Privacy Policy

eResto – Enterprise Resource Planning System

Effective Date: November 5, 2026
Last Updated: November 5, 2026
Platform: eResto ERP
Company: [Company / Legal Entity Name]
Website: [Official Website URL]
Contact Email: [Official Contact Email]

1. Introduction

Welcome to eResto, an Enterprise Resource Planning (ERP) platform designed to help businesses manage, integrate, and optimize their operational activities through a centralized digital system.

At eResto, we recognize that privacy, data protection, and information security are essential to maintaining the trust of our users and business partners.

This Privacy Policy explains how we collect, use, process, store, disclose, and protect personal information and business data when you access or use our platform and related services.

By accessing or using eResto, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to all individuals and organizations that access or use eResto, including:

Business owners and company representatives.
System administrators.
Managers and supervisors.
Cashiers and operational staff.
Employees and authorized personnel.
Customers whose information is processed through the platform.
Suppliers, vendors, and other business partners.

This policy covers all eResto services and features, including its web application, administrative dashboard, Point of Sale (POS) system, and other integrated services.

3. Information We Collect

To provide and improve our services, eResto may collect and process the following categories of information.

3.1 User Information

We may collect personal information such as:

Full name.
Email address.
Phone number.
Username.
User profile information.
Job title and organizational role.

3.2 Business and Company Information

Information related to business operations may include:

Company or business name.
Branch and outlet information.
Business addresses.
Department and division information.
Operational records.
Supplier and vendor information.
Product and service information.

3.3 Transaction and Financial Information

When using eResto’s business management features, the platform may process:

Sales and purchase transactions.
Transaction histories.
Payment information and records.
Accounts receivable and payable.
Tax and service charge information.
Revenue and expense records.
Financial reports and reconciliation data.

3.4 Customer Information

Information about customers entered into the platform may include:

Customer names.
Phone numbers.
Email addresses.
Billing and delivery addresses.
Transaction histories.
Customer preferences and service-related information.

3.5 Employee Information

To support workforce and operational management, eResto may process:

Employee names.
Contact information.
Job positions and departments.
User permissions and access privileges.
System activity records.
Attendance and employment-related information, where applicable.

3.6 Technical and Usage Information

We may automatically collect certain technical information, including:

IP addresses.
Device information.
Operating system details.
Browser types and versions.
Access timestamps.
System and application logs.
Authentication and security records.
Diagnostic and performance information.

4. How We Use Your Information

The information collected through eResto may be used for the following purposes:

To provide, operate, and maintain the eResto platform.
To manage user accounts, authentication, and access permissions.
To process sales, purchases, and payment transactions.
To manage inventory, stock movements, and product distribution.
To support customer, supplier, and employee management.
To generate operational, financial, and business performance reports.
To improve platform functionality, reliability, and performance.
To detect, prevent, and investigate suspicious or unauthorized activities.
To provide customer support and technical assistance.
To comply with applicable legal and regulatory obligations.

We will not process personal information for purposes that are incompatible with the purposes for which it was collected, unless permitted by applicable law.

5. Legal Basis for Processing

We process personal information based on applicable lawful grounds, which may include:

Your consent.
The performance of a contract or the provision of requested services.
Compliance with applicable legal obligations.
Legitimate interests, where permitted by law and subject to the rights of data subjects.
Other lawful grounds recognized under applicable data protection regulations.

6. Data Storage and Security

eResto implements appropriate technical and organizational measures designed to protect information against:

Unauthorized access.
Unauthorized use or disclosure.
Data alteration or manipulation.
Accidental loss or destruction.
Cyberattacks and other malicious activities.

Our security measures may include:

Authentication mechanisms and role-based access control.
Encrypted connections using HTTPS/SSL.
Secure server and database infrastructure.
System activity monitoring and audit logging.
Regular data backup procedures.
Access restrictions based on operational requirements.

While we take reasonable measures to protect information, no electronic storage or transmission system can be guaranteed to be completely secure.

7. Information Sharing and Disclosure

eResto does not sell or rent users’ personal information to third parties.

However, information may be shared with authorized third parties when necessary to provide our services or fulfill legitimate purposes.

7.1 Infrastructure and Technology Providers

We may work with service providers that support our platform, including:

Hosting and cloud infrastructure providers.
Database and storage providers.
Information security providers.
Email and notification service providers.

7.2 Third-Party Service Integrations

When users enable third-party integrations, relevant information may be processed by external service providers, including:

Payment gateway providers.
Tax and accounting services.
Communication and messaging services.
Analytics providers.
Other business software integrations.

7.3 Legal and Regulatory Requirements

We may disclose information when required by applicable laws, court orders, or lawful requests from authorized government authorities.

All information sharing will be limited to what is reasonably necessary and permitted under applicable laws.

8. User Rights and Responsibilities

Users have rights regarding their personal information, subject to applicable data protection laws.

These rights may include:

The right to obtain information about personal data processing.
The right to access and obtain copies of personal information.
The right to request correction of inaccurate or incomplete information.
The right to request deletion or destruction of personal information, where legally permitted.
The right to withdraw consent where processing is based on consent.
The right to object to certain processing activities.
The right to submit complaints regarding personal data processing.

Users are also responsible for:

Maintaining the confidentiality of their usernames and passwords.
Preventing unauthorized access to their accounts.
Ensuring that information entered into the platform is collected and processed lawfully.
Managing employee access permissions appropriately.
Reporting suspicious activities or suspected data breaches to eResto.

9. Business Customer Data Responsibilities

eResto allows businesses to store and manage personal information relating to their customers, employees, suppliers, and other business contacts.

In such cases, the business customer is responsible for ensuring that the collection and processing of personal information through the platform complies with applicable data protection laws.

eResto processes such information to provide its services in accordance with applicable service agreements, customer instructions, and configured platform settings.

The respective roles of each party as a Personal Data Controller or Personal Data Processor will depend on their actual functions and responsibilities in the relevant data processing activities.

10. Data Retention and Deletion

We retain information only for as long as reasonably necessary to:

Provide and maintain eResto services.
Fulfill contractual obligations.
Support legitimate business and operational requirements.
Comply with applicable legal and regulatory retention requirements.
Resolve disputes and maintain legitimate audit records.

When information is no longer required, it may be deleted, destroyed, or anonymized in accordance with our retention policies and applicable laws.

Users may submit data deletion requests through our official contact channels, subject to applicable legal obligations and legitimate retention requirements.

11. Cookies and Tracking Technologies

eResto may use cookies and similar technologies to support the functionality and performance of the platform.

These technologies may be used to:

Maintain user login sessions.
Remember user preferences.
Improve application usability.
Monitor application performance and stability.
Support platform security.

Users may manage cookie preferences through their browser settings. However, disabling certain cookies may affect the functionality of some eResto services.

12. International Data Transfers

If eResto uses infrastructure or service providers located outside Indonesia, personal information may be processed or transferred internationally.

Any international transfer of personal information will be conducted in accordance with applicable data protection laws and relevant requirements concerning adequate protection and lawful international data transfers.

13. Data Security Incidents

In the event of a personal data security incident, eResto will take appropriate measures to investigate, mitigate, and address the incident.

Where required by applicable law, we will notify affected parties and relevant authorities within the legally prescribed timeframe.

We are committed to handling security incidents responsibly and transparently.

14. Changes to This Privacy Policy

eResto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal requirements.

Any updates will be published through our official website or platform.

Users are encouraged to review this Privacy Policy periodically to remain informed about how their information is handled.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact us through the following channels:

Platform: eResto ERP
Company: [Company / Legal Entity Name]
Email: [privacy@yourdomain.com]
Website: [https://yourdomain.com]
Address: [Company Registered Address]

We will review and respond to inquiries and requests in accordance with our internal procedures and applicable legal requirements.

16. Acknowledgment