Meratus Group collects personal data that is voluntarily provided during employment and/or through authorized third parties with the right to disclose said personal data. Written notice and consent are obtained for the collection and use of personal data related to employment within the Meratus Group environment. The process of collecting and processing personal or corporate data throughout the Meratus Group is carried out in accordance with data protection procedures, referring to Indonesian regulations, including but not limited to Law Number 27 of 2022 on Personal Data Protection.

Personal data of customers, suppliers, vendors, and/or other third parties will be stored and can be accessed directly by individuals or groups authorized by the Meratus Group to access and process personal data from all Meratus Group entities. This is to fulfill operational and/or administrative needs, including but not limited to agreements, payments, deliveries of goods and/or services, and others, as long as it is required by applicable regulations that prohibit the storage of personal data.

Meratus Group guarantees the monitoring and implementation of the security of personal data belonging to customers, suppliers, vendors, and/or other third parties. The disclosure of personal data to third parties must be carried out with integrity, responsibility, and in accordance with applicable laws and regulations.

All requests from third parties to add and/or reduce points in this Policy must be submitted in writing.