Privacy Policy

Last Updated: August 7, 2026

Introduction
Who We Are & How to Contact Us
Changes to This Privacy Policy
What Personal Information We Collect
Cookies & Similar Technologies
How We Use Your Personal Information
Legal Bases for Processing (Where Applicable)
How We Disclose Personal Information
International Data Transfers
Data Security
Data Retention
Your Rights
User-Generated Content
Third-Party Websites and Links
Children's Data
How to Contact Us

1. Introduction

This Privacy Policy describes how PT Sumberdaya Kuda Asia (trading as "ERI Saddlery") ("ERI Saddlery", "we", "us", "our") collects, uses, and discloses your personal information when you visit or use store.eri.co.id (the "Site"), visit our physical retail store, make a purchase, or otherwise communicate with us (collectively, the "Services").

"You" means the user of the Services, whether a customer, website visitor, or other individual whose personal information we process.

By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

2. Who We Are & How to Contact Us

ERI Saddlery is operated by PT Sumberdaya Kuda Asia, which acts as the controller of your personal information.

Trading Name: ERI Saddlery
Email: [email protected]
Address: Fidelitas Building, Jl. Wolter Monginsidi No.61C 1st Floor, Kota Jakarta Selatan, DKI Jakarta 12180, Indonesia

3. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, operations, or legal and regulatory requirements. Updates will be posted on this page with a revised "Last Updated" date. Where required by law, we will take additional steps to notify you of material changes.

4. What Personal Information We Collect

4.1 Information You Provide Directly

Basic contact details: full name, billing and delivery address, email address, telephone or mobile number
Order and transaction details: products purchased, order history, payment confirmations, delivery preferences, returns and exchanges
Account information: email address, password and authentication credentials (stored in encrypted/hashed form), saved addresses, wishlist and preferences — you may also sign in using your Google account, in which case we receive your name and email address from Google
Customer support & communications: the content of messages you send us via email, contact forms, WhatsApp, social media, or in store
Reviews & user-generated content: any product reviews or other content you choose to submit publicly, including photos
Returns: if you request a return, the item(s), reason, supporting photos/videos, and — if your return is approved — the bank account details (bank name, account name, account number) you provide so we can issue your refund

Payment information: We use Xendit, a trusted third-party payment processor, to handle payment card and banking information securely. ERI Saddlery does not store full payment card numbers on its own servers. Bank account details you provide specifically for a return refund are the exception — these are stored on our servers so our team can process the transfer to you.

4.2 Information Collected at Our Physical Retail Store

When you visit our physical store, we may collect:

In-store purchase records, which may be linked to your customer account
Customer service interactions
CCTV footage, used strictly for security, safety, and loss prevention purposes

4.3 Information Collected Automatically (Cookies & Similar Technologies)

When you visit or interact with our Site, we automatically collect Usage Data, which may include:

Device type, browser type and version
Operating system
IP address
Time zone and language
Cookie identifiers
Referring and exit pages
Interactions with pages, products, and features

We collect this data using cookies, log files, and pixels/tags, such as Google Analytics and the Meta (Facebook) Pixel, which we use to measure and improve our marketing. See "Cookies & Similar Technologies" below for more information.

4.4 Information from Third Parties

We may receive personal information from third parties, including:

Our website hosting and infrastructure providers
Xendit, our payment service provider (payment confirmations and limited transaction metadata)
Biteship, our shipping and logistics partner (delivery rates and status updates)
Olsera, our inventory and order management system (order and customer records are synced here to fulfil your order)
Analytics and advertising partners, such as Google and Meta (for measurement and marketing performance)
Supabase, our account authentication and database provider
Google, if you choose to sign in with your Google account
Cloudinary, our image hosting provider (photos you upload for reviews or returns)
Our WhatsApp messaging provider, used to send account verification codes and order updates to the phone number you provide

5. Cookies & Similar Technologies

We use cookies and similar technologies to:

Operate the Site and enable essential functionality
Measure performance and understand how customers interact with our Services
Improve user experience and site design
Deliver personalised content and marketing

You can manage cookies through your browser settings. Please note that disabling cookies may affect certain Site features.

6. How We Use Your Personal Information

We use personal information to:

Provide and fulfil the Services: process orders and payments, arrange delivery, manage returns and exchanges, maintain customer accounts, and enable product reviews
Customer service and communications: respond to enquiries, provide support, and communicate service-related updates
Security and fraud prevention: detect, investigate, and prevent fraud, misuse, and unauthorised access
Analytics and service improvement: understand customer preferences and improve our products, digital platforms, and retail experience
Marketing and brand communications: send curated updates, product releases, and exclusive invitations, where permitted by law and consent
Legal and regulatory compliance: meet tax, accounting, and legal obligations and respond to lawful requests from authorities

7. Legal Bases for Processing (Where Applicable)

Where applicable data protection laws apply, we process personal information on the basis of:

Performance of a contract
Legitimate business interests (such as security, fraud prevention, analytics, and direct marketing)
Consent (for certain marketing communications and cookies)
Compliance with legal obligations

8. How We Disclose Personal Information

We may disclose personal information in the following circumstances:

Service providers and vendors: including our payment processor (Xendit), shipping partner (Biteship), inventory and order management system (Olsera), authentication and database provider (Supabase), image hosting provider (Cloudinary), our WhatsApp messaging provider, hosting providers, and analytics and marketing platforms (e.g. Google, Meta)
Business and operational partners: where necessary to deliver our Services or support brand communications, subject to appropriate safeguards
Legal and regulatory authorities: where required to comply with applicable laws, regulations, or lawful requests
Corporate transactions: in connection with a merger, acquisition, restructuring, or sale of assets

We do not sell personal information.

9. International Data Transfers

We and our service providers may process personal information outside your country of residence. Where required, we implement appropriate safeguards to ensure personal data remains protected in accordance with applicable data protection laws.

10. Data Security

We implement appropriate administrative, technical, and organisational measures designed to protect personal information. While we take data protection seriously, no system can be guaranteed to be completely secure. Customers are encouraged to keep account credentials confidential and notify us immediately of any suspected unauthorised access.

11. Data Retention

We retain personal information only for as long as necessary to:

Provide the Services
Maintain accurate business and transaction records
Comply with legal, tax, and regulatory obligations
Resolve disputes and enforce agreements

CCTV footage is retained for limited periods in accordance with security and legal requirements.

12. Your Rights

Depending on your location and applicable law, you may have the right to:

Access personal information we hold about you
Request corrections or updates
Request deletion of your personal data
Object to or restrict certain processing activities
Withdraw consent for marketing communications

Requests may be submitted using the contact details below. We may need to verify your identity before processing requests.

13. User-Generated Content

Any content you choose to make public (such as product reviews) will be visible to others. We cannot control how third parties may use such publicly available information.

14. Third-Party Websites and Links

Our Site may include links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their policies separately.

15. Children's Data

Our Services are not intended for children, and we do not knowingly collect personal information from children. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.

16. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact:

ERI Saddlery (operated by PT Sumberdaya Kuda Asia)
Fidelitas Building, Jl. Wolter Monginsidi No.61C 1st Floor
Kota Jakarta Selatan, DKI Jakarta 12180
Indonesia

Email: [email protected]
Phone: +62-811-8246-663

By using our Services, you acknowledge that you have read and understood this Privacy Policy.