PRIVACY NOTICE

PT HELM CARE INDONESIA

Effective since 19.12.2025

A. INTRODUCTION

This Privacy Notice is effective as of the 19.12.2025

This Privacy Notice explains how Helm Care Indonesia (“Helm Care”, “We”) obtain, collect, store, use, process, disclose, transfer, and protect your Personal Data (“Personal Data Processing”) in order to provide Helm Care services. This Privacy Notice applies to all users of Helm Care services (“User" or "You”), including users of the Helm Care application, Helm Care machines, as well as other services, features and products provided by Us (collectively referred to as “Application”), unless otherwise set out in a specific privacy notice.


Please read this Privacy Notice carefully to understand our data protection practices. Capitalized terms used in this Privacy Notice have the same meanings as those set out in the Helm Care Terms of Service, unless otherwise defined.

Personal Data Controller Contact

Helm Care is Personal Data Controller. For questions, requests, or complaints regarding Personal Data, you can contact us via:

  • Email (Privacy) : *
  • Customer Service: *
  • Address: *
  • Service hours: *

B. ACKNOWLEDGEMENT AND CONSENT

By using the Helm Care Application and/or services, you declare that you have read, understood, and agree to all the provisions in this Privacy Notice, and give your consent to Us to Process Your Personal Data in accordance with this Privacy Notice and applicable laws and regulations.

If you provide Personal Data relating to another party to Us, you represent and warrant that you have obtained valid consent from that party for Us to Process their Personal Data, and are willing to provide evidence of such consent upon request.

In the event that you receive Personal Data from other Users or Helm Care partners in using the service, you understand that such Personal Data may only be used for the purposes of using Helm Care services and you are fully responsible for any misuse that occurs.

You may withdraw your consent to the processing of your personal data at any time by providing written notice to us or through the available opt-out feature. Withdrawing your consent may result in limited or termination of your access to the Helm Care Application and/or services, including account deletion or termination of your service relationship, while still respecting any previously established rights and obligations.

1. Types of Personal Data We Collect

In order to provide Helm Care services, we may collect and process certain Personal Data depending on the type of service you use and your interactions with the Application. The Personal Data collected may include:

  1. Identity Data, such as name, telephone number, email address, or other identification that you provide when registering for an account or using certain services;
  2. Transaction Data, including information related to the use of the Helm Care machine, time and location of use, type of service used, and payment transaction history;
  3. Payment Data, in the form of information about the payment method you use through a payment service provider that collaborates with us;
  4. Technical and Device Data, such as IP address, device type, operating system, application activity logs, and other technical data necessary to maintain the security and performance of the Application; and
  5. Limited Location Data, to the extent relevant to indicate service availability or Helm Care machine location, and to the extent permitted by your device settings.

We do not collect Personal Data that is not relevant to the purpose of providing Helm Care services.

2. Incomplete Personal Data

If the required Personal Data is not provided completely or accurately, we may limit, delay, or be unable to provide some or all of Helm Care's services to you. You understand that the completeness and accuracy of the Personal Data provided are your responsibility.

3. How We Collect Personal Data

We collect Personal Data in several ways, including:

  1. Data you provide directly, such as when creating an account, using the Application, making transactions, or contacting customer service;
  2. Data collected automatically, when you use the Helm Care App or machines, including technical data, activity logs, and service usage information; and
  3. Data from third parties, namely location partners, payment service providers, or technology system providers who collaborate with us, as long as it is necessary for the implementation of Helm Care services.

4. Purpose of Personal Data Processing

We process your Personal Data for the following purposes:

  1. Provide, manage and operate Helm Care services;
  2. Verifying identity and managing user accounts;
  3. Processing transactions and payments;
  4. Improve the quality, security and performance of the Helm Care Application and engine;
  5. Respond to user questions, complaints, or requests; and
  6. Fulfill legal obligations in accordance with applicable laws and regulations.

5. Basis for Processing Personal Data

Processing of Personal Data is carried out on the basis of one or more processing bases permitted by law, including but not limited to:

  1. Agreement(e.g. for marketing, certain personalization, device location access);
  2. Implementation of agreements/services(for account registration, transaction processing, service provision);
  3. Fulfillment of legal obligations; and/or
  4. Legitimate interests(e.g. fraud prevention, system security), as long as it is done proportionally.

6. Disclosure of Personal Data

We may disclose your Personal Data to limited third parties, including location partners, payment service providers, and technology providers, as necessary to provide Helm Care services. Such disclosures are limited and consistent with the purposes for which the Personal Data is processed. We do not sell your Personal Data.


7. Transfer of Personal Data Outside Indonesia

If under certain circumstances Personal Data is transferred/accessed from outside Indonesia (for example, using cloud/technology service providers), Helm Care ensures that the transfer is carried out in accordance with statutory regulations and implements adequate protection, including data processing agreements with related parties.


8. Data Storage and Retention

Your Personal Data will be retained for as long as necessary to achieve the purposes for which it is processed or as required by law. After this period, the Personal Data will be deleted or anonymized in accordance with applicable regulations.


9. Data Security

We implement reasonable technical and organizational measures to protect Personal Data from unauthorized access, use, or disclosure. However, you understand that no electronic system is completely risk-free.


10. Personal Data Protection Failure Notification

In the event of a failure to protect Personal Data, Helm Care will handle the incident and provide notification in accordance with statutory provisions, including notification to the Personal Data Subject and/or authorized institutions. The notification will include at least: (i) the Personal Data disclosed; and (ii) when and how the Personal Data was disclosed.

11. User Rights

In accordance with applicable laws and regulations, you have the right to your Personal Data, including the right to access, correct, withdraw consent, and/or request deletion of certain Personal Data, by contacting us through official Helm Care contacts.

Helm Care may request identity verification before processing your request and may refuse/delay certain requests if required/permitted by law.

12. Changes to the Privacy Notice

We may update this Privacy Notice from time to time. Changes will be notified through the App or other official communication channels. For material changes, Helm Care will provide prior notice within a reasonable period of time before they become effective.