01Scope and responsible organization
This policy covers the public website, related account and order features where available, the client project tracking portal, and digital communications connected to VERALEX services. VERALEX provides business establishment, licensing, intellectual property, immigration, and related consulting services in Indonesia.
VERALEX CONSULTING operates this website and determines the purposes of the personal data processing described here. You can contact VERALEX through the channels below. Where another party independently determines why and how it processes data, its own privacy terms may also apply.
02Personal data we may handle
Depending on your interaction, website and portal records may include your name, email, telephone number, Google account identifier and basic profile details made available through authentication, company or client contact details, project title and service, status, workflow stages, PIC, visible updates, timestamps, account activity, and security or technical logs. Not every category is collected from every person.
Consultations and service work conducted outside the tracking portal may involve correspondence, business information, and supporting documents appropriate to the agreed service. Older account or order features, if used, may hold order details, transaction records, or references to payment evidence. The current tracking portal does not collect client identity documents through an upload interface.
03Where information comes from
Information may come from you or your representative through WhatsApp, email, consultation and other agreed channels; from Google when you authenticate; from an administrator creating or updating a project; from your authorized account activity; or from necessary website and security operations. Information obtained through external business channels is handled in the context of the relevant service.
04Why we use personal data
We may use relevant data to answer inquiries, assess and perform agreed services, create and manage projects, assign a PIC, control client portal access, display progress, send service or security notices, handle complaints, keep records, prevent misuse, and meet applicable legal obligations. Transaction details may be processed where an actual order or payment process applies.
Optional measurement or marketing tags, if configured, are handled separately from data needed to provide the service. We do not treat agreement to optional marketing as a condition for using the portal.
05Legal bases for processing
The applicable basis depends on the purpose and circumstances. It may be steps requested before an agreement or performance of an agreement, compliance with a legal duty, another basis permitted by Indonesian personal data protection law, or your valid consent where required. A request for consent will identify its purpose; this policy does not assume that consent is the basis for every service operation.
06Google sign-in
Clients may sign in with Google through the authentication service used by the portal. The application may receive a Google-linked user identifier and basic account information such as name, email, or profile image where supplied. VERALEX does not receive your Google password through this flow. Google processes authentication under its own terms and privacy information.
07Project access links
After an administrator creates a project, VERALEX may send a time-limited access link through WhatsApp or another agreed channel. The link is confidential: a valid unclaimed link can be claimed by the first eligible Google-authenticated client account that successfully uses it. Forwarding an unclaimed link may allow the wrong person to gain access. Google sign-in alone does not verify a person’s real-world identity.
Once claimed, continuing access is associated with the account that claimed the project. Tell VERALEX promptly if a link is exposed or claimed incorrectly. Administrators can revoke access and issue a replacement link according to operational procedures.
08Project tracking records
An authorized client may see their project title, service, status, current and completed stages, forthcoming stages, PIC, relevant dates, and updates designated for clients. VERALEX staff maintain project statuses and may access additional internal tasks, notes, and audit records that are not shown to clients. Clients are limited to projects for which access has been granted. The portal is a VERALEX progress service, not an Indonesian government system.
09Documents and sensitive information
The project tracking portal does not provide client document upload or download. Documents or sensitive personal information may nevertheless be requested and handled through external consultation or service channels when relevant to an agreed service. Please use the channel specified by the VERALEX team and avoid placing identity numbers or document contents in general portal messages or project notes.
11Service providers and disclosures
The site and portal use Supabase for authentication and application data, Google for Google sign-in, and links to WhatsApp/Meta for communications. The website is hosted through Vercel. A Google Tag Manager container may be enabled for optional analytics or marketing tags. Providers may process limited information needed for their respective services under their own terms and arrangements.
Information may also be shared with authorities, advisers, or service partners where required for an agreed service or by law, subject to the relevant context. No payment gateway is currently configured for priority handling in the tracking portal; provider information will be reflected here if one is activated.
12International processing
Using hosting, authentication, messaging, or measurement providers may involve processing outside Indonesia. Where data is transferred across borders, applicable Indonesian personal data protection requirements apply. You may contact VERALEX for information relevant to your data.
13Security and access controls
The portal uses sign-in, role and project access checks, expiring claim links, access revocation, and records of significant administrator actions. Access is limited according to the implemented roles and project associations. No online system can guarantee complete security; do not share account credentials or unclaimed project links.
14Retention
Data is kept as needed for the service, recordkeeping, disputes, and applicable legal obligations. The period may differ by data category and service circumstances. Project closure does not necessarily mean that records can be deleted immediately. You may ask VERALEX about a particular record using the contact channels below.
15Your personal data rights
Subject to applicable Indonesian law and lawful exceptions, you may request information about processing, access or a copy of your data, correction, and other applicable actions including withdrawal of consent where consent is the basis. Some requests may be limited by legal retention duties or the rights of others.
Use the contact details below and describe the account or service involved. VERALEX may need to verify your identity before acting on a request. You may use the contact channels below for a data request or question.
16Suspected security incidents
If you suspect unauthorized account or project access, an exposed link, or a data incident, contact VERALEX promptly using the channels below. VERALEX must assess incidents and provide any notifications required by applicable law. Please include enough information to help identify the affected account or project without sending identity documents through the portal.
17Children and service eligibility
The services described are directed primarily to business clients and people acting for them. If information concerning a child is relevant to a particular service, its handling must be assessed against the applicable rules and the specific circumstances. This policy does not impose an unverified minimum age for all website visitors.
18Changes to this policy
VERALEX may revise this policy as its services, technology, or legal requirements change. Material changes should be communicated through appropriate channels. The last-updated date shown above will change when this policy is revised.
19Contact
Contact VERALEX at admin@veralexconsulting.com or WhatsApp +62 812 1947 6385. For a data request or suspected access problem, provide only the information needed to identify the issue; do not send identity documents through the tracking portal.