PRIVACY POLICY
- Last updated: 7 July 2026
PT Kawasan Industri Kendal, operating as Kendal Industrial Park and Kendal Special Economic Zone (“Kendal SEZ”, “KIP”, “we”, “us”, or “our”), respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website, submit an enquiry, request an appointment, apply for a career opportunity, communicate with us, or otherwise interact with our online services.
We process personal data in accordance with applicable laws and regulations of the Republic of Indonesia, including Law No. 27 of 2022 concerning Personal Data Protection and other applicable personal data protection regulations.
Scope of This Privacy Policy
This Privacy Policy applies to personal data processed through:
- the Kendal Industrial Park and Kendal SEZ websites;
- contact and enquiry forms;
- quick appointment and investment enquiry forms;
- career and recruitment submissions;
- email, telephone, and other communications with us;
- events, surveys, or other online interactions organised by Kendal SEZ; and
- other digital platforms that refer or link to this Privacy Policy.
This Privacy Policy does not necessarily apply to third-party websites, platforms, or services that may be accessed through links on our website.
Who We Are
The data controller responsible for the processing of personal data described in this Privacy Policy is:
PT Kawasan Industri Kendal
Kendal Industrial Park / Kendal Special Economic Zone
Jl. Raya Arteri KM 19
Kelurahan Brangsong, Kecamatan Brangsong
Kabupaten Kendal 51371
Central Java, Indonesia
For privacy-related enquiries, please contact us using the details provided in Section 16 of this Privacy Policy.
Personal Data We May Collect
The personal data we collect depends on how you interact with us.
This may include:
- full name;
- email address;
- telephone or mobile number;
- postal or business address;
- nationality, where relevant;
- job title or designation; and
- preferred language of communication.
When you submit an investment enquiry or request an appointment, we may collect:
- company or organisation name;
- job title or position;
- industry or business sector;
- business expansion or relocation plans;
- current operations in Indonesia;
- estimated land requirements;
- electricity, water, gas, and wastewater requirements;
- infrastructure and utility requirements;
- expected operational timeline;
- estimated workforce requirements; and
- other information included in your enquiry.
When you apply for a position, internship, or other career opportunity, we may collect:
- curriculum vitae or résumé;
- employment and professional history;
- educational background;
- qualifications, skills, and certifications;
- current domicile;
- contact details;
- expected or previous remuneration information;
- identification documents, where required;
- references and supporting documents;
- interview records and assessment results; and
- other information voluntarily provided during the recruitment process.
We will only request sensitive or specific personal data where it is relevant, necessary, and permitted under applicable law.
When you access our website, certain information may be collected automatically, including:
- Internet Protocol address;
- browser type and version;
- device type and operating system;
- date and time of access;
- pages visited;
- referring website or source;
- approximate geographic location derived from an IP address;
- website interaction and navigation information; and
- cookie or similar technology identifiers.
We may retain records of communications between you and Kendal SEZ, including enquiries, feedback, meeting requests, emails, telephone conversations, and other correspondence.
How We Collect Personal Data
We may collect personal data:
- directly from you when you complete a form, contact us, submit documents, or communicate with our representatives;
- automatically when you access or use our website;
- from your employer, representative, or organisation;
- from recruitment agencies, professional references, or employment platforms;
- from publicly available sources, professional directories, or company websites; and
- from government institutions, business partners, contractors, or other authorised parties where permitted by applicable law.
Where you provide personal data relating to another individual, you are responsible for ensuring that you have the authority to provide such information and that the individual has been informed about the relevant processing.
How We Use Personal Data
We may process personal data for the following purposes:
To:
- respond to questions, requests, and feedback;
- communicate information about Kendal SEZ;
- arrange meetings, site visits, or appointments; and
- provide relevant information about industrial land, facilities, infrastructure, utilities, incentives, and supporting services.
To:
- understand prospective investors’ and tenants’ business requirements;
- evaluate land, utility, infrastructure, and workforce requirements;
- prepare proposals, presentations, or commercial information;
- facilitate investment discussions and tenant onboarding;
- coordinate with relevant internal departments, authorities, or service providers; and
- support business establishment and operational requirements within Kendal SEZ.
To:
- review and process job or internship applications;
- assess candidates’ qualifications and suitability;
- conduct interviews, assessments, and reference checks;
- communicate recruitment decisions;
- maintain a recruitment database for relevant future opportunities, where permitted; and
- comply with employment and regulatory requirements.
Applicants may request that their information be removed from our recruitment database by contacting us.
To:
- operate, maintain, and secure our website;
- analyse website usage and performance;
- troubleshoot technical issues;
- improve website content, functionality, and user experience;
- detect fraudulent, malicious, or unauthorised activity; and
- generate aggregated or anonymised statistical information.
Subject to applicable law and your communication preferences, we may use your contact information to provide:
- company updates;
- investment information;
- event invitations;
- newsletters;
- information about facilities or services; and
- other relevant business communications.
You may withdraw your consent or unsubscribe from marketing communications at any time.
To:
- comply with applicable laws and regulatory requirements;
- respond to lawful requests from government authorities;
- maintain corporate, financial, and operational records;
- prevent and investigate unlawful activities;
- establish, exercise, or defend legal claims; and
- protect the rights, property, security, and legitimate interests of Kendal SEZ and relevant third parties.
Legal Bases for Processing
Depending on the nature and purpose of the processing, we may process personal data based on:
- your explicit and valid consent;
- the performance of an agreement or steps requested before entering into an agreement;
- compliance with our legal and regulatory obligations;
- the protection of your vital interests or those of another individual;
- the performance of tasks in the public interest or in connection with public services, where applicable; and
- our legitimate interests, provided that such interests are appropriately balanced against your rights and interests.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the consent was withdrawn.
Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
- enable essential website functionality;
- remember user preferences;
- maintain website security;
- measure website traffic and performance;
- understand how visitors interact with our website; and
- improve our content and digital services.
Some cookies are necessary for the website to operate, while analytics or marketing cookies will be used in accordance with applicable consent requirements.
You may manage non-essential cookies through the cookie preference tool provided on our website or through your browser settings. Disabling certain cookies may affect some website functionality.
More detailed information may be provided in a separate Cookie Policy.
Disclosure of Personal Data
We may disclose personal data to parties that require access for legitimate and authorised purposes, including:
- companies within our corporate group or affiliated entities;
- authorised employees and departments of PT Kawasan Industri Kendal;
- website hosting, information technology, cloud storage, and cybersecurity providers;
- professional advisers, including legal advisers, auditors, consultants, and insurers;
- recruitment service providers and professional reference providers;
- contractors, vendors, and service providers supporting our operations;
- government institutions, regulatory authorities, law enforcement agencies, or courts;
- business partners involved in supporting investment or tenant requirements; and
- parties involved in a corporate restructuring, merger, acquisition, financing, or transfer of business assets.
Service providers that process personal data on our behalf are required to process it only for authorised purposes and to implement appropriate personal data protection measures.
We do not sell or trade personal data to third parties.
International Data Transfers
Kendal SEZ may work with affiliated entities, shareholders, service providers, business partners, or professional advisers located outside Indonesia.
Where personal data is transferred outside the jurisdiction of the Republic of Indonesia, we will take appropriate measures in accordance with applicable law. Such measures may include:
- confirming that the recipient jurisdiction provides an equivalent or higher level of personal data protection;
- implementing adequate and binding contractual safeguards;
- limiting access to what is necessary for the relevant purpose; or
- obtaining consent where required.
Data Retention
We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy.
The applicable retention period may depend on:
- the nature and sensitivity of the personal data;
- the purpose for which it was collected;
- the duration of our relationship with you or your organisation;
- applicable legal, regulatory, contractual, accounting, and reporting requirements;
- potential disputes or legal proceedings; and
- internal records management requirements.
When personal data is no longer required, we will take reasonable steps to securely delete, destroy, anonymise, or otherwise remove the means by which it can be associated with an identifiable individual, subject to applicable legal requirements.
Personal Data Security
We implement reasonable and appropriate technical and organisational measures designed to protect personal data against:
- unauthorised access;
- unlawful or unauthorised processing;
- accidental loss or destruction;
- alteration or disclosure;
- misuse; and
- other personal data security incidents.
Access to personal data is limited to authorised personnel and service providers who require access for legitimate business purposes.
Although we take reasonable measures to protect personal data, no electronic transmission or information storage system can be guaranteed to be completely secure.
Where a personal data protection failure occurs, we will take appropriate action and provide notifications in accordance with applicable legal requirements.
Your Personal Data Rights
Subject to applicable law and any permitted limitations, you may have the right to:
- obtain information about the identity, legal basis, purpose, and accountability of the party processing your personal data;
- request access to and obtain a copy of your personal data;
- request correction or completion of inaccurate personal data;
- withdraw consent previously provided;
- object to certain processing activities;
- request the suspension or restriction of processing;
- request the erasure or destruction of personal data;
- request data portability where technically feasible;
- object to decisions based solely on automated processing that produce legal or significant effects;
- submit a complaint to the relevant authority; and
- seek compensation where permitted under applicable law.
We may request reasonable information to verify your identity before processing a request. We will respond within the period required under applicable laws and regulations.
Certain requests may be limited or refused where retaining or processing the information remains necessary to comply with legal obligations, establish legal claims, protect another person’s rights, or fulfil other lawful purposes.
Recruitment Data
Personal data submitted for recruitment purposes will be used primarily to assess your application and administer the recruitment process.
Where you are not selected for a particular position, we may retain your application for consideration for future opportunities where permitted by law. You may object to such retention or request deletion of your recruitment data by contacting us at recruitment@kik.co.id.
Please do not submit sensitive or specific personal data that has not been requested or is not relevant to the position.
Children’s Privacy
Our website and services are primarily intended for business representatives, prospective investors, tenants, partners, job applicants, and other adult users.
We do not knowingly collect personal data from children without appropriate consent from a parent or lawful guardian where such consent is required.
Where we become aware that a child’s personal data has been collected without the required authorisation, we will take reasonable steps to delete or otherwise address the information in accordance with applicable law.
Third-Party Websites and Services
Our website may contain links to websites, social media platforms, maps, recruitment platforms, or digital services operated by third parties.
We do not control how these third parties collect or process personal data. You should review their respective privacy policies before providing personal data or using their services.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our services or processing activities;
- improvements to our personal data protection practices;
- organisational or technological developments; or
- changes in applicable laws and regulations.
The latest version will be published on our website together with the date on which it was last updated.
Where required, we may provide additional notification regarding material changes to this Privacy Policy.
Contact Us
For questions, concerns, complaints, or requests relating to this Privacy Policy or the processing of your personal data, please contact:
PT Kawasan Industri Kendal
Jl. Raya Arteri KM 19
Kelurahan Brangsong, Kecamatan Brangsong
Kabupaten Kendal 51371
Central Java, Indonesia
Email: [privacy@kik.co.id / designated privacy email]
Telephone: +62 294 3690 690
For recruitment-related personal data requests, you may contact:
Email: recruitment@kik.co.id
Please include sufficient information regarding your request so that we can identify the relevant records and respond appropriately.
