Last updated: 8 November 2026
This Privacy Policy explains how Sitepu Gozali Sitorus Law Firm (“SGS Law Firm”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit this website (the “Website”) or contact us through it. We process personal data in accordance with applicable Indonesian law, including Law No. 27 of 2022 on Personal Data Protection.
This policy applies to visitors of the Website and to people who contact us before becoming a client. Information that clients share with us in the course of an engagement is protected by professional confidentiality obligations and is handled in line with our engagement terms, in addition to this policy.
1. Who we are
Sitepu Gozali Sitorus Law Firm is a law firm based in Jakarta, Indonesia. We are the party that decides how and why your personal data submitted through the Website is processed. You can reach us at the details in section 12.
2. Personal data we collect
Information you give us. When you use the contact form on the Website we collect your full name, email address, telephone number, the service you are interested in and the message you write. We also keep the information you provide when you email or call us.
Information collected automatically. Like most websites, our web server and security tools may record technical information such as your IP address, browser type, device, the pages you visit and the date and time of your visit. We use this information to keep the Website secure and running properly.
Cookies and analytics. At the time of the last update, the Website does not set cookies for ordinary visitors and does not use analytics or advertising tools. Cookies may be used when our staff log in to manage the Website. If we introduce analytics or advertising tools in future, we will update this policy and, where required, ask for your consent first.
Third-party resources. The Website loads fonts from Google Fonts. When a page loads, your browser connects to Google’s servers, which means your IP address is shared with Google. Please see Google’s own privacy policy for how Google handles that data.
3. How we use your personal data
- to respond to your enquiry and provide information about our services;
- to carry out conflict-of-interest checks and to prepare for a possible engagement at your request;
- to keep the Website secure, prevent abuse and fix technical problems;
- to comply with our legal and professional obligations; and
- to establish, exercise or defend legal claims.
4. Our basis for processing
We process your personal data on the basis of your consent (for example, when you submit the contact form), to take steps at your request before entering into an engagement, to meet our legal obligations, and for our legitimate interests in running and securing the Website, in each case as permitted under Law No. 27 of 2022. Where we rely on your consent, you may withdraw it at any time.
5. Who we share it with
We do not sell your personal data. We may share it only with:
- service providers that help us run the Website and our communications, such as hosting, email and IT support providers, who may access it only to provide their services and are required to keep it confidential;
- professional advisers, where this is necessary to obtain advice; and
- courts, government authorities or law enforcement, where required by law or to protect our rights.
6. Transfers outside Indonesia
Some of our service providers may store or process data on servers located outside Indonesia. Where this happens, we take reasonable steps to make sure your personal data receives a level of protection that meets the requirements of applicable law.
7. How long we keep it
We keep personal data only for as long as we need it for the purposes described in this policy, including to follow up on your enquiry and to meet legal, accounting and professional record-keeping requirements. When we no longer need it, we delete or anonymise it.
8. Security
We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, so please do not send confidential or privileged information through the Website or by email until we have confirmed in writing that we act for you.
9. Your rights
Under Law No. 27 of 2022 you have rights over your personal data, including the right to:
- be informed about how your personal data is processed;
- access your personal data and obtain a copy of it;
- correct or complete personal data that is inaccurate or incomplete;
- ask us to stop processing, delete or destroy your personal data;
- withdraw your consent to processing; and
- object to or ask us to restrict certain processing.
To exercise any of these rights, please email us at info@sgslawfirm.com. We may need to verify your identity before we act on your request, and some rights may be limited where the law requires us to keep the data.
10. Children
The Website is not directed at children, and we do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has given us personal data, please contact us so that we can delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will apply from the date it is published on the Website, as shown by the “Last updated” date above.
12. Contact us
If you have questions about this policy or how we handle your personal data, please contact us at:
Sitepu Gozali Sitorus Law Firm (SGS Law Firm), Jakarta, Indonesia. Email: info@sgslawfirm.com. Telephone: (+62) 811-1443-339.