Privacy Policy

1. Introduction

Rimba Nilaitama ("we", "us", or "our") is committed to protecting the privacy of individuals who use our website and services. This Policy describes the types of information we may collect, how we use that information, and the choices available to you. By using our website or services, you agree to the practices described in this Policy. If you do not agree, please do not use our services.

2. Information We Collect

We may collect the following categories of information:

• Information you provide directly — such as your name, email address, financial goals, household information, and other details you submit when creating an account, requesting an analysis, or contacting us.
• Usage data — including pages visited, time spent on the site, referring URLs, browser type, device information, and general location data derived from IP address.
• Cookies and similar technologies — small data files stored on your device to support site functionality, preferences, and analytics (see Section 6 below).
• Communications — records of correspondence if you contact us via email, contact forms, or other channels.

3. How We Use Your Information

We use collected information for purposes that may include:

• Providing, operating, and maintaining our website and analysis tools;
• Generating risk assessments, projections, and portfolio guidance based on information you supply;
• Responding to inquiries, support requests, and feedback;
• Improving site functionality, content, and user experience;
• Sending administrative communications, such as updates to this Policy or our Terms of Service;
• Detecting, preventing, and addressing technical issues, fraud, or misuse of our services;
• Complying with applicable legal obligations.

We do not sell personal information to third parties.

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, we rely on one or more of the following: your consent, the necessity of processing to perform a contract with you, our legitimate interests in operating and improving our services, and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

5. How We Share Information

We may share information with:

• Service providers who perform functions on our behalf, such as hosting, analytics, and customer support, subject to confidentiality obligations;
• Professional advisors, including legal and compliance consultants, where necessary;
• Regulatory or law enforcement authorities, where required by applicable law or to protect our rights, property, or safety, or that of others;
• Successors in the event of a merger, acquisition, or sale of assets, subject to appropriate confidentiality arrangements.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to recognise your browser, remember preferences, and understand how our site is used. You can configure your browser to refuse cookies or alert you when cookies are being sent. However, some parts of our website or services may not function properly without cookies. Where required by applicable law, we will seek your consent before placing non-essential cookies on your device.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we will take reasonable steps to securely delete or anonymise it.

8. Data Security

We implement reasonable administrative, technical, and organisational measures designed to protect personal information from unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

If you access our services from outside the jurisdiction in which our servers or service providers are located, your information may be transferred across international borders. Where such transfers occur, we will take steps intended to ensure appropriate safeguards are in place as required by applicable law.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, which may include the right to access, correct, delete, restrict, or object to processing, and the right to data portability. To exercise any of these rights, please contact us using the details on our Contact page. We will respond to verified requests within the timeframe required by applicable law.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete it.

12. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by a revised "Last updated" date. We encourage you to review this Policy periodically.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out via the details provided on our Contact page.