How we handle the information entrusted to ENlight.

ENlight treats personal information as part of a trusted professional relationship. We aim to be transparent about the information we handle and to use it responsibly in support of our creative, event, digital, and client work.

This policy explains how PT ENlight Creation Indonesia (ENlight, we, us) handles personal information in connection with creationenlight.com, inquiries, appointments, communications, projects, events, campaigns, and related business relationships.

It applies to website visitors, prospective and existing clients, partners, event or campaign participants, talent and creators, community participants, and people who contact us. A project, event, or campaign may also have a more specific notice where appropriate.

PT ENlight Creation Indonesia is a creative and experiential partner working across event management, experiential marketing, creative production, digital marketing, brand strategy, content production, talent or creator management, community activation, and website development.

The information we handle depends on how you interact with us and the service involved.

We may receive information when you complete a form, subscribe to the newsletter, contact us by email, phone, WhatsApp, chat, or social channels, arrange a meeting, take part in an event or campaign, or otherwise communicate with us.

We may also receive information from a person or organisation authorised to communicate with us about a project or partnership.

We use information to respond to inquiries, understand requirements, arrange meetings, provide requested services, manage projects and client relationships, operate events and campaigns, improve our website and services, and protect against spam, fraud, abuse, and security incidents.

The basis for processing depends on the situation and applicable law. It may include your consent, steps requested before entering a business relationship, performance of an agreement, compliance with legal obligations, protection of legitimate interests, or another basis permitted by applicable law.

We do not treat consent as the only basis for every interaction. Where consent is needed, you may withdraw it as described below.

Information moves through our work only as needed to support the relationship and requested service. Relationship management may continue where reasonably necessary for an ongoing client, partner, or community relationship.

1. 01Website
2. 02Inquiry / appointment
3. 03Business & CRM systems
4. 04Client communication
5. 05Project / campaign
6. 06Relationship management
7. 07Retention / deletion

We use HubSpot for website tracking and CRM-related operations. Information from inquiries, appointments, and business communications may be recorded in CRM or related business systems when needed to manage relationships, follow up on requests, and coordinate services.

We limit access to people and providers with a legitimate operational need. We do not publish private system addresses, credentials, or workflow details.

The website uses a locale-preference cookie and may use cookies or similar technologies associated with Google Tag Manager, HubSpot, and other configured services. These may support website operation, remember preferences, or help understand performance and visitor behaviour.

A dedicated Cookie Policy and Cookie Preferences experience are not yet published. You can manage many cookies through browser settings; doing so may affect website features.

Google Tag Manager is implemented to manage website tags and measurement. HubSpot also records website activity, including page views during client-side navigation. We use this information to understand website performance and improve the visitor experience.

This policy does not claim the use of advertising pixels or other analytics services that are not verified in the current website implementation.

The current implementation identifies HubSpot, Google Tag Manager, Crisp, Google Apps Script, Resend, Fonnte, Google Maps, and ipapi.co as third-party services supporting CRM, tag management, website chat, newsletter processing, email delivery, WhatsApp notifications, location links, or approximate visitor location requests.

Providers process information according to their roles, our configuration, their terms, and applicable law.

We may share information with authorised service providers, relevant project partners where needed to deliver a requested service, professional advisers, or authorities when required by law or necessary to protect rights, safety, and security. ENlight does not sell personal information.

Some service providers may process information outside Indonesia. Where international processing is involved, we consider safeguards appropriate to the applicable legal and operational context. We do not represent that all information is stored only in Indonesia.

We retain information only as long as reasonably necessary for the purposes described here, including business operations, client relationships, legal obligations, security, dispute resolution, and legitimate operational requirements. Retention can vary by information type and context.

We aim to keep information accurate and relevant for the purpose for which it is used. Please let us know if your contact details or other information needs correction or updating.

We use reasonable technical and organisational measures intended to protect information from unauthorised access, disclosure, alteration, loss, or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If we become aware of a personal-data security incident, we will assess it, take reasonable steps to contain and investigate it, and address notification obligations in accordance with applicable law and the circumstances.

Subject to applicable Indonesian privacy law and the processing context, you may ask to access, correct, update, or delete information; withdraw consent where applicable; ask how information is used; or raise a privacy concern. We may need to verify a request before acting on it.

Where we rely on consent, you may withdraw it by contacting us. Withdrawal does not necessarily affect processing already undertaken before the withdrawal or processing that has another valid legal basis.

Our website and services are not intentionally directed to children unless expressly stated otherwise. If you believe a child has provided personal information without required permission, please contact us so we can assess and take appropriate steps.

Our website may link to third-party websites, platforms, maps, or communication services. Their privacy practices are governed by their own policies. We encourage you to review them before providing information directly to those services.

Service and business communications can include inquiry responses, appointment confirmations, proposals, quotations, project updates, contractual messages, and reasonable relationship management. These communications are distinct from optional marketing communications.

Project briefs, creative materials, documents, and other professional information may be handled to evaluate, plan, deliver, or manage a requested engagement. Please avoid sending information that is unnecessary for the relevant request.

For some projects, ENlight may handle personal information on behalf of a client or partner. The relevant client or partner may determine the purpose and instructions for that processing, and project-specific agreements or notices may apply.

We may use contact and engagement information to understand whether ENlight services may be relevant to a business relationship. Marketing communications are optional where consent is required and are not a condition of submitting an inquiry or receiving requested services.

We may update this policy to reflect changes to services, practices, or legal requirements. The date shown at the top identifies the current version.

This policy is intended to be read in the context of applicable Indonesian personal-data protection requirements and other laws that may apply to a particular relationship, project, or processing activity.

If you have questions about this policy, how information is handled, or wish to exercise applicable privacy rights, please contact ENlight using the official business contact details below.

This Privacy Policy is the central personal-data framework. Cookie Policy, Cookie Preferences, and Terms & Conditions will be published as separate resources when ready. We do not link to unpublished pages.