Last updated: 4 October 2026
This Privacy Policy explains how ZO® Skin Health Indonesia (“we”, “us”, “our”), the operator of zoskinhealth.co.id, collects, uses, stores and protects your personal data when you visit our website, create an account, place an order, subscribe to our newsletter or contact us. We process personal data in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and other applicable regulations.
1. Personal data we collect
- Identity and contact data – name, email address, phone/WhatsApp number, billing and shipping address.
- Account data – username and password (stored in encrypted form) and your order history.
- Order and transaction data – products purchased, order value, payment status and delivery details. Card or bank details are processed directly by our payment partners; we do not store full card numbers.
- Communication data – messages you send us through our contact forms, email or chat, including any information about your skin concerns that you choose to share.
- Technical and usage data – IP address, browser and device type, pages visited, referral source and similar information collected through cookies and comparable technologies.
- Marketing preferences – whether you have subscribed to our newsletter and your communication preferences.
2. How we use your personal data
- To process, deliver and support your orders, including returns and refunds.
- To create and manage your customer account.
- To respond to your questions and requests.
- To send newsletters, promotions and product updates – only if you have subscribed. You can unsubscribe at any time via the link in every email.
- To keep our website secure, prevent fraud and spam, and comply with legal and tax obligations.
- To understand how our website is used so we can improve our products and services.
We process your data on the basis of your consent, the performance of a contract with you (for example, fulfilling your order), our legal obligations, and our legitimate interests in operating and improving our business.
3. Sharing your personal data
We do not sell your personal data. We share it only where necessary with:
- payment service providers, to process your payments;
- courier and logistics partners, to deliver your orders;
- IT, hosting, email and newsletter service providers that help us run the website (for example our hosting provider, our email delivery service and our newsletter platform);
- security services that protect our website from spam and abuse (for example Cloudflare Turnstile);
- authorised ZO® Skin Health partners, where needed to answer a product or treatment question you have asked; and
- government authorities, where required by law.
Some of these providers may store data outside Indonesia. Where this happens, we take reasonable steps to ensure your data receives a level of protection consistent with UU PDP.
4. Cookies
Our website uses cookies to keep your shopping cart and login working, to remember your preferences, to protect forms against spam and to understand how visitors use the site. You can block or delete cookies in your browser settings; however, some parts of the website (such as the cart and checkout) may not work properly without them.
5. How long we keep your data
We keep personal data only for as long as needed for the purposes described above. Order and transaction records are kept for the period required by Indonesian tax and accounting regulations. Contact form messages are kept for as long as needed to handle your request. You may ask us to delete your account at any time.
6. How we protect your data
We use appropriate technical and organisational measures to protect your personal data, including an encrypted HTTPS connection, access controls and a web application firewall. No method of transmission over the internet is completely secure, but we work to protect your data and will notify you and the relevant authority of a personal data breach as required by law.
7. Your rights
Under UU PDP you have the right to:
- obtain information about how we process your personal data;
- access and obtain a copy of your personal data;
- correct or update inaccurate or incomplete data;
- request deletion of your data, or ask us to stop or restrict processing;
- withdraw your consent at any time (this does not affect processing carried out before withdrawal); and
- object to direct marketing.
To exercise these rights, please contact us via our Contact Us page. We may need to verify your identity before acting on your request.
8. Children
Our website and products are intended for adults. We do not knowingly collect personal data from children without the consent of a parent or guardian.
9. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the date of the last update shown at the top.
10. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please reach us through our Contact Us page.