1. Introduction
  2. 1.1

    Welcome to Trofi platform operated by PT Onstock Solusi Indonesia and its affiliates and subsidiaries (individually and collectively "Trofi" or "we"). Trofi takes seriously its responsibilities under applicable privacy laws and regulations ("Privacy Laws") and is committed to respecting the rights and privacy concerns of all Users of our Trofi Platform ("Platform") (collectively we refer to the Platform and the services we provide as described in our Site as the "Service"). We recognize the importance of the persona data you have entrusted to us and believe it is our responsibility t properly manage, protect and process your personal data. This Privac Policy ("Privacy Policy" or "Policy") is designed {t }to help you understand how we collect, use, disclose and/or process {t }the personal data that you have entrusted to us and/or we hold about {t }you, both now and in the future, and to help you make an informed {t }decision before providing your personal data to us.


    "Personal Data" or "Personal Data" means data, whether true or not, about an individual who can be identified from that data, or from other data and information to which an organization has or may have access. Common examples of personal data may include name, identification number and contact information.


    By using the Services, registering an account with us, visiting our Platform, or accessing the Services, you acknowledge and agree that you accept the practices, terms, and/or policies outlined in this Privacy Policy, and you hereby authorize us to collect, use, disclose and/or process your personal data as described herein. IF YOU DO NOT CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED IN THIS PRIVACY POLICY, PLEASE DO NOT USE OUR SERVICES OR ACCESS OUR PLATFORM. If we change our Privacy Policy, we will post such changes or the amended Privacy Policy on our Platform. We reserve the right to change this Privacy Policy at any time.

  4. 2.1
    We will/may collect your personal data:
    • when you register and/or use our Services or Platform, or open an account with us.
    • when you submit any form, including, but not limited to, application forms or other forms relating to our products and services, either online or in physical form;**
    • when you enter into an agreement or provide documents or other information in connection with your interaction with us, or when you use our products and services;
    • when you interact with us, such as by telephone (which may be recorded), mail, fax, face-to-face meetings, social media platforms and email;
    • when you use our electronic services, or interact with us through our applications or use services on our Platforms;
    • when you conduct transactions through our Services;
    • when you submit criticism and suggestions or complaints to us
    • when you submit your personal data to us for any reason.

    The above list is not intended to be exhaustive and only sets out some general examples of when your personal data may be collected.

  6. 3.1
    Personal data that Trophies may collect includes but is not limited to:
    • name;
    • email address;
    • date of birth;
    • address;
    • point of location;
    • bank account and payment information;
    • phone number;
    • gender;
    • photo;
    • in-app search history
    • transaction history within the app
    • information sent by or connected to devices used to access the Service;
    • any other information about the User when the User registers to use our Service or Platform, and when the User uses the Service or Platform, as well as information relating to how the User uses our Service or Platform; and
    • all data about the content used by the User.

    There are several purposes for capturing "photo" data in the application, including:
    • restaurant logo;
    • employee attendance;
    • food/beverage menu;


    You agree not to submit any inaccurate or misleading information, and you agree to notify us of any inaccuracies or changes to such information. We reserve the right at our discretion to require further documentation to verify the information submitted by you.


    If you do not want us to collect the above information/personal data, you may opt out at any time by notifying our Data Protection Officer in writing. Further information regarding such revocation can be found in the section below entitled "How can you withdraw consent, delete, request access to, or modify the information you have provided to us?". Please note, however, that opting out of, or withdrawing consent for us to collect, use or process your personal data, may affect your use of the Services and Platform. For example, opting out of the collection of location information will cause its location-based features to be disabled.

  8. 4.1

    Like most mobile applications, your device sends information that may include data about you that may be recorded by the server if you use our Platform. This typically includes without limitation, your device's Internet Protocol (IP) address, and computer/mobile device operating system, mobile device type, mobile device characteristics, unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device, the address of the recommending site (if any), our mobile application and the time of your visit, and sometimes a "cookie" (which can be disabled by using your browser preferences) to help the site remember your last visit. If you log in, this information is associated with your personal account. The information is also included in anonymized statistics to allow us to understand how visitors use our site.


    Our mobile applications may collect detailed location information from mobile devices using technologies such as GPS, Wi-Fi, etc. We collect, use, disclose and/or process the information for one or more purposes, not limited to, location-based services that you request or to deliver content to you based on your location or to allow you to share your location with other Users as part of the services on our mobile applications. For most mobile devices, you can revoke the consent you gave us to obtain this information on your location through your device settings. If you have any questions about how to disable your mobile device's location services, please contact your mobile device service provider or the device manufacturer.

  10. 5.1

    At times, we may implement "cookies" or other features to enable us to collect or share information that will help us improve our Platform and the Services we offer, or help us offer new services and features. "Cookies" are identifiers that we transfer to your computer or mobile device that allow us to recognize your computer or device and tell us about how and when the Services or Platform are used or visited, by how many people, and to track activity on our Platform. We may link cookie information to personal data. Cookies also link to information about your activities. Cookies are also used to deliver content specific to your interests and to monitor the use of our Services.


    You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of our Platform.

  12. 6.1

    Just like when browsing pages on our mobile application, when you view content and access other software on our Platform or through the Services, some of the same information is sent to us (including, without limitation, IP address, operating system, etc.); but instead of the number of times a page is viewed, your computer sends us information about the content viewed and/or software installed by the Services and Platform and the time.

  14. 7.1
    We may collect, use, disclose and/or process your personal data for one or more of the following purposes:
    • consider and/or process your applications/transactions with us or your transactions or communications with third parties through the Services;
    • manage, operate, provide and/or administer your use of and/or accessto our Services and our Platform (including, but not limited to,remembering your preferences, as well as your relationship and youruser account with us).
    • respond to, process, deal with or complete transactions and/or fulfill your requests for certain products and services and notify you of service issues and unusual account actions;
    • enforce the Terms of Service or any applicable end-use license agreement;
    • to protect personal safety and the rights, property or safety of others;
    • for identification and/or verification
    • maintain and provide any software and/or other updates and support that may be required from time to time to ensure the smooth operation of our Services;
    • dealing with or facilitating customer service, carrying out your instructions, dealing with or responding to any queries raised by (or purportedly raised by) you or on your behalf;
    • contact you or communicate with you by telephone calls, text messages and/or fax messages, email and/or postal mail or any other means for the purpose of administering and/or managing your relationship with us or your use of our Services, such as but not limited to communicating administrative information to you relating to our Services. You acknowledge and agree that such communications by us may be made by sending letters, documents or notices to you, which may involve disclosing certain personal data about you in order to make such transmissions as well as listed on the outer cover of the postal envelope/package;
    • conduct research, analysis and development activities (including, but not limited to, data analysis, surveys, product and service development and/or profiling), to analyze how you use our Services, improve our Services or products and/or enhance your customer experience;
    • to enable audits and surveys to, among other things, validate the size and composition of our target audience and understand their experience with the Trofi Service;
    • for marketing, and in this regard, sending you via various modes of communication, marketing and promotional information and materials relating to products and/or services (including, but not limited to products and/or services of third parties collaborating or associated with Trofi) which Trofi (and/or its affiliates, or related corporations) may sell, market or promote, whether such products or services exist now, or are created in the future. You may unsubscribe from receiving marketing information at any time by using the unsubscribe function in electronic marketing materials. We may use your contact information to send you newsletters from us and from companies associated by us;
    • respond to legal process or otherwise comply with or as required by any applicable laws, governmental or regulatory requirements with relevant jurisdictions, including, without limitation, fulfilling requirements to make disclosures under legal requirements binding on Trophy or its related or affiliated companies;
    • produce statistics and research for internal reporting and as required by law and/or record retention requirements;
    • carry out due diligence or other screening activities (including, without limitation, background checks) in accordance with any legal or regulatory obligations or our risk management procedures that may be required by law or that we have put in place;
    • audit our Services or Trofi business;
    • prevent or investigate any actual or suspected breach of the Terms of Service any fraud, unlawful activity, omission or misconduct, whether in connection with your use of our Services or any other matter whatsoever arising from your relationship with us;
    • store, host, back up (whether for disaster recovery or otherwise) your personal data, whether within or outside your jurisdiction;
    • dealing with/and or facilitating business asset transactions or possible business asset transactions, where such transactions involve Trofi as a participant or involve only Trofi related companies or affiliates as participants or involve Trofi and/or one or more Trofi related companies or affiliates as participants, and there may also be other third party organizations that are participants in such transactions. "Business asset transaction" refers to the purchase, sale, lease, merger, consolidation or any other form of acquisition, disposal or financing of an organization or part of an organization or the business or any assets of an organization; and/or
    • any other purpose that we will notify you of at the time of obtaining your consent.

    (collectively referred to as theObjectives”).


    As the purposes for which we will/may collect, use, disclose or process your personal data depend on the circumstances, they may not be listed above. However, we will inform you of such other purposes at the time of obtaining your consent, unless the processing of the applicable data without your consent is permitted by the Privacy Act.

  16. 8.1

    We implement various security measures and strive to ensure the safety of your personal data on our systems. Users personal data is behind a secure network and can only be accessed by a small number of employees who have special access rights to such systems. Nevertheless, there is no guarantee or absolute security is inevitable.


    We will retain personal data in accordance with the Privacy Act and/or other applicable laws. Namely, we will destroy or anonymize your personal data when we reasonably consider that (i) the purpose for which the personal data was collected is no longer served by the retention of such personal data; (ii) retention is no longer necessary for any legal or business purpose; and (iii) there is no warrant legitimizing further retention of such personal data. If you stop using our Platform, or your authorization to use the Platform and/or Services is terminated or withdrawn, we may continue to retain, use and/or disclose your personal data in accordance with the Privacy Policy and our obligations under the Privacy Act. Subject to applicable law, we may securely dispose of your personal data without prior notice to you.

  18. 9.1
    In carrying out our business, we will/may need to disclose your personal data to third party service providers, agents and/or affiliates or our related companies, and/or other third parties, whether located in Indonesia or outside Indonesia, for one or more The objectives mentioned above. These third party service providers, agents and/or affiliates or related companies and/or other third parties will process your personal data on behalf of us or other parties, for one or more of the Purposes mentioned above. These third parties include, without limitation:
    • our subsidiaries, affiliates and related companies;
    • ther Users of the Platform for one or more of the aforementioned Purposes;
    • contractors, agents, service providers and other third parties that we use to support our business. This includes but is not limited to those who provide administrative or other services to us such as, postal services, telecommunications companies, information technology companies and data centers;
    • buyers or other successors in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Trofi's assets, whether on an ongoing basis or as part of an insolvency, liquidation or similar proceeding, where personal data held by Trofi about Users of our Services is one of the transferred assets; or to a counterparty in a business asset transaction involving Trofi or one of its affiliates or related companies; and
    • third parties to whom we disclose such data for one or more Purposes and such third parties will in turn collect and process your personal data for one or more Purposes.


    This may entail, among other things, sharing statistical and demographic information about our Users and their use of the Services with programming suppliers. This will not include anything that can be used to specifically identify you or discover personal information about you.


    For the avoidance of doubt, in the event that the Privacy Act or other applicable law permits an organization such as us to collect, use or disclose your personal data without your consent, the permission granted by such law shall continue to apply.


    Third parties may intercept or access personal data transmitted to or stored on the site without authorization, technology may malfunction or not work as expected, or someone may access, utilize or misuse information without any fault on our part. However, we will use reasonable security arrangements to protect your personal data as required by the Privacy Act; inevitably, however, there is no guarantee of absolute security such as but not limited to unauthorized disclosure arising from malicious and sophisticated hacking by displeased or hostile parties without any fault on our part.

  20. 10.1

    The Services are not intended for children under the age of 13. We do not knowingly collect or store any personal data or non-personal information from anyone under the age of 13 and any part of our Platform or other Services is not directed to children under the age of 13. As a parent or legal guardian, please do not give permission for children in your care to submit personal data to Trofi. In the event that personal data from children under the age of 13 under your care is disclosed to Trofi, you hereby consent to the processing of such child's personal data and accept and agree to be bound by this Privacy Policy on behalf of such child. We will close any accounts used exclusively by such children and will release and/or delete any personal data that we believe was submitted without parental or legal guardian consent by a child under the age of 13.

  22. 11.1

    Our Platform uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies, which are text files placed on your device, to help the Platform analyze how users use the Platform. The information generated by the cookie regarding use of the Platform (including your IP address) will be transmitted to, and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our Platform, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.


    We, and third parties, may from time to time provide downloads of software applications for your use on the Platform or through the Services. All of these applications may separately access, and allow third parties to view, information that can identify you, such as your name, User ID, IP Address of your device or other information, such as what cookies may be pre-installed, or installed for you by a third party software application or website. In addition, all of these applications may ask you to provide additional information directly to the third party. Third-party products or services through these applications are not owned or controlled by Trofi. You are encouraged to read other terms and policies published by such third parties on their websites or otherwise.

  24. 12.1

    WE DO NOT GUARANTEE THE SECURITY OF ANY PERSONAL DATA AND/OR OTHER INFORMATION YOU PROVIDE ON THIRD PARTY SITES. We do implement a variety of security measures to maintain the safety of your personal data that is with us or under our control. Your personal data is held behind a secure network and can only be accessed by a limited number of people who have special access rights to such systems, and are required to keep such personal data confidential. When you place an order or access personal data, we offer the use of a secure server. Any personal data or sensitive information you provide is encrypted into our database and can only be accessed as stated above.


    In an effort to provide you with increased value, we may select various third-party websites to link to, and frame within the Platform. We may also participate in co-branding and other relationships to offer e-commerce and other services and features for our visitors. All of these linked sites have their own separate and independent privacy policies and security settings. Even if the third party is affiliated with us, we have no control over these linked sites, each of which has its own privacy and data collection practices separate from ours. Data collected by our co-branded partners or third-party websites (even if offered on or through our Platform) may not be accepted by us.


    Accordingly, we take no responsibility or liability for the content, security settings (or lack thereof), and activities of these linked sites. These linked sites are for your convenience only, and you access them at your own risk. However, we endeavor to protect the integrity of our Platform and the links placed on each site, and therefore, we welcome any feedback regarding these linked sites (including, but not limited to, if certain links do not work).

  26. Your personal data and/or information may be transferred, stored or processed outside of your country. Trofi will only transfer your information overseas in accordance with the Privacy Act.

  28. 14.1

    Revoke Consent


    You may withdraw your consent to our collection, use and/or disclosure of your personal data in our possession, or under our control, by emailing the Personal Data Protection Officer at, and we will process your request in accordance with this Privacy Policy and our obligations under the Privacy Act and other applicable laws. However, revocation of your consent may mean that we will not be able to continue providing the Services to you, and we may have to terminate our relationship with you and/or the contract you entered into with us.


    Request Access to or Correction of Personal Data


    If you have an account with us, you can access and/or correct your personal data currently in our possession or control yourself via the Account Settings page on the Platform. If you do not have an account with us, you may request to access and/or correct your personal data currently in our possession or control by sending us a written request. We will need sufficient information from you to ascertain your identity and the nature of your request in order for us to deal with your request. Accordingly, please submit your request in writing by emailing our Personal Data Protection Officer at


    We may also charge you a reasonable fee for handling and processing your request to access your personal data. If we choose to charge a fee, we will provide you with an estimate of the fee to be charged in writing. Please note that we are not obliged to respond to or process your access request unless you have agreed to pay the fee.


    We reserve the right to refuse to correct your personal data in accordance with the provisions as outlined in the Privacy Act, and where required and/or grant organizations the right to refuse to correct personal data in the circumstances stated.

  30. 15.1

    If you have any questions or concerns about our privacy practices please contact us by email at

Last updated: Tuesday, November 2, 2022