personal Data only for as long as necessary to achieve the processing purposes or as required by law. After the retention period ends, data will be securely deleted, anonymized, or archived.

Examples:

• Contact form data: 12–24 months
• Recruitment data: 24 months (unless consent is given for longer retention)
• Aggregated analytics data: as needed for non-personal statistical purposes

9. Information Security

We implement reasonable technical and organizational controls (e.g., encryption in transit, role-based access controls, logging, hardening, vulnerability testing, employee training, vendor management) to protect Personal Data from unauthorized access, loss, or misuse. However, no system is completely secure; residual risk remains. In the event of a Personal Data Protection failure, we will provide written notification to the Personal Data Subject and/or the competent authority in accordance with applicable legal requirements. Such notification will at least include the type of Personal Data affected, the time and manner of the incident, and the handling and recovery measures we have taken.

10. Your Rights over Personal Data

Depending on applicable law, you may have the following rights:

• Access to your Personal Data
• Correction of inaccurate data
• Deletion (right to be forgotten)
• Restriction of processing
• Objection to certain processing
• Data portability
• Withdrawal of consent (effective going forward, without affecting processing that has already occurred)

To exercise your rights, please contact us using the details in Section 2. We will respond within the applicable timeframe and may request identity verification.

11. Children’s Privacy

The Site is not intended for children under the age of 18. We do not knowingly collect children’s Personal Data without valid consent from a parent/guardian. If you believe we have collected children’s data without a legal basis, please contact us for deletion.

12. Links to Third-Party Sites

The Site may contain links to third-party sites. We are not responsible for their privacy practices. Please read the privacy policy of each respective site.

13. Changes to This Privacy Notice

We may update this notice from time to time. Material changes will be notified through the Site or by email (where relevant). The "Last updated" date indicates the current version.

14. How to Contact Us

For questions, data subject rights requests, or complaints:

• Email: privacy@hppm.co.id
• Address: Kota Bukit Indah, Indotaisei Industrial Estate, Sector 1A, Block S, Kalihurip, Cikampek, Karawang 41373, West Java, Indonesia.
• Privacy Team: Data Governance Committee - GPP

If our response is not satisfactory, you may submit a complaint to the competent authority in accordance with applicable law.

HPPM Data Governance Committee