Legal
Privacy Policy
Last updated: 8 October 2026
Template text prepared for the GEX 2026 launch. It is not legal advice; have a qualified Indonesian lawyer review it before relying on it.
1. Who we are
INDOGUITARSHOW ("we") operates this website and the GEX 2026 exhibitor portal and is the controller of the personal data described here. We handle personal data in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and related regulations.
2. Data we collect
Visitors: we do not require an account to browse. Our servers log technical data such as IP address, browser type and pages requested. Exhibitors: your name, email address, a password (stored only as a salted hash), company name, biography, website links, logo and gallery images, chosen booth, payment reference, and the proof of payment you upload.
3. Why we use it
To run your exhibitor account and public exhibitor page; to reserve booths and verify bank transfers; to communicate about GEX 2026; to keep the website secure and working; and to meet legal obligations. Our legal bases are your consent, performance of our agreement with you, our legitimate interests in running a safe event, and legal duty.
4. What is public
Your company name, biography, links, logo, booth and page URL are shown publicly once your exhibitor page is approved. Your email address, password, payment reference and proof of payment are never shown publicly and are visible only to you and event administrators.
5. Sharing and processors
We share data only with service providers that help us run the site: database hosting (MongoDB), website hosting, and Cloudinary for images and payment proofs. Your browser also contacts Google (map on the Venue page) and YouTube (video thumbnails on the home page), which may receive your IP address under their own policies. We do not sell personal data.
6. Retention
We keep exhibitor account data while your account is active and for as long as needed for accounting, audit and legal purposes afterwards. Server logs are kept for a limited period. You may ask us to delete your data sooner, subject to those obligations.
7. Security
Passwords are hashed, traffic uses HTTPS, admin areas require authenticated roles, and uploads are restricted to your own folder. No system is perfectly secure; if a breach affecting you occurs we will notify you and the authorities as the law requires.
8. Your rights
You may request access to, correction of, deletion of, or a copy of your personal data, withdraw consent, and object to certain processing. Contact us using the details published on the website. You may also complain to the Indonesian data protection authority.
9. Children and changes
The exhibitor portal is for businesses and not intended for children. We may update this policy and will change the date above when we do.