Privacy notice for guests

Applies to the rating pages businesses share with you by QR code. Written to meet Indonesia's Personal Data Protection Law (UU 27/2022) and GDPR principles.

What we collect

• The star rating you tap and, if you choose to write private feedback, what you write and any photos you attach.
• Your name and email or WhatsApp number only if you type them in. Contact details are stored only when you tick the consent box.
• A one-way hash of your IP address and browser, recalculated with a new salt every day. We never store your IP address.

What we do not do

• We never write, edit or submit a Google review for you. If you go to Google, you write and post your own words there.
• We do not offer rewards for reviews and do not sell your data.
• Photo metadata (including location) is stripped before storage. Photos are kept in private storage.

Who sees it, and for how long

Only the business you rated and the staff it authorises. Feedback is deleted automatically after the business's retention period (default two years) or sooner on request.

Your rights

You can ask the business to access, correct, export or delete your feedback and contact details.