Privacy Policy

1. Introduction

  1. We at O2 Consulting (“O2 Consulting,” “we”, “us” or “our”) take our responsibilities under the applicable personal data protection laws and regulations in Indonesia (collectively, the “PDP Regulations”) seriously.
  2. This Privacy Policy (“Policy”) is designed to assist you in understanding how we process the personal data you have provided to us, as well as to assist you in making an informed decision before providing us with any of your personal data. All terms used in this Policy have the meaning ascribed to it under the PDP Regulations unless otherwise defined below.
  3. The processing of your personal data by us may be a requirement or optional in nature, depending on the Purposes (defined below) for which your personal data is processed. Where we request you to provide us with your personal data, and if you fail or choose not to provide us with such data, or do not consent to this Policy, we will not be able to provide our services or otherwise deal with you, at all.
  4. The terms of this Policy are to be read together with our standard terms of engagement or service agreements, all of which apply to you should you engage us.

2. Purposes For Processing Of Personal Data

  1. The personal data which we collect from you may be processed for various purposes, depending on the circumstances, including:
    • Providing strategic consultation;
    • Facilitating payment for our services;
    • Maintaining and updating internal record keeping, files, and contact lists;
    • Operating and maintaining our time billing and billing databases;
    • Complying with or meeting any legal or regulatory requirements relating to the provisions of our services, or by order of any court of competent jurisdiction or any competent judicial, governmental, regulatory, or supervisory body;
    • Conducting research, analysis, and development activities (including but not limited to data analytics, surveys and/or profiling) to improve our services and facilities to enhance your relationship with us or for your benefit;
    • Storing, hosting, backing up (whether for disaster recovery or otherwise) of your personal data, whether within or outside Indonesia;
    • Responding to complaints, queries, and/or requests;
    • Sending you information about any administrative changes, updates and/or amendments to our policies, terms, and conditions;
    • Sending your personal data as potential referees to industry ranking publications and potential clients who request referees for past work in our credential statements, tenders, and submissions;
    • Sending you seasonal greeting messages, newsletters, articles, write-ups, and updates on Indonesian policy and regulatory changes from time to time;
    • Sending you invitations to join our and/or our associate and affiliate offices’ events, conferences, talks, and seminars, and organizing and facilitating your participation in such events or other marketing/promotional activities organized by us or associate and affiliate offices; and/or
    • Any other purposes which we notify you of at the time of obtaining your consent (collectively, the “Purposes”).
  2. To conduct our business operations and consulting practice, we may also disclose the personal data you have provided to us to our third-party service providers, agents, and/or our affiliates, whether situated in or outside Indonesia, for one or more of the Purposes.

3. Disclosure Of Personal Data To Third Parties

We will first seek your consent to disclose your personal data. However, we may disclose your personal data to third parties, an inexhaustive list of which is reproduced below, for one or more of the Purposes:

  • Strategic partners, where necessary for the provision of services to you;
  • Your immediate family members and/or emergency contact person, as may be notified to us from time to time;
  • Any person whom we have engaged to discharge our obligations to you, including our auditors, consultants, accountants, insurers, lawyers, or other financial or professional advisers;
  • Any party in relation to legal proceedings or prospective legal proceedings;
  • Data centres and/or servers, storage facilities, and records management providers located within or outside Indonesia for data storage purposes;
  • Government agencies, law enforcement agencies, courts, tribunals, regulatory/professional bodies, industry regulators, offices, or municipalities in any jurisdiction, if required or authorised to do so;
  • Counterparties or their professional advisers, agents, and representatives in connection with the provision of our services to you;
  • The general public, when you participate in our events, conferences, talks and seminars by publishing your name, photographs and other personal data without compensation for advertising and publicity purposes;
  • Any third party (and its advisers or representatives) in connection with any proposed or actual reorganization, merger, sale, consolidation, acquisition, joint venture, assignment, transfer, funding exercise or asset sale relating to any portion of O2 Consulting; and/or
  • Any other person reasonably requiring such data in order for us to operate and maintain our business operations and to carry out the activities set out in the Purposes or as instructed by you.

4. Administration And Management Of Personal Data

  1. We will take reasonable efforts to ensure that your personal data is accurate and complete. However, this means that you must provide accurate and complete information to us and update us on any changes in your personal data that you have provided to us.
  2. We will also put in place reasonable security arrangements to ensure that your personal data is adequately protected and secured.
  3. You expressly consent to us transferring your personal data outside of Indonesia for the Purposes (e.g., to cloud service providers or affiliates). We shall endeavour to ensure that reasonable steps are taken to procure that all such third parties outside of Indonesia shall not use your personal data other than for the Purposes and to adequately protect the confidentiality and privacy of your personal data.

5. Personal Data From Minors And Other Individuals

  1. To the extent that you have provided (or will provide) personal data about your family members, spouse, other dependents and/or other individuals, you confirm that you have obtained their consent to the processing (including disclosure and transfer) of their personal data in accordance with this Policy.
  2. In respect of minors (i.e., individuals under 21 years of age) or individuals not legally competent to give consent, you confirm that you have been appointed to act for them, and to consent on their behalf to the processing of their personal data with this Policy.

6. Contact & Complaint Process

  1. If you have any queries on this Policy; wish to withdraw your consent; would like to exercise your statutory rights under the PDP Regulations; or if you have any complaints or grievances regarding how we handle your personal data, please contact us at:
Contact Method Detail
E-mail: office@o2consulting.co.id
Office Address:

Jalan K.H. Mas Mansyur No. 121, 19th Floor, Jakarta Pusat, Daerah Khusus

Jakarta 10220, ID
Attention: Compliance Team

7. Updates On This Policy

As part of our efforts to ensure that we properly manage, protect and process your personal data, we will be reviewing our policies, procedures and processes from time to time (at least 1 (one) time in 1 (one) year) to ensure compliance with our internal obligations and the PDP Regulations. This Policy may therefore be amended from time to time. Any amendment to this Policy will be posted on our website and can be viewed at  https://o2consulting.co.id/privacy-policy/. You are encouraged to visit our website from time to time to ensure that you are aware of our latest policies in relation to personal data.

Last Updated on October 2025