Privacy Policy

Effective date: 11 August 2026

Because the protection of your Personal Data is important to SuperStash, please read this Privacy Policy carefully so that you are aware of and understand the purposes for which SuperStash collect, use, and disclose Personal Data (as defined below). By using SuperStash, you consent to the collection and use of your Personal Data in accordance with this Privacy Policy. The consent you provide under this Privacy Policy constitutes additional consent to any other consents you may have previously provided to SuperStash in relation to your Personal Data.

SuperStash will notify you through a notice on SuperStash prior to making any changes to this Privacy Policy. Your continued use of SuperStash following any modification, variation, and/or amendment to this Privacy Policy shall constitute your consent to and acceptance of such modification, variation, and/or amendment. Accordingly, you are advised to review this Privacy Policy periodically to ensure that you are aware of our latest Privacy Policy regarding the protection of Personal Data.

A. Consent

  1. You acknowledge that you have read and understood this Privacy Policy and agree to all of its terms and conditions. In particular, you agree and provide your consent to SuperStash to collect, use, share, disclose, retain, transfer, or otherwise process your Personal Data in accordance with this Privacy Policy.
  2. You may withdraw your consent to any or all collection, use, or disclosure of your Personal Data at any time by providing SuperStash with reasonable written notice. Depending on the circumstances and the nature of the consent being withdrawn, you understand and acknowledge that, following such withdrawal of consent, you may no longer be able to use SuperStash. The withdrawal of your consent may result in the termination of your Account or your contractual relationship with SuperStash, in which case all rights and obligations arising therefrom shall remain fully enforceable and must be duly fulfilled. Upon receiving your notice of withdrawal of consent to the collection, use, or disclosure of your Personal Data, SuperStash will inform you of the potential consequences of such withdrawal so that you can decide whether you wish to proceed with the withdrawal of your consent in relation to your Personal Data.

B. Personal Data Collected

Personal Data means any data relating to an individual who is identified and/or can be individually identified, either independently or in combination with other information, whether directly or indirectly, through electronic and/or non-electronic systems (“Personal Data”). SuperStash collect Personal Data in connection with the Services, including but not limited to:

  1. Full name;
  2. Registered telephone number;
  3. Residential address, including street name, Neighborhood Association (RT), Community Association (RW), Village/Sub-district (Kelurahan), District (Kecamatan), Regency/City, Province, and Postal Code.

C. Purposes of Processing Personal Data

SuperStash may use the Personal Data collected for the following purposes, as well as for any other purposes permitted under applicable laws and regulations in connection with SuperStash:

  1. SuperStash may use your Personal Data solely for the following processing purposes:
    • Full Name — Used to identify you and serve as an identifier for the purpose of processing your orders.
    • Registered Phone Number — Used as a means of communication with you in the event of difficulties with the delivery of goods, order processing, or the delivery of an OTP (One-Time Password) code.
    • Residential Address (including street name, RT, RW, Urban Village, Sub-District, Regency/City, Province, and Postal Code) — Used to identify the location you have selected for the purpose of delivering goods.
    • Device Information — Used to obtain information about the type of device you use.
  2. SuperStash may also use your Personal Data more generally for the following processing purposes:
    1. To provide and maintain the Platform, including monitoring the use of SuperStash.
    2. To manage your registration as a user of SuperStash. The Personal Data you provide may give you access to various features of the Platform that are available to you as a registered user.
    3. To contact you by telephone calls, SMS, or other forms of electronic communication, such as push notifications through the mobile application, regarding updates or informative communications related to the features, products, or services you have contracted for, including security updates, where necessary for their implementation.
    4. To provide you with news, special offers, and general information about other goods, services, and events offered by SuperStash that are similar to those you have already purchased or inquired about, unless you have opted not to receive such information.
    5. To respond to and manage your requests to SuperStash.
    6. We may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of SuperStash promotional campaigns, and evaluating and improving SuperStash services, products, features, marketing, and your overall experience.

D. Personal Data Retention — Duration

SuperStash will retain your Personal Data only for as long as necessary to fulfill the purposes set out in this Privacy Policy, unless you request that SuperStash delete your Personal Data. SuperStash will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if SuperStash are required to retain your data to comply with applicable laws), resolve disputes, and enforce our agreements and legal provisions under Law No. 27 of 2022 concerning Personal Data Protection, together with its implementing regulations and other relevant regulations.

E. Personal Data Transfers

SuperStash may transfer your Personal Data to other parties with whom we have established a business relationship (hereinafter referred to as “Partners”). The purpose of transferring your Personal Data to our Partners is to facilitate your identity verification based on electronic certificates and to provide services based on electronic certificates in accordance with the provisions applicable to Electronic Certification Providers (PSrE). By agreeing to this Privacy Policy and providing your Personal Data, you consent to the transfer of your Personal Data to our Partners. Accordingly, SuperStash will take all reasonably necessary measures to ensure that your Personal Data is handled securely and in accordance with this Privacy Policy.

F. Data Deletion

You have the right to request the deletion of your Personal Data from our systems. Please note that if your Personal Data is deleted, you may no longer be able to continue using or access certain features of SuperStash. The following is the procedure for requesting the deletion of Personal Data in accordance with the applicable laws and regulations governing electronic information and transactions in Indonesia:

  1. Preparation of a Personal Data Deletion Request:
    1. Submit a written request to SuperStash for the deletion of your Personal Data;
    2. Ensure that the request includes your complete identification details, including your full name, address, contact number, and sufficient information to identify the Personal Data to be deleted;
    3. Clearly state the reasons why the Personal Data should be deleted.
  2. Review of the Deletion Request:
    1. SuperStash will have 30 days from the date of receipt of the request to review the request; and
    2. SuperStash will evaluate the reasons and validity of the Personal Data deletion request submitted.
  3. Deletion Decision:
    1. If SuperStash approve the deletion request, SuperStash will promptly delete the relevant Personal Data from all storage media under our control; and
    2. The deletion process must be completed within 14 days from the date of the review of the request.
  4. Deletion Notification:
    1. Once the Personal Data has been deleted, SuperStash will notify you in writing or through a previously agreed communication channel; and
    2. Such notification will include information regarding the Personal Data that has been deleted and the date of deletion.

G. Addition and/or Modification of Data

SuperStash provides you with the right to correct the Personal Data SuperStash holds about you if your Personal Data is inaccurate, irrelevant, outdated, or incomplete. The following are the procedures for requesting the addition and/or modification of your Personal Data:

  1. To request the addition and/or modification of your Personal Data, you must first access your Personal Data held by SuperStash;
  2. If you believe that the Personal Data SuperStash hold is inaccurate, irrelevant, outdated, or incomplete, you may submit a written request to SuperStash for the addition and/or modification of your Personal Data. Only you may submit a request for the addition and/or modification of your Personal Data;
  3. If you submit a written request to us, please refer to the contact details of the SuperStash Data Controller set out below;
  4. SuperStash will respond to a verified request as soon as possible, but no later than 3 × 24 hours after receiving the request. If circumstances cause a delay in SuperStash response, you will be notified promptly and provided with an estimated date for SuperStash response;
  5. Once SuperStash has made the addition and/or modification to your Personal Data as requested, you will be notified in writing or through a previously agreed communication channel. Such notification will include details of the Personal Data that has been added and/or modified, together with the date on which the addition and/or modification was made.

H. Data Security and Confidentiality

  1. SuperStash will take appropriate measures to ensure the safety and security of your Personal Data. SuperStash ensures that any information you provide to access or use SuperStash is protected by standard security features designed to safeguard the confidentiality and security of your information. SuperStash will also use our best efforts to mitigate risks associated with data loss, misuse, unauthorized access, and unauthorized disclosure or alteration.
  2. SuperStash will notify you if any issue arises in SuperStash efforts to protect the confidentiality of your Personal Data within SuperStash electronic systems, in accordance with applicable laws and regulations.

I. Data Controller

PT Putra Abyudaya Nusantara
Address: Ruko Fortune Business & Industrial Park Blok A-09, Jalan Tambak Sawah, Tambakrejo, Waru, Sidoarjo Regency, East Java, Indonesia
Phone: +62 851-9652-5903
Email: help@superstash.id

J. Links to Other Websites

SuperStash services may contain links to other websites that are not operated by SuperStash. If you click on a third-party link, you will be directed to that third party’s website. SuperStash strongly advises you to review the Privacy Policy of every website you visit. SuperStash has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party websites or services.