1. Introduction
DrillSpace ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information about you when you use our maritime e-learning platform at drillspace.id.
By using our Platform, you consent to the data practices described in this Policy. This Policy is part of our Terms & Conditions.
2. Data We Collect
We collect the following categories of personal data:
Account & Profile Data
- Full name, email address, phone number
- Username and hashed password
- Profile photo (optional)
Transaction Data
- Course purchase records and order history
- Payment method type (VA, e-wallet, QRIS) — we do not store full card numbers
- Invoice and billing information
Usage & Technical Data
- IP address and device information
- Browser type, operating system, and language settings
- Pages visited, time spent, and clickstream data
- Course progress and completion data
Partner Data (for Partner organisations)
- Organisation name, address, and registration number
- Bank account details (for withdrawal processing)
- Subscription and billing records
3. How We Use Your Data
We use your personal data to:
- Provide, operate, and maintain the Platform
- Process course enrolments and payments
- Send transactional emails (receipts, OTP codes, account activation)
- Personalise your learning experience
- Track learning progress and issue completion certificates
- Detect and prevent fraud, abuse, or security incidents
- Comply with legal and regulatory obligations
- Improve Platform features through aggregated analytics (non-identifiable)
5. Data Storage & Security
We implement industry-standard technical and organisational measures to protect your data, including:
- Passwords stored as bcrypt hashes (never in plaintext)
- HTTPS/TLS encryption for all data in transit
- Access controls and role-based permissions
- Regular security audits and dependency scanning
We retain your data for as long as your account is active, or as necessary to provide services and comply with legal obligations. You may request deletion of your account and associated data at any time.
7. Your Rights
Under applicable Indonesian data protection laws, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your data (subject to legal retention requirements)
- Portability — receive your data in a structured, machine-readable format
- Objection — object to certain types of processing
To exercise any of these rights, contact us at privacy@drillspace.id. We will respond within 14 business days.
8. Children's Privacy
The Platform is intended for users aged 17 and above. We do not knowingly collect personal data from children under 17. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Platform before the change becomes effective. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
10. Contact Us
For privacy-related enquiries or to exercise your data rights:
DrillSpace — Data Privacy
Email: privacy@drillspace.id
General: support@drillspace.id
Website: drillspace.id