Privacy Policy

Who We Are

star-k.id is operated by STAR-K Certification, Inc. (“STAR-K”, “we”, “us”), 122 Slade Ave, Suite 300, Pikesville, MD 21208, USA. STAR-K is the personal data controller: it decides how and why personal data collected through this website is processed.

Questions about this policy or your data, including requests to our data protection contact, can be sent to rabbimushell@star-k.org or +1 410-484-4110.

What We Collect

• Enquiry form: your name, email address, company, country, the products you want certified, your message, and the type of request you choose.
• Application form: if you apply online, the company, contact, product and facility details the application asks for.
• Email and phone: anything you choose to send us directly.
• Usage data, only with your consent: if you accept analytics cookies, Google Analytics records how the site is used, such as pages viewed, approximate location, device and browser, and how you arrived. See Cookies and Analytics.

We do not ask for specific (sensitive) personal data such as health, biometric, genetic, criminal record, child or personal financial data, and we ask you not to send it.

Why We Use It

• To answer your enquiry and send the information you ask for.
• To assess and process an application for kosher certification and related services.
• To follow up on your enquiry or application.
• If you consent to analytics, to understand how the site is used and improve it.
• To meet legal obligations and protect our rights.

We process your data on the basis of your consent, to take steps you ask for before entering into a certification agreement, to meet legal obligations, and for our legitimate interest in responding to and following up on enquiries. We do not sell your personal data, and we do not use it for advertising.

Is Providing It Required?

Your name and email address are needed for us to reply. The other fields are optional, but leaving them out may mean we need to ask you for them before we can help. Analytics cookies are entirely optional.

Who We Share It With

• STAR-K staff who handle enquiries and certification, including at our headquarters in the United States.
• Service providers that run the site and our email for us, under their own data protection terms: our website host, Google (Analytics, if you consent; web fonts; the map on our Contact page), Jotform (the online application form) and our email provider.
• Authorities, if the law requires it.

Transfers Outside Indonesia

STAR-K is based in the United States and our service providers may store data in the US, Europe or elsewhere. Where the destination country does not offer a level of protection equal to or higher than Indonesian law, we rely on appropriate and binding safeguards with our providers or, where those are not available, on your consent, as the Personal Data Protection Law allows. By sending us your details, you consent to them being handled outside Indonesia. We remain responsible for your data when it is processed abroad.

Cookies and Analytics

The site sets one small cookie to remember your cookie choice. Analytics cookies from Google Analytics are set only if you select “Accept” in the cookie banner. If you decline, no analytics cookies are stored.

You can change your choice at any time using Cookie settings, also in the footer of every page. You can also block or delete cookies in your browser.

Our Contact page shows an embedded Google Map, and the site loads fonts from Google. These connect your browser to Google, which receives your IP address.

How Long We Keep It

We keep enquiry details for as long as needed to deal with your enquiry and any follow-up, and generally for no longer than three years after our last contact. Information that becomes part of a certification file is kept for as long as the certification relationship and our record-keeping obligations require. Analytics data is kept according to Google Analytics retention settings.

Your Rights

Under the Personal Data Protection Law you have the right to:

• be informed of who is processing your data, for what purpose and on what basis;
• access and obtain a copy of the personal data we hold about you;
• complete, update or correct data that is inaccurate or incomplete;
• ask us to stop processing, delete or destroy your data, where the law allows;
• withdraw your consent at any time;
• ask us to delay or restrict processing;
• object to decisions based solely on automated processing (we make none);
• receive your data in a commonly used, machine-readable format and have it sent to another controller;
• sue and receive compensation for a breach of the law in processing your data;
• complain to the Indonesian personal data protection authority; until that authority is established, complaints can be made to the Ministry of Communication and Digital Affairs (Komdigi).

Email rabbimushell@star-k.org with your request. We may need to confirm your identity. We act on correction requests and consent withdrawals within the time the law sets (generally 3 x 24 hours) and reply to other requests within the time the law allows.

Security

The site uses HTTPS, and access to enquiries and applications is limited to the people who need it. No system is completely secure, so please do not send passwords or financial details through the forms. If a personal data breach affecting you occurs, we will notify you and the authority in writing within 3 x 24 hours of becoming aware of it, as the law requires.

Links to Other Sites

The site links to other websites, including star-k.org and our partners. Their privacy practices are their own.

Changes to This Policy

We may update this policy. The date at the top shows when it last changed.

This policy is also available in Bahasa Indonesia. If the two versions differ, we will correct both.