Effective date: 24 August 2026

1. Introduction

Welcome to the Douglas Valley website.

This Privacy Policy explains how PT Douglas Valley Indonesia (“Douglas Valley”, “we”, “us” or “our”) collects, uses, stores and protects personal information when you visit our website, contact us, make an enquiry, subscribe to communications, or otherwise interact with our organisation and services.

Douglas Valley is an international consultancy specialising in energy, water resources and strategic natural resources, providing technical expertise, strategic advisory services and project management support across Indonesia and international markets.

This Privacy Policy applies to personal data collected through our website and related activities, including enquiries from individuals, corporate clients, business partners, investors, consultants, government representatives and other parties interested in working with Douglas Valley.

This Privacy Policy, together with our Terms of Use and any other applicable policies, sets out the basis on which personal data we collect from you, or that you provide to us, will be processed.

Please read this Privacy Policy carefully to understand how we handle and protect your personal information.

By using our website, you acknowledge the practices described in this Privacy Policy.

For the purposes of applicable data protection legislation, the data controller is:

PT Douglas Valley Indonesia
Jalan Gading Serpong Boulevard Blok B No. 10,
Desa/Kelurahan Curug Sangereng, Kec. Kelapa Dua,
Kab. Tangerang, Provinsi Banten,
Kode Pos: 15810, Indonesia

In general terms, we use your personal data to operate and improve our website, respond to enquiries, communicate with clients and business contacts, manage business relationships and partnerships, and support the activities and objectives of Douglas Valley.


2. Legal Framework

Douglas Valley is committed to protecting your personal data and complying with applicable data protection and privacy laws.

As an Indonesian company, our processing of personal data is governed primarily by applicable Indonesian data protection legislation, including Law of the Republic of Indonesia No. 27 of 2022 concerning Personal Data Protection (Pelindungan Data Pribadi), together with other applicable Indonesian laws and regulations. 

Where Douglas Valley processes personal data relating to individuals in other jurisdictions, we will also seek to comply with applicable data protection legislation where required.

Where the General Data Protection Regulation (EU) 2016/679 (“GDPR”) applies to particular processing activities, Douglas Valley will comply with the applicable requirements of the GDPR.

Douglas Valley acts as the data controller in relation to personal data processed under this Privacy Policy, except where another organisation is responsible for determining how and why particular personal data is processed.


3. Definitions

Service

“Service” means the Douglas Valley website and the related services and activities we provide, including responding to enquiries, managing communications, developing business relationships and partnerships, providing consultancy and advisory services, and supporting project development and management.

Personal Data

“Personal Data” means any information relating to an identified or identifiable natural person (“Data Subject”).

Data Subject or User

“Data Subject” or “User” means any living individual whose Personal Data is processed by Douglas Valley, including individuals who visit or interact with our website.

Processing

“Processing” means any operation performed on Personal Data, whether or not by automated means, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, transfer or erasure.

Usage Data / Analytics

“Usage Data” or “Analytics Data” means information that may be collected automatically when you access or use our website. This may include your IP address, browser type, device type, approximate geographic location, pages visited, duration of visits and other technical or diagnostic information.

Cookies

Cookies are small data files stored on your computer, smartphone or other device when you visit a website.

Data Controller

A Data Controller is the natural or legal person or organisation that determines the purposes and means by which Personal Data is processed.

For the purposes of this Privacy Policy, PT Douglas Valley Indonesia is the Data Controller of your Personal Data where we determine how and why that information is processed.

Data Processor or Service Provider

A Data Processor or Service Provider is a person or organisation that processes Personal Data on behalf of a Data Controller.

We may engage trusted third-party Service Providers to assist us in operating our website and carrying out our activities.


4. Information We Collect

We may collect different types of information for the purposes of operating and improving our website, communicating with you, managing business relationships and supporting the activities of Douglas Valley.

We do not sell your Personal Data.

Personal Data

When you use our website, contact us or interact with Douglas Valley, we may ask you to provide certain personally identifiable information.

This may include, but is not limited to:

Where Douglas Valley works with clients, partners, consultants, investors, government bodies or other stakeholders, we may also collect information reasonably necessary to manage those relationships and provide our services.

We may use your Personal Data to contact you regarding your enquiry, our services, potential projects, business opportunities or other matters relevant to your relationship with Douglas Valley.

Where permitted by law and, where required, with your consent, we may also send you newsletters, updates or information about Douglas Valley’s activities and services.

You may opt out of marketing communications at any time by using the unsubscribe link provided in our emails or by contacting us directly.

Usage Data / Analytics

We may collect information about how our website is accessed and used.

This may include:

This information helps us understand how visitors use our website and enables us to improve its functionality, performance and content.

Tracking and Cookies Data

We may use cookies and similar technologies to understand activity on our website and improve the user experience.

Depending on the technologies used on our website, tracking technologies may include cookies, pixels, tags and scripts.

Where required by applicable law, non-essential cookies will only be used with your consent.

You can configure your browser to refuse certain cookies or to notify you when cookies are being used. However, disabling some cookies may affect certain features or functionality of the website.

Examples of cookies we may use include:

Essential Cookies – Required for the website to operate correctly.

Preference Cookies – Used to remember certain preferences and settings.

Analytics Cookies – Used, where applicable and subject to consent requirements, to understand how visitors interact with our website.

Security Cookies – Used to help protect the security and integrity of our website.


5. How We Use Your Data

We may use Personal Data collected through our website and activities for purposes including:

We will only use Personal Data for purposes that are compatible with the reason it was collected, unless we reasonably consider that we need to use it for another lawful and compatible purpose.


6. Legal Basis for Processing Personal Data

Depending on the circumstances and applicable law, we may process your Personal Data because:

Where we rely on consent, you have the right to withdraw that consent where provided by applicable law.

Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.


7. Retention of Data

We retain Personal Data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying applicable legal, regulatory, accounting or reporting requirements.

The appropriate retention period will depend on the nature and purpose of the information, our legal obligations and the nature of our relationship with you.

We may retain certain Personal Data where necessary to comply with legal obligations, resolve disputes, protect our legitimate interests and enforce agreements and policies.

Usage and Analytics Data may generally be retained for a shorter period, unless longer retention is necessary for security, website functionality, analysis or legal compliance.

When Personal Data is no longer required, we will take reasonable steps to securely delete or anonymise it.


8. International Transfers of Data

Douglas Valley operates internationally and may work with clients, partners, consultants, Service Providers and other organisations in countries outside Indonesia.

As a result, your Personal Data may, where necessary, be transferred to or processed in countries outside Indonesia.

Where Personal Data is transferred internationally, Douglas Valley will take appropriate steps to ensure that such transfers comply with applicable data protection legislation.

Where required, this may include relying on:

We will take reasonable steps to ensure that Personal Data transferred internationally is treated securely and in accordance with this Privacy Policy.


9. Disclosure of Data

Douglas Valley does not sell your Personal Data.

We may disclose Personal Data in certain circumstances, including the following.

Business Transactions

If Douglas Valley is involved in a merger, restructuring, acquisition, transfer of assets or similar transaction, Personal Data may be transferred as part of that transaction.

Where required by law, we will provide appropriate notice before Personal Data becomes subject to a materially different Privacy Policy.

Legal and Regulatory Requirements

We may disclose Personal Data where required to do so by law or in response to a valid request from a court, government agency, law-enforcement authority or other competent public authority.

We may also disclose Personal Data where we reasonably believe such action is necessary:


10. Security of Data

The security of your Personal Data is important to us.

We take reasonable technical and organisational measures designed to protect Personal Data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

While we take reasonable and commercially appropriate measures to protect Personal Data, we cannot guarantee absolute security.


11. Do Not Track Signals

Some internet browsers provide a “Do Not Track” (“DNT”) feature that allows users to indicate a preference regarding online tracking.

There is currently no universally accepted standard for how websites should respond to DNT signals.

Douglas Valley’s response to such signals may depend on the technologies and Service Providers used on our website.

You may also manage cookies and tracking preferences through your browser settings and, where available, through our website’s cookie-consent controls.


12. Your Data Protection Rights

Depending on the applicable data protection legislation, you may have certain rights in relation to your Personal Data.

These may include:

The right of access – You may have the right to request information about the Personal Data we hold about you and to receive a copy of that information.

The right to rectification – You may have the right to request correction of Personal Data that is inaccurate or incomplete.

The right to erasure – In certain circumstances, you may request the deletion of your Personal Data.

The right to restrict processing – In certain circumstances, you may have the right to request that we restrict how your Personal Data is processed.

The right to object – You may have the right to object to certain processing of your Personal Data, including certain processing based on legitimate interests and direct marketing.

The right to data portability – Where applicable, you may have the right to receive Personal Data you have provided to us in a structured, commonly used and machine-readable format.

The right to withdraw consent – Where we rely on your consent to process Personal Data, you may withdraw that consent at any time, subject to applicable law.

Rights relating to automated decision-making – Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

We may ask you to verify your identity before responding to a request relating to your Personal Data.

Where applicable, you may also have the right to lodge a complaint with the relevant data-protection authority in your jurisdiction.


13. Service Providers

We may engage third-party companies and individuals to help us operate our website and carry out our activities.

These Service Providers may provide services including:

Where Service Providers process Personal Data on our behalf, they are permitted to access Personal Data only to the extent necessary to perform the relevant services and are required to handle that information in accordance with applicable data protection requirements.


14. Analytics

We may use third-party analytics providers to help us understand how visitors interact with our website.

Google Analytics

Where implemented, and subject to applicable cookie-consent requirements, our website may use Google Analytics, a web analytics service provided by Google.

Google Analytics may collect information about website usage, including pages visited, time spent on the website, device and browser information and other technical information.

Where required by law, Google Analytics and similar non-essential analytics technologies will only be activated after you have provided appropriate consent.

You may be able to manage or withdraw your consent through our website’s cookie settings.

For further information, please refer to Google’s applicable privacy information.


15. Links to Other Websites

Our website may contain links to third-party websites that are not operated or controlled by Douglas Valley.

If you click on a third-party link, you will be directed to that third party’s website.

We encourage you to review the privacy policy of every external website you visit.

Douglas Valley has no control over and assumes no responsibility for the content, privacy policies or data-protection practices of third-party websites or services.


16. Children’s Privacy

Our website and services are not directed specifically at children under the age of 18, and we do not knowingly collect Personal Data directly from children through our website without an appropriate lawful basis.

If you are a parent or guardian and believe that a child has provided Personal Data to us without appropriate authorisation or consent, please contact us.

If we become aware that Personal Data relating to a child has been collected inappropriately, we will take reasonable steps to delete or otherwise appropriately handle that information.


17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our activities, website, technologies, legal requirements or data-protection practices.

When we make changes, we will publish the updated Privacy Policy on this page and revise the Effective Date shown at the top.

Where changes are significant and required by applicable law, we may provide additional notice.

We encourage you to review this Privacy Policy periodically to remain informed about how we collect, use and protect Personal Data.

Changes to this Privacy Policy become effective when published on our website unless otherwise stated.


CONTACT US

If you have any questions about this Privacy Policy or wish to exercise your data-protection rights, please contact us:

PT Douglas Valley Indonesia
Jalan Gading Serpong Boulevard Blok B No. 10
Desa/Kelurahan Curug Sangereng, Kec. Kelapa Dua
Kab. Tangerang, Provinsi Banten
Kode Pos: 15810
Indonesia

Email: info@douglasvalley.com
Website: DouglasValley.com