Privacy Policy

Rielle ("Rielle", "we", "us", or "our") is an Indonesian cocoa products brand. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit https://rielle.co.id (the "Site"), contact us, or subscribe to our newsletter.

If you have any questions about this policy or how we handle your data, you can reach us using the contact details in section 13.

Information you give us. When you use our contact form or reach out to us directly, we collect the details you provide — typically your name, email address, WhatsApp number (optional), and the contents of your message. When you subscribe to our newsletter, we collect your email address.

Information collected automatically. Like most websites, our hosting provider may record standard log data such as your IP address, browser type, and access times. We also use Vercel Web Analytics, a cookieless analytics tool that collects aggregated, non-identifying usage data — such as pages viewed, referral source, device type, and approximate region — to help us understand how the Site is used.

We do not run accounts, checkouts, or payment flows on the Site, and we do not collect payment card details or passwords.

We use the information we collect to:

• respond to your questions, feedback, and wholesale or bulk-order enquiries;
• send you our newsletter and product updates, when you have subscribed;
• operate, maintain, and improve the Site and its content;
• protect the Site against spam, fraud, and abuse; and
• comply with applicable laws and regulations.

The Site does not set its own tracking cookies, and Vercel Web Analytics does not use cookies or collect personally identifiable information.

Some third-party content embedded on the Site — such as the Google Maps widget on our contact page — may set cookies or collect usage information under that provider's own privacy policy. You can control or delete cookies through your browser settings.

To run the Site we rely on a small number of service providers, including:

• website hosting, content delivery, and cookieless analytics (Vercel);
• form processing and email delivery providers that relay your contact and newsletter submissions to us;
• an embedded Google Maps widget on the contact page; and
• outbound links to third-party platforms such as TikTok Shop, Instagram, and WhatsApp.

When you interact with these services — for example by buying a product on a marketplace or messaging us on WhatsApp — your data is governed by that third party's own terms and privacy policy, which we encourage you to review.

We do not sell, rent, or trade your personal data. We share it only with the service providers described above, strictly as needed to operate the Site, or when we are required to do so by law, regulation, or legal process.

We keep personal data only for as long as needed for the purposes described in this policy. Newsletter subscriber details are kept until you unsubscribe, and contact messages are kept for as long as needed to handle your enquiry and maintain reasonable business records. After that, data is deleted or anonymised.

Some of our service providers may process data on servers located outside Indonesia. Where this happens, we take reasonable steps to ensure your data is handled in line with this policy and applicable data protection law.

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and other applicable data protection laws, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• withdraw your consent at any time — for example by unsubscribing from the newsletter;
• object to or restrict certain processing; and
• lodge a complaint with the relevant data protection authority.

To exercise any of these rights, email us at contact@rielle.co.id. Every newsletter email also includes an unsubscribe option.

The Site is intended for a general audience and is not directed at children. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it.

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with its "Last updated" date. If we make material changes, we will do our best to highlight them on the Site.

Questions, requests, or concerns about this policy or your data? Reach us at: