Who controls your data
The controller for personal data collected through this website is PT Acala Genesa Sumberdaya, trading as ACALA (“ACALA”), which operates this website as MinexCoal, of South Quarter Tower A, 18th Floor, Unit G&F, Jl. R.A. Kartini Kav 8, Cilandak Barat, Jakarta Selatan 12430, Indonesia.
Contact for any privacy matter: privacy@minexcoal.com.
What we collect
Only two things through the site itself. The WhatsApp button is a separate channel, and it is covered below.
Information you send us
When you complete the enquiry form or email us, we receive your name, company, work email address, the enquiry type you select, and whatever context you choose to write in the message field. Please do not put confidential mine data, credentials, or anyone else’s personal details in that field.
Technical information
Our hosting provider records standard server logs: IP address, date and time of request, page requested, referring page, and browser user-agent string. These are generated automatically by the act of visiting any website and are used for security and troubleshooting.
We run Google Analytics 4 to count which pages are read — loaded only after you accept it on the cookie banner. No advertising pixels, session recording or social media widgets on this site. We do not build profiles, and we do not sell or rent personal data to anyone, ever.
Enquiries by WhatsApp
The green button on every page opens a conversation with +62 852-1234-3631, a WhatsApp Business account operated by ACALA’s administrative staff on a company-owned device. Three things follow from that, and they are worth knowing before you send the first message.
- Your phone number reaches us with the first message. It is personal data, and it arrives together with whatever display name and profile photo your WhatsApp account is set to. Using the button is optional — the enquiry form and hello@minexcoal.com reach the same people.
- The conversation travels through Meta. WhatsApp is operated by Meta, which carries the message and keeps its own record of the exchange under its own terms — terms that apply to you as a WhatsApp user, not only to us. We control what lands in our account. We do not control Meta’s record of it, and we cannot delete that on your behalf.
- Send the question, not the data. The rule is the same one that applies to the enquiry form: no borehole data, model files, credentials, or anyone else’s personal details. If a file needs to reach us, we will set up a route built for it.
We keep a conversation for three months from its last message, then delete the thread — the same period that applies to an enquiry arriving by any other route, so the channel you choose does not change how long we hold it. Where an enquiry becomes an engagement, the correspondence that matters moves into the project record and is kept under the client-correspondence row in How long we keep it.
Access is limited to the administrative staff who operate the account. The device belongs to the company, which is what makes that limit enforceable — a consultant’s personal phone is not used for this channel.
Why we use it, and on what legal basis
| Data | Purpose | Basis |
|---|---|---|
| Enquiry form and email content | Reply to you, prepare a quotation, and carry out an engagement if one follows | Steps taken at your request prior to entering a contract, and performance of that contract |
| WhatsApp number and conversation | Answer the question you asked, and prepare a quotation if one follows | Steps taken at your request prior to entering a contract |
| Contact details of an existing client | Deliver and administer the services agreed | Performance of a contract |
| Server logs | Keep the site available and secure, investigate abuse | Our legitimate interest in operating a secure website |
| Invoicing and correspondence records | Meet tax, accounting and record-keeping duties | Compliance with a legal obligation |
We do not send marketing email unless you have asked us to. If we ever introduce a newsletter, it will be opt-in and every message will carry a one-click unsubscribe.
Google Fonts
In the interest of being straight with you about a detail most privacy policies omit: this site loads its typeface from Google Fonts. That means your browser makes a request to fonts.googleapis.com and fonts.gstatic.com, and Google receives your IP address and user-agent as part of that request. Google states that Fonts requests are not used for advertising or profiling, but the request does leave your browser and we cannot control what Google does with it.
If you would prefer this not to happen, we can self-host the font files so no third-party request is made. Tell us at privacy@minexcoal.com and we will treat it as a request worth acting on.
International transfers
Our providers may process data outside your country. Where that happens we rely on an adequacy decision, standard contractual clauses, or an equivalent lawful transfer mechanism. You can ask us which applies to a particular provider.
How long we keep it
| Record | Kept for |
|---|---|
| Enquiries that do not lead to an engagement | 3 months after the last contact — form, email and WhatsApp alike — then deleted |
| Client correspondence and project records | Duration of the engagement plus 6 years |
| Invoices and accounting records | As required by tax law in Indonesia |
| Server logs | 90 days |
Security
The site is served over HTTPS. Access to enquiry data is limited to the people who need it, protected by unique accounts and multi-factor authentication where the provider supports it. We keep devices patched and encrypted.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you — without undue delay.
Your rights
Depending on where you are, you may have the right to:
- Access the personal data we hold about you, and receive a copy.
- Correct data that is inaccurate or incomplete.
- Delete data where we no longer have grounds to keep it.
- Restrict or object to processing based on legitimate interests.
- Portability — receive your data in a structured, machine-readable form.
- Withdraw consent at any time, where consent was the basis.
- Complain to a supervisory authority.
These rights are recognised under the EU and UK General Data Protection Regulation, and under Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) for individuals in Indonesia. We apply them to everyone who asks, regardless of location.
To exercise any of them, email privacy@minexcoal.com. We respond within 30 days and will not charge you for a reasonable request.
Client project data
Data you give us to work on — borehole databases, models, designs, schedules — is generally not personal data. Where it does contain personal data, such as the names of surveyors or logging geologists in a record, we act as your processor, not as controller. We process it only on your documented instructions, keep it confidential, and return or delete it at the end of the engagement as you direct.
That relationship is governed by the confidentiality provisions in our Terms & Conditions and by any separate data processing agreement we sign with you.
Children
This is a business-to-business site. It is not directed at children and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, tell us and we will delete it.
Governing language
This policy is published in Indonesian and English. Both versions are intended to carry the same meaning.
Where the two versions differ, the Indonesian version governs and is the binding text. The Indonesian version is at id/privacy.html; this English version is provided as a translation.
This follows Law No. 24 of 2009 on the Flag, Language, Emblem and Anthem, which requires agreements involving an Indonesian party to be made in Indonesian.
Changes to this policy
If we change this policy we update the date at the top of the page. Where a change materially affects how we handle data already collected, we will contact affected individuals directly rather than relying on this page alone.
Contact & complaints
Privacy enquiries: privacy@minexcoal.com, or write to ACALA, South Quarter Tower A, 18th Floor, Unit G&F, Jl. R.A. Kartini Kav 8, Cilandak Barat, Jakarta Selatan 12430, Indonesia.
If you are not satisfied with our response, you may complain to the supervisory authority in your country — in Indonesia, the authority designated under Law No. 27 of 2022; in the EU or UK, your national data protection authority.
See also our Terms & Conditions and Disclaimer.