Privacy Policy

Privacy Policy

Last updated: 28 October 2026

1. Who we are

What's On Jakarta ("we", "us") is a free, independent guide to upcoming public events in Jakarta and Greater Jakarta. It is a small, one-person operation based in Jakarta, Indonesia. This policy explains what personal data we collect through this website, why, and what your rights are.

We are the controller of the personal data described here for the purposes of Indonesia's Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi, "UU PDP").

2. What we collect and why

You can browse the site without giving us any personal data. There are no visitor accounts, logins, comments, reviews or ratings. We only collect data in the following ways:

• Event submissions. When you use the "List your event" form, we receive the event details and any images you send, plus your name and email address if you choose to give them. We use this to review, publish and, where needed, check or update the listing with you.
• Contact form. When you contact us, we receive your name, email address and message. We use this only to reply and deal with your enquiry.
• Technical data. Like most websites, our hosting platform automatically records standard server logs (such as IP address, browser type, pages visited and time of visit). We use this to keep the site running, secure and working properly. We may also use privacy-friendly analytics to understand, in aggregate, how the site is used so we can improve it.

We do not ask for sensitive personal data, and please don't include any in a submission or message.

3. Legal basis and consent

Under UU PDP we process personal data on a lawful basis. For event submissions and contact messages, that basis is your consent, given when you choose to send the form, and the need to deal with your request. For server logs, essential cookies and site security, it is our legitimate interest in running a safe, working website. You can withdraw your consent at any time (see section 9); this does not affect anything we did before you withdrew it.

4. How long we keep it

We keep personal data only as long as we need it:

• Submitter contact details: for as long as the related listing is live or under review, and for a reasonable period afterwards in case questions arise, then deleted.
• Contact form messages: for as long as needed to deal with your enquiry and any follow-up.
• Server logs and analytics: for the limited periods set by our hosting and analytics tools.

Event details and images that have been published form part of the public guide and may stay online as part of our archive of past events, unless you ask us to remove them.

5. Sharing your data

We never sell your personal data, and we do not share it with advertisers. The only third parties who handle it are the service providers that help us run the site, such as our directory and hosting platform (the site runs on the Listable directory platform) and our image hosting. They process data on our behalf and only for that purpose. We may also disclose data if the law requires it.

Some of these providers may store data on servers outside Indonesia. Where that happens, we rely on providers that apply appropriate data protection standards, as UU PDP requires.

6. Third-party links

Event listings link to organisers' websites and to official ticket sellers such as Loket and tiket.com. We don't control those sites. Anything you share with them, including ticket purchases and payments, is handled under their own privacy policies and terms, so please read them.

7. Cookies and analytics

We use essential cookies needed for the site to work, and we may use privacy-friendly analytics that tell us how the site is used overall. We do not use cookies to build advertising profiles of you. You can block or delete cookies in your browser settings; the site should still work for browsing events.

8. Keeping your data safe

We take reasonable technical and organisational steps to protect personal data from loss, misuse and unauthorised access. Access is limited to us and the service providers described above. No website can be completely secure, but if a data breach affects you we will act on it and notify you and the authorities where UU PDP requires.

9. Your rights under UU PDP

Under UU PDP you have the right to:

• be told who we are, why we process your data and on what basis;
• access and get a copy of the personal data we hold about you;
• have inaccurate or incomplete data corrected or updated;
• have your data deleted, or ask us to stop processing it;
• withdraw your consent at any time;
• ask us to delay or restrict processing;
• object to decisions made solely by automated processing (we don't make any); and
• receive your data in a commonly used format.

To use any of these rights, send us a request through the contact form on this website, saying what you would like us to do. We may need to confirm it's really you before acting. We will respond within the time limits set by UU PDP.

10. Children

This site is a general events guide and is not aimed at children. We do not knowingly collect personal data from children. If you are under 18, please ask a parent or guardian before sending us any personal data. If you think a child has sent us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be shown on this page.

12. Contact us

For any privacy question or request, please use the contact form on this website.