Privacy Policy

1. Who we are

www.mutual.id is operated jointly by PT Mutual Medica (Semarang) and PT Mutual Bahtera Santoso (Surabaya) under the name Mutual. The company that receives your message or application is the data controller under Indonesian Law No. 27 of 2022 on Personal Data Protection (PDP Law).

• PT Mutual Bahtera Santoso (Surabaya): office@mutualbahtera.co.id, +62 31 3360 1321
• PT Mutual Medica (Semarang): office@mutualmedica.co.id, +62 24 7642 6664

2. Data we collect

We only collect data you enter yourself and the technical data we need:

• Contact form: name, email, phone, institution, chosen office, subject and message.
• Job application form: identity and contact details, education and work history, job preferences, and the documents you upload (CV, cover letter, diplomas, certificates).
• Technical data: aggregate visit statistics from Cloudflare Web Analytics (no cookies, no personal identifiers) and Cloudflare Turnstile security checks to prevent spam.

3. Purpose and legal basis

• Responding to questions, preparing quotations and following up on your needs — based on your consent and steps prior to a contract.
• Running recruitment — based on your consent.
• Keeping the site secure and preventing abuse — based on legitimate interest.

We do not sell personal data or use it for advertising.

4. Service providers

To run the site, data is processed on our behalf by the providers below. Some of their servers are outside Indonesia; we choose providers that apply equivalent data protection standards.

• Cloudflare — site hosting, cookie-free analytics and Turnstile.
• Brevo — delivering contact form emails to our offices.
• Google — storing job application forms and documents, and office location maps.
• Zoho — office email mailboxes.

5. How long we keep data

Messages and contact details are kept as long as needed to respond to you and run the business relationship, or as required by law. Application data is kept for the recruitment process and deleted when no longer needed, unless you allow us to keep it for future openings.

6. Your rights

Under the PDP Law you have the right to:

• be informed about how your data is processed and obtain a copy;
• correct inaccurate data;
• request deletion or restriction of processing;
• withdraw consent at any time;
• object to certain processing.

Send your request to one of the office emails in section 1. We respond within the time limits set by law.

7. Cookies

This site does not use tracking or advertising cookies. Cloudflare Turnstile may store technical data needed for its security check. The Google map on the Contact page is loaded from Google and subject to Google’s privacy policy.

8. Security

Connections to the site are encrypted (HTTPS). Access to form data is limited to staff who need it to respond to you. If a personal data breach occurs, we notify you and the authorities as required by the PDP Law.

9. Changes

We may update this policy. The effective date above shows the latest version.