Privacy Policy.
Last updated: 2 May 2026
This Policy explains what personal data we collect via book.uncle-z.com, how we use it, and what rights you have. The data controller is Zaid Yasyaf (sole proprietor, doing business as "uncle-z studio"), Jakarta, Indonesia. We aim for the minimum data required to deliver the service.
1. Data we collect
- Booking form: name, email, optional company, project brief.
- Payment processing: we receive a payment confirmation (status, amount, transaction reference) from our payment gateway. We never receive or store card data.
- Server logs: standard web server logs (IP address, user agent, timestamp, requested URL) retained for up to 30 days for security and debugging.
2. How we use your data
- To process your booking and deliver the service you purchased.
- To send transactional emails (booking confirmation, scope document, kickoff invite, delivery notifications, invoices).
- To comply with our tax and accounting obligations under Indonesian law.
We do not use your data for marketing without explicit consent. We do not sell your data. We do not use your code or business data to train AI models.
3. Third parties
We share the minimum data required with the following processors:
- Payment gateway (payment.uncle-z.com): the booking amount, our internal reference, and your email — routed to a licensed payment service provider for processing.
- Hosting provider (Vercel / Netlify / Cloudflare): serves the website; sees standard request metadata.
- Email provider: delivers transactional emails to you.
We do not share your data with advertisers or analytics services.
4. Data retention
Booking and engagement records are retained for 7 years to comply with Indonesian tax and accounting law. Server logs are deleted after 30 days. Email records are retained as long as needed for the engagement plus 7 years for compliance.
5. Your rights
You may request access to, correction of, or deletion of your personal data by emailing hello@uncle-z.com. We respond within 30 days. We may retain records required by law (e.g. tax invoices) even after a deletion request.
6. Cookies
We do not use tracking cookies. We may use a single session cookie strictly necessary to operate the booking form during your visit; it expires when you close the browser.
7. Security
Personal data we hold is stored encrypted at rest. Payment data is never on our infrastructure. Access to engagement data is limited to the team members directly delivering your service.
8. Changes
We may update this Policy; the version in effect at the time of your booking is the version that applies to your data. Material changes will be announced on this page.
9. Contact
Questions, requests, or complaints: hello@uncle-z.com. See /legal for our business contact details.