Privacy Policy

Effective date: 26 July 2026

PT Korea Investment Management Indonesia (“KIM Indonesia”, “we”, “us”, or “our”) respects privacy and is committed to protecting the personal data of website users, prospective investors, investors, complainants, and other individuals who interact with us. This Privacy Policy explains how we collect, use, retain, disclose, and protect personal data through our official website, digital forms, communications, and related services.

1. Personal Data Controller

The personal data controller for the processing described in this policy is PT Korea Investment Management Indonesia, an investment management company registered with and supervised by the Indonesia Financial Services Authority (OJK), located at Sequis Tower, 6th Floor, Jl. Jend. Sudirman Kav. 71, South Jakarta 12190, Indonesia.

2. Scope

This policy applies to personal data processing through the KIM Indonesia website, the “Start Investing” and “Contact Us” forms, the complaints service, email or telephone communications, and other digital interactions that refer to this policy. Third-party websites and services are governed by their own privacy policies.

3. Personal Data We Collect

Depending on your interaction with us, we may collect the following categories:

Please do not provide another person's personal data unless you have the authority or another lawful basis to do so.

4. How We Collect Data

We collect data directly when you complete a form, contact us, submit a complaint, or provide documents and information. Certain technical data is collected automatically when your device interacts with the website. We may also receive data from authorized parties or official partners to provide services and comply with legal obligations.

5. Purposes of Processing

We process personal data to:

1. respond to questions, information requests, and contact requests;
2. follow up on interest in investment products or services through official channels and partners;
3. receive, verify, handle, and document complaints;
4. provide services, administration, support, and user communications;
5. secure the website and prevent misuse, fraud, and unauthorized access;
6. analyze usage and improve functionality, service quality, and user experience;
7. conduct audits, governance, risk management, compliance, reporting, and record keeping;
8. comply with legal obligations and lawful authority requests, or protect the legal rights and interests of KIM Indonesia or others; and
9. carry out other purposes disclosed to you and, where required, based on your consent.

6. Legal Bases

Depending on the context, processing is based on consent, performance or preparation of a contract, compliance with legal obligations, performance of a task in the public interest, and/or KIM Indonesia's legitimate interests as balanced against your rights. Where processing relies on consent, you may withdraw it without affecting processing lawfully carried out before withdrawal.

7. Cookies, Analytics, and Abuse Prevention

The website uses cookies or similar technologies required for sessions, security, and core functionality. Certain forms are protected by Cloudflare Turnstile to distinguish legitimate interactions from automated activity. If configured, Google Tag Manager may be used to manage measurement tags and understand website usage. Relevant providers may process technical data under their respective terms. You can control cookies through your browser, although disabling required cookies may prevent parts of the website from functioning.

8. Personal Data Disclosures

We do not sell personal data. To the extent required for the purposes described in this policy, data may be disclosed to:

We require recipients to process data only for legitimate purposes and with appropriate safeguards.

9. International Data Transfers

If technology or corporate-group support causes data to be processed outside Indonesia, we will apply the required cross-border transfer conditions and safeguards, including assessing the level of protection, using contractual safeguards, and/or obtaining consent where required.

10. Retention and Deletion

We retain data for as long as necessary for the processing purpose, complaint handling, service relationship, proof of consent, audits, dispute resolution, and legal or regulatory obligations. Retention periods vary according to the data and applicable requirements. When no longer required, data will be securely deleted, destroyed, or anonymized unless further retention is required or permitted by law.

11. Data Security

We apply reasonable administrative, technical, and physical measures, including access controls, transmission safeguards, security logging, internal procedures, and service-provider assessments. Nevertheless, no electronic transmission or storage method is entirely risk-free. If an incident meets applicable notification requirements, we will respond and provide notifications in accordance with applicable law.

12. Your Rights

Subject to legal limits and exceptions, you may request:

We may request information to verify the identity and authority of the requester. Some requests may be restricted where necessary to protect others, maintain confidentiality, or comply with legal obligations.

13. Children's Data and Legal Capacity

This website is not intended to independently collect data from children. Where an individual lacks legal capacity, the submission of data and use of services must be carried out or approved by a parent, guardian, or other authorized person in accordance with applicable law.

14. Third-Party Links

The website may link to distribution partners, regulators, social media, or other third-party websites. KIM Indonesia does not control how those parties process data. Review the third party's privacy and security information before submitting data or entering into a transaction.

15. Policy Changes

We may update this policy to reflect changes in services, technology, practices, or legal requirements. The latest version and its effective date will be displayed on this page. If a change requires new consent, we will request it through an appropriate channel.

16. Contact and Privacy Requests

For questions, data-subject rights requests, or privacy complaints, contact:

PT Korea Investment Management IndonesiaSequis Tower, 6th FloorJl. Jend. Sudirman Kav. 71South Jakarta 12190, IndonesiaTelephone: +62 21 299 11 808Email: cs@koreainvestment.co.id

You may also use the financial-services complaint mechanisms available under OJK regulations.