Privacy Policy

1. Who we are

YOME is a self-serve frozen yogurt and coffee shop opening in Berawa, Canggu, Bali. The website yome.id is operated by PT Jarquin Harbid Group (“YOME”, “we”, “us”), Berawa, Canggu, Badung Regency, Bali, Indonesia.

PT Jarquin Harbid Group is the data controller for the personal data described here. For anything to do with your data, contact us at hello@yome.id.

2. What we collect

Right now this website does one thing: it takes First Serve Club waitlist signups.

• What you give us. Your name, your email address, and your Instagram handle if you choose to add one.
• What the form records. The date and time you submitted, and your IP address. We keep this as proof of your consent, which Indonesian law requires us to be able to show.
• What analytics records. We use Google Analytics to understand how people find and use this site. It sets cookies and collects your IP address, approximate location, device and browser type, and the pages you view. See section 6.

We do not collect payment details, government ID, or any sensitive category of personal data through this website.

3. Why we collect it, and our legal basis

• To run the First Serve Club waitlist — to tell you when we open, and to send you First Serve Club news and offers. Our legal basis is your consent (Article 20(2)(a) of Indonesia’s Personal Data Protection Law, UU No. 27/2022; Article 6(1)(a) GDPR where it applies to you).
• To keep the site working and secure, and to measure how it performs — our legal basis is our legitimate interest in running a functioning website.

We do not sell your personal data. We do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

4. How long we keep it

• Waitlist data — until you unsubscribe or ask us to delete it, or until 24 months of no engagement, whichever comes first. Then we delete it.
• Consent records (timestamp, IP, the wording you agreed to) — kept for as long as we hold your waitlist data, plus 12 months, so we can show the consent was validly given.
• Analytics data — retained by Google Analytics for 14 months, then deleted automatically.

5. Who we share it with, and where it goes

We do not sell or rent your data. We share it only with the service providers that make this website and our emails work:

• Website hosting — EasyWP / Namecheap, United States.
• Email delivery — our email sending provider, United States.
• Analytics — Google LLC, United States.

This means your data is transferred outside Indonesia and stored on servers in the United States. We rely on our providers’ contractual data protection terms (including standard contractual clauses where they apply) to protect it, and by consenting to the waitlist you also consent to this transfer (Article 56 UU PDP). We will disclose personal data to authorities only where we are legally required to.

6. Cookies and analytics

This site uses cookies that are necessary for it to function, and Google Analytics cookies that help us understand traffic and how the site is used.

You can block or delete cookies in your browser settings at any time, and you can opt out of Google Analytics entirely using Google’s browser opt-out add-on. Blocking cookies will not stop you using this site or joining the waitlist.

7. Your rights

Under Indonesia’s Personal Data Protection Law you have the right to:

• be told what data we hold about you, why, and on what basis;
• get a copy of your data, free of charge;
• correct or complete anything inaccurate;
• have your data deleted or destroyed;
• withdraw your consent at any time;
• object to automated decision-making;
• restrict or postpone processing;
• receive your data in a portable format and have it sent to another provider;
• seek compensation for a breach of the law.

If GDPR applies to you, you have the equivalent rights under it, including the right to object to direct marketing at any time, and the right to lodge a complaint with your national data protection authority.

To use any of these, email hello@yome.id. We will respond within 3 × 24 hours, as Indonesian law requires. We may ask you to confirm your identity first so we do not hand your data to someone else.

8. Unsubscribing

Every email we send has an unsubscribe link. One click and you are out — withdrawing consent is as easy as giving it. You can also email hello@yome.id and ask us to remove you. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

9. Security

The site runs over an encrypted connection (HTTPS). Access to the waitlist is limited to the people who need it, and protected by individual accounts. No system is perfectly secure, but we keep the amount of data we hold deliberately small — a name, an email, and an optional Instagram handle — which limits what any breach could expose.

10. If something goes wrong

If personal data we hold is exposed or misused, we will notify you and the relevant Indonesian authority in writing within 3 × 24 hours of becoming aware, telling you what data was involved, when and how it happened, and what we are doing about it.

11. Children

This website and the First Serve Club are not directed at children. We do not knowingly collect personal data from anyone under 18 without verifiable parent or guardian consent. If you believe a child has signed up, email us and we will delete the record.

12. Changes to this policy

If we change how we handle personal data, we will update this page and change the version number and date at the top. If the change is significant and we hold your email, we will tell you directly.