Privacy Policy
Last updated: 1 October 2026.
This policy explains how data is handled when you use the website and services of Rawat Web, a website care team in Semarang, Central Java, Indonesia. For questions or data requests, contact [email protected].
Data we receive
The diagnosis form asks for your name, website URL, WhatsApp or email, a description of the problem, and the issue type if you choose one. The system also processes the submission time, IP address, and security verification result in order to follow up on the request and limit spam.
The initial diagnosis does not ask for passwords. Do not write passwords, OTP codes, card numbers, or customer data in the form. Information you send via WhatsApp or email also becomes part of your request communication.
What the data is used for
- Reviewing the symptoms, contacting you back, and preparing the scope and quote.
- Carrying out the work you approve, logging changes, and handing over reports.
- Protecting the form from automated submissions and abuse.
- Meeting applicable service-record or legal obligations.
Submitting the form is not consent to receive promotions and not permission to modify your website. We do not sell contact data or add form contacts to a promotion list.
Storage and processors
Diagnosis requests are sent as email to our team. The endpoint does not create a prospect database. A copy of the request may remain in the inbox and in the conversation while it is being followed up. The spam limiter stores a hashed IP marker and the request time in a cache for a short limiting window, not the form contents.
Cloudflare processes the site connection, email delivery, and Turnstile verification. The receiving inbox uses Gmail; if you choose chat, WhatsApp also processes that communication. These providers may process data outside Indonesia under their own policies and safeguards. The Turnstile token is not included in the diagnosis email.
This site adds no promotional trackers through the diagnosis form. Turnstile may process device and browser signals for the security check. More information is available in Cloudflare's privacy policy. Other providers' policies also apply when you use their services.
Website access and backup copies
If the work requires access, the needs and the secret-sharing channel are agreed separately. We prefer limited accounts or temporary access. Access passwords are stored in a password manager, not in notes or chat, and are never requested through the diagnosis form.
Backups are made before changes. Data in backups is used only for approved checks and recovery. Access is limited to the people doing the work. After handover you can revoke access and change passwords; ownership of the website, domain, and hosting remains yours.
How long data is kept
Request data, conversations, reports, and backups are kept as long as needed for follow-up, work, handover, or applicable record-keeping obligations. The backup retention period for a job is agreed in the quote, not automatically unlimited. We review data that is no longer needed and you can request its deletion. Copies managed by other providers follow those providers' policies.
Your choices and rights
You can request access to or a copy of the data we hold, correct your contact details, withdraw access permission, stop communication, or request deletion by contacting [email protected] or WhatsApp +62 823-2569-9629.
We may ask for reasonable verification so data is not handed to someone else. If some records must be retained for legal obligations or dispute resolution, we explain the limits. Withdrawing access mid-job may make the work impossible to continue; the next options are discussed together.
Security and policy changes
We limit access, use secure connections, and log changes. No system is entirely risk-free. If an incident affects data we manage, we follow up and notify affected parties as required by applicable rules.
Policy changes will be shown on this page together with the update date. Changes to the scope of a job still require separate approval, not merely a change to this site policy.