Skip to main content

Privacy Policy

How Dala Institute collects, uses and protects personal data in line with applicable data protection law

Last updated: 13 August 2026

1. Who we are

Dala Institute is a research and consulting organisation operated by:

  • PT DALA RISET GLOBAL — Jl. Bumi Ayu, Gang Pungut Sari No.6, Sindu Kelod, Sanur, Denpasar Selatan, Bali 80228, Indonesia (NIB: 9120006421182)

In this policy, "we", "us" and "our" refer to PT DALA RISET GLOBAL, the data controller for personal data submitted through this website. For general enquiries: [email protected].

2. What data we collect

Depending on how you use this website, we may collect:

  • Contact and enquiry data — name, email address, message content, and the subject of your enquiry when you submit a contact or application form.
  • Recruitment and roster data — information you provide when applying for a role or registering on our consultant roster.
  • Technical data — IP address, browser type, device information, and similar log data collected automatically when you visit our site.
  • Security data — signals processed by Cloudflare Turnstile to help us detect automated or abusive form submissions. We do not use Turnstile for advertising or cross-site tracking.

We do not intentionally collect special category data (such as health or ethnicity) through this website. Please do not include such information in free-text fields unless it is necessary for your enquiry.

3. How we use your data and our legal bases

We process personal data only where we have a lawful basis under applicable data protection law (including Indonesia's UU PDP and, where it applies, EU GDPR), including:

  • Legitimate interests — to respond to enquiries, manage recruitment, maintain our consultant roster, protect our website from abuse, and improve our services, balanced against your rights.
  • Contract — where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you.
  • Legal obligation — where we must retain or disclose information to comply with law.
  • Consent — where you have given clear consent, for example where required for optional communications. You may withdraw consent at any time.

4. How we share data

We do not sell your personal data. We may share it with:

  • Service providers who host our website, deliver email, or provide security tools (including Cloudflare Turnstile), under data processing terms.
  • Professional advisers where reasonably necessary (for example lawyers or accountants).
  • Authorities if required by law or to protect our legal rights.

Personal data submitted through this website is processed in Indonesia by PT DALA RISET GLOBAL. Where EU GDPR additionally applies to a transfer of personal data, we rely on Standard Contractual Clauses or equivalent mechanisms to ensure appropriate safeguards.

5. Retention

We keep personal data only for as long as needed for the purposes described above, including:

  • Enquiry records — typically up to 24 months after our last meaningful contact, unless a longer period is needed for ongoing work or legal reasons.
  • Recruitment and roster records — for the duration of the recruitment process or roster relationship, plus a reasonable period thereafter for compliance and re-contact where permitted.
  • Server and security logs — for a limited period necessary for security and troubleshooting.

6. Cookies and similar technologies

This website uses essential cookies and similar technologies required for security and basic site operation, including cookies set by Cloudflare for bot protection (Turnstile) and CDN operation. We do not use advertising or third-party analytics cookies on this site at present. You can control cookies through your browser settings; disabling essential cookies may affect form submission and site security features.

7. Your rights

Under applicable data protection law, you may have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure in certain circumstances.
  • Request restriction of processing in certain circumstances.
  • Object to processing based on legitimate interests.
  • Request data portability where processing is based on consent or contract and is automated.
  • Withdraw consent at any time, where processing is based on consent.
  • Lodge a complaint with a supervisory authority.

In Indonesia, you may contact the relevant data protection authority under UU PDP. If you are in the EU, you may contact your local data protection authority.

To exercise your rights, email [email protected]. We will respond within one calendar month. We may need to verify your identity before responding.

8. Children

This website is not directed at children under 16, and we do not knowingly collect their personal data.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect the latest version.