Privacy Policy

This Privacy Policy establishes the comprehensive legal framework under which Kult acts as a Data Controller in collecting, processing, and safeguarding the personal data of our patrons and website visitors. Recognizing the inherent fiduciary obligation associated with data handling, this policy is meticulously drafted to ensure strict compliance with the statutory requirements of the Republic of Indonesia, notably Law Number 27 of 2022 concerning Personal Data Protection. By engaging with our digital infrastructure, utilizing our reservation systems, or otherwise interacting with our services, you hereby provide explicit, informed consent to the data processing methodologies stipulated within this binding document.

In the course of delivering premium hospitality services, we systematically acquire both personally identifiable information and non-identifiable technical data. The personal data voluntarily submitted by users—encompassing full legal names, contact credentials, and specific dietary stipulations—is processed under the lawful basis of fulfilling a contractual obligation, specifically the facilitation of dining reservations and service delivery. Concurrently, our servers autonomously log technical metrics, including internet protocol addresses, browser configurations, and navigational telemetry, which are processed under the doctrine of legitimate interest to optimize system architecture, audit security protocols, and enhance the digital user experience.

Kult maintains a stringent prohibition against the unauthorized monetization, dissemination, or commercial exploitation of your personal data. We implement advanced cryptographic protocols and robust organizational security measures designed to mitigate the risks of unauthorized access, accidental loss, or unlawful alteration of data. Disclosure of personal information to third parties is strictly confined to vetted operational processors—such as secure payment gateways or reservation management infrastructure—under binding non-disclosure agreements. Furthermore, data may be disclosed when legally compelled by a valid subpoena, court order, or formal mandate from Indonesian regulatory authorities acting within their legally prescribed jurisdiction.

In absolute alignment with prevailing data protection jurisprudence, individuals retain fundamental rights over their personal information. You possess the definitive right to request comprehensive access to your data portfolio, mandate the rectification of factual inaccuracies, and exercise the right to erasure subject to overriding legal or accounting retention mandates. Personal data is retained strictly for the duration necessary to satisfy the original purposes of collection or as mandated by Indonesian corporate and tax retention schedules, after which it is subject to secure, irreversible destruction. To initiate a statutory data request or to withdraw consent, individuals are directed to submit formal correspondence to our designated privacy compliance channels.

Kult employs advanced tracking technologies, including cookies, web beacons, and pixel tags, to conduct comprehensive analytics and streamline the digital interface. These digital markers are deployed to remember user preferences, authenticate sessions, and analyze traffic patterns, thereby contributing to the continuous refinement of our online platforms. Users maintain granular control over these technologies and may configure their web browsers to refuse cookies or to issue alerts when cookies are transmitted; however, we stipulate that such technical restrictions may intentionally or unintentionally impede the full operational functionality of our reservation systems and associated digital services.

Recognizing the dynamic nature of both digital technologies and legislative landscapes, Kult reserves the unilateral right to amend, update, or completely revise this Privacy Policy at our discretion to reflect evolving operational realities or new statutory obligations. Any substantive modifications to our data processing methodologies will be communicated through a prominent notification on our digital platforms prior to the effective date of the changes. Continued engagement with our services subsequent to the implementation of such revisions shall be legally construed as your affirmative acceptance of the newly amended privacy framework.