Privacy Policy
Last updated: September 2026
1. Introduction
At Biforst Logistics, we respect your privacy and are committed to protecting your personal data. This policy explains data processing on Biforst's public website and Biforst's worker mobile app separately. The public website does not require an account or login; the mobile app is for authorised workers and supports operations such as attendance and trip execution. This policy is written in plain language and is not legal advice.
2. The Data We Collect About You
For the website, we receive information you enter through the contact form. For the mobile app, and only when the relevant feature is used and permitted, we may process these categories:
- Name, email address, phone number (optional), and company name (optional).
- The service of interest and the contents of your message.
- A Cloudflare Turnstile security token when the form is submitted, plus the IP address sent to that verification service for security checks.
- Language and theme preferences stored on your device through localStorage.
- Worker identity and profile information needed for a work account and operational tasks.
- Attendance and trip data, including assignments or trip-execution status.
- Precise location/GPS during working hours or trips using a tracking feature, subject to device permissions.
- Camera or photo data when the camera/photo feature is enabled for operational needs.
- App or device diagnostics only if collected by the version of the app in use and needed for app function, security, or troubleshooting.
3. How We Use Your Personal Data
We use personal data only as needed to operate this site, respond to contact requests, secure the form, and meet applicable legal obligations:
- Responding to service questions and requests sent through the contact form.
- Keeping the form secure and preventing automated or abusive submissions through Cloudflare Turnstile.
- Remembering language and theme preferences so the site works as selected.
- Managing work accounts, attendance, assignments, and trip execution in the mobile app.
- Using GPS during work or trips for related coordination, monitoring, safety, and operational records.
- Using enabled camera or photos for related operational documentation and evidence.
- Maintaining app security, stability, and support where diagnostic data is available and needed.
- Complying with applicable legal obligations where required.
4. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
5. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
Email: privacy@biforst.co.id
Address: Jakarta, Indonesia
6. Data Sharing
Contact form data is sent to Biforst's contact endpoint and, in the current implementation, logged server-side for handling the request. App data may be accessed by Biforst personnel and service providers that help operate or support the app, only as needed. We do not sell personal data. Cloudflare receives the token, hostname, and IP address needed to verify Turnstile. This site does not use Google OAuth or a third-party login service. We do not share app location or photos for advertising.
7. Retention
Form data is kept only as long as needed to review and follow up on the request, or as required by law. App data, including attendance, trips, location, and photos, is kept only as needed for the related operational purpose, security, incident handling, and legal obligations, or under applicable internal policies. The current website implementation does not email the submission or create user accounts. Language and theme preferences remain on your device until you clear site data or change them.
8. Your Rights
Depending on applicable law, you may request access to, correction or deletion of, or restriction of use of your personal data, and object to certain processing. Workers may also raise questions or requests about app data with their supervisor or Biforst. Contact us below to make a request; we may ask for information to verify your identity.
9. Cookies and Local Storage
This site uses localStorage, not cookies, to remember language and theme choices. The contact form loads Cloudflare Turnstile, which may use storage or cookies needed for bot detection and security. The site code does not use analytics or advertising cookies.
10. Third-Party Services
A locally hosted video is used for the visual element on the home page. Cloudflare Turnstile is called when the contact form is used. Apart from these services, the site code does not integrate Google OAuth, Google Analytics, or a third-party login provider.
11. Mobile App Permissions and Controls
The app may request device permission for location/GPS and camera only when the relevant feature is used. You can review, refuse, or withdraw those permissions in your device settings, but features that depend on them may not work. For workers, attendance, trips, location during work/trips, and operational photos must follow applicable work instructions. Contact your supervisor or Biforst if a permission, data item, or feature does not work as expected.
12. Scope and Changes
This policy applies to Biforst's public website and worker mobile app. We may update it when features, processes, or legal requirements change. The latest version and update date will be shown on this page.