Legal document

UU PDP & Data-Subject Requests

Last updated: 2026-06-10

Prepared in accordance with Law No. 27 of 2022 on Personal Data Protection (UU PDP).

This summary is provided for transparency and is not specific legal or tax advice. Questions? Contact support@tagihin.id.

Under Indonesia's Personal Data Protection Law No. 27 of 2022, you have several rights over the personal data Tagihin holds about you. This page summarises those rights and how to exercise them.

1. Data Protection Contact

Cavastir (operator of Tagihin) is the controller of your personal data. For any question or request relating to your personal data and your rights under the UU PDP, please contact our data-protection point of contact.

Data Protection Contact: dpo@tagihin.id

2. Your rights at a glance

Access — request a copy of your data
Rectification — correct inaccurate data
Erasure — request deletion in certain cases
Withdraw consent — at any time
Object / restrict — object to or restrict processing
Portability — receive a machine-readable export

The full description of each right is in our Privacy Policy (section 8).

3. How to submit a request

You can exercise your rights in three ways:

Use the form below
Email dpo@tagihin.id
Self-serve export or deletion from the in-app Settings page

Data-subject request form

We will reply to the email you provide. We may ask you to verify your identity to protect your data.

4. Response time

We will respond to your request within 30 days of receipt.

5. Complaint to the supervisory authority

If you believe our processing of your data is unlawful, you have the right to lodge a complaint with the personal-data protection supervisory authority (interim oversight currently sits with the Ministry of Communications and Digital Affairs / Komdigi, pending establishment of the UU PDP supervisory body).