Privacy Policy | Everbest

1. Introduction

PT Everbesindo Surya Jaya ("Everbest", "we", "us", or the "Company") is committed to protecting your Personal Data and respecting your privacy rights.

This Privacy Policy explains how we collect, use, store, disclose, transfer, and process your Personal Data when you access or use our products and services, including but not limited to:

The official websites of Everbest, EVB, and Tracce;
The Everbest Reserve Membership Program;
The Everbest Member Portal;
All physical Everbest retail stores;
Customer Care services;
Official communication channels, including WhatsApp, email, and other official communication media;
Official marketplaces, including Shopee, TikTok Shop, and Zalora;
Promotional activities and events organized by Everbest; and
Other products, services, platforms, or digital channels owned or operated by Everbest from time to time (collectively referred to as the "Services").

This Privacy Policy applies to all customers, prospective customers, website visitors, members of the Everbest Reserve Membership Program, and any individuals who interact with or use our Services within the territory of the Republic of Indonesia.

By accessing, using, registering for, transacting with, or utilizing our Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. Where required under applicable laws and regulations, we will request your consent prior to processing your Personal Data for specific purposes.

This Privacy Policy should be read in conjunction with our Terms & Conditions of Use, Everbest Reserve Membership Terms & Conditions, and any other applicable policies governing the Services you use.

2. Definitions

Unless otherwise defined in this Privacy Policy, the following terms shall have the meanings set forth below:

2.1. Personal Data

Personal Data is any data regarding an identified or identifiable individual, whether directly or indirectly, individually or combined with other information, through electronic or non-electronic systems, as governed by Applicable Laws and Regulations.

2.2. Processing of Personal Data

Processing of Personal Data is any operation or set of operations performed upon Personal Data, using electronic or non-electronic systems, including but not limited to acquiring, collecting, recording, organizing, storing, updating, using, analyzing, disclosing, transferring, disseminating, erasing, destroying, or any other action performed on Personal Data in accordance with Applicable Laws and Regulations.

2.3. Data Subject

Data Subject is any individual whose Personal Data is processed by Everbest pursuant to this Privacy Policy.

2.4. Services

Services are all products, services, platforms, applications, websites, Member Portal, Everbest Reserve Membership Program, physical stores, Customer Care services, official communication channels, official marketplaces, and other digital services owned, managed, or provided by Everbest from time to time.

2.5. Account

Account is the customer or membership account created by you to access specific services provided by Everbest, including the Everbest Reserve Membership Program and the Member Portal.

2.6. Everbest Reserve Membership Program

Everbest Reserve Membership Program is the customer loyalty program organized by Everbest that offers various benefits to members pursuant to applicable Membership Terms & Conditions.

2.7. Member Portal

Member Portal is the digital platform provided by Everbest for members to manage their accounts, view membership details, transaction history, point balances, vouchers, communication preferences, and other features available from time to time.

2.8. Cookies

Cookies are small files or similar technologies stored on your device when accessing Everbest Websites or digital services to help recognize your device, remember user preferences, enhance security, and analyze service usage.

2.9. Third-Party Service Providers

Third-Party Service Providers are third parties collaborating with Everbest to support business operations and service delivery, including but not limited to e-commerce platform providers, Customer Relationship Management (CRM) service providers, payment gateways, logistics and delivery providers, communication service providers, IT service providers, analytics providers, and other partners required for the execution of Everbest Services.

2.10. Official Marketplaces

Official Marketplaces are official sales channels of Everbest operated via third-party platforms, including but not limited to Shopee, TikTok Shop, Zalora, or other marketplaces officially designated by Everbest.

2.11. Applicable Laws and Regulations

Applicable Laws and Regulations are all legal provisions of the Republic of Indonesia governing personal data protection, electronic transactions, consumer protection, and other regulations relating to Personal Data processing, as amended from time to time.

3. Personal Data We Collect

The types of Personal Data we collect depend on how you interact with our Services. We collect only relevant, adequate, and necessary Personal Data for the purposes set forth in this Privacy Policy.

The Personal Data we collect includes, but is not limited to:

3.1. Identity Data

You represent that Identity Data provided truly belongs to you and is not derived from third-party personal information obtained without authorization.

We may collect your identity information, including:

Full name;
Date of birth;
Gender; and
Other identification details provided voluntarily when required for Service delivery.

3.2. Contact Data

We may collect contact details, including:

Phone number;
Email address;
Billing address;
Delivery/shipping address; and
Other contact details you provide to us.

3.3. Account and Membership Data

When you create an account or become a member of the Everbest Reserve Membership Program, we may collect:

Member ID;
Membership tier;
Membership status;
Point balance;
Point accrual and redemption history;
Vouchers, rewards, or other membership benefits;
History of membership tier adjustments; and
Other details pertaining to your account or membership.

3.4. Transaction Data

We may collect details regarding transactions you perform through our Services, including:

Purchase history;
Products purchased;
Transaction values;
Transaction dates and store locations;
Payment methods;
Usage history of vouchers, points, or promotions;
Return, exchange, or refund history; and
Other details necessary to process transactions.

Everbest does not store complete credit card details, debit card details, or other sensitive payment data directly processed by authorized payment service providers.

3.5. Customer Preference Data

We may collect information regarding your preferences, such as:

Shoe sizes or product sizing;
Wishlists;
Favorite products;
Color preferences or product categories;
Product browsing history;
Purchase history; and
Other shopping preferences.

3.6. Communication Data

We may store records of communications between you and Everbest, including:

Customer Care chat/conversation logs;
Email communications;
WhatsApp communications;
Messages sent via official social media channels;
Complaints, inquiries, feedback, or requests submitted by you; and
Resolution history regarding such requests or complaints.

3.7. Communication Preference Data

We may record your preferences regarding communications from Everbest, including your consent or opt-out status for receiving:

Marketing emails;
WhatsApp messages;
SMS messages (where available);
Push notifications (where available); and
Other official communication media.

You may modify your communication preferences at any time via the Member Portal or by contacting Customer Care.

3.8. Technical and Usage Data

When you access our Websites, Member Portal, or digital services, we may automatically collect technical information, including:

IP address;
Device type;
Device identifiers;
Operating system;
Browser type and version;
Language settings;
Time zone settings;
Cookie details and similar technologies;
Pages visited;
Duration of visits;
Browsing activity;
Referring URLs (referrer);
System logs; and
Other technical details necessary to maintain system security, improve performance, and enhance Services.

3.9. Location Data

Upon receiving your consent, or when required for the delivery of specific Services, we may collect your location information based on shipping addresses or device location details.

3.10. Data Obtained from Third Parties

Under certain circumstances, we may receive your Personal Data from legitimate third parties, including but not limited to:

Payment service providers;
Logistics and courier partners;
Official Marketplaces;
Third-Party Service Providers;
Affiliated companies within the Everbest corporate group; or
Other parties who have obtained your consent or possess a legal basis to share such Personal Data with us.

We process Personal Data received from third parties strictly in accordance with this Privacy Policy and Applicable Laws and Regulations.

4. How We Collect Personal Data

Everbest collects your Personal Data through various methods, depending on your interaction with our Services. We collect Personal Data strictly through lawful, fair, and transparent means in compliance with Applicable Laws and Regulations.

4.1. Data Provided Directly by You

We collect Personal Data you provide directly to us when you:

Create an account on our Website or Member Portal;
Register for the Everbest Reserve Membership Program;
Make purchases via our Website, physical retail stores, or Official Marketplaces;
Update your account or profile information;
Complete forms, surveys, or participate in promotions, sweepstakes, or marketing events organized by Everbest;
Contact Customer Care via telephone, email, WhatsApp, social media, or other official channels;
Submit inquiries, requests, feedback, or complaints; or
Provide Personal Data to us through any other lawful means.

4.2. Data Collected Automatically

When accessing our Website, Member Portal, or digital platforms, certain information is automatically collected using Cookies, system logs, pixel tags, Software Development Kits (SDKs), and similar technologies. This includes IP addresses, device identifiers, operating systems, browser types, language preferences, time zones, pages visited, browsing activities, visit duration, referring URLs, and system log data.

4.3. Data from Transactional Activities

We collect Personal Data generated by your transactions, including product purchases, payments, order deliveries, product returns/exchanges, voucher usages, point accruals/redemptions, membership benefit usages, and related activities.

4.4. Data from Identity Verification

To protect your account and transactions, Everbest may execute identity verification procedures, including sending One-Time Passwords (OTPs) to your registered phone number or email address during account registration, account activation, Member Portal login, profile modifications, point/voucher redemptions, or high-security actions. OTPs are used strictly for identity verification and transaction security purposes.

4.5. Data from Service Partners and Third Parties

Where permitted under Applicable Laws and Regulations, we may obtain Personal Data from authorized third parties, such as e-commerce platform providers, CRM service providers, payment processing partners, logistics partners, Official Marketplaces, corporate affiliates, marketing partners, and IT/analytics/security service providers.

4.6. Data from Cookies and Similar Technologies

We utilize Cookies and similar technologies to remember your preferences, analyze website usage, optimize user experiences, secure systems, and deliver tailored content and offers. Please refer to Section 7 (Cookies and Similar Technologies) for detailed information.

4.7. Obligation to Provide Personal Data

In certain circumstances, providing Personal Data is a requirement to access our Services or to comply with contractual or statutory obligations. If you choose not to provide mandatory Personal Data, we may be unable to:

Create or maintain your Account;
Process transactions;
Deliver products;
Grant membership benefits; or
Provide Customer Care or specific Services effectively.

We will explicitly notify you whenever the provision of specific Personal Data is mandatory.

5. Purposes of Processing Personal Data

Everbest processes your Personal Data solely for legitimate, specific, and explicit purposes in accordance with Applicable Laws and Regulations. We process only Personal Data that is necessary to deliver, manage, enhance, and protect our Services.

5.1. Delivery of Products and Services

We process your Personal Data for the following purposes:

Processing product purchases and transactions;
Facilitating payment processing;
Arranging order delivery and logistics;
Handling product returns, exchanges, or transaction cancellations;
Providing after-sales support; and
Managing inquiries, requests, complaints, and Customer Care services.

5.2. Account and Membership Management

We process your Personal Data for the following purposes:

Creating and maintaining customer accounts;
Managing Everbest Reserve Membership Program accounts;
Verifying customer identities;
Calculating, tracking, and recording point balances;
Facilitating point redemptions for vouchers or benefits;
Determining and updating membership tiers;
Administering tier benefits under the Everbest Reserve Program; and
Managing account activities and membership records.

5.3. Communication

We process your Personal Data for the following purposes:

Sending order and transaction confirmations;
Providing delivery status updates;
Transmitting One-Time Passwords (OTPs) for verification and security;
Delivering account- or membership-related notices;
Communicating updates to services, policies, or terms and conditions;
Responding to customer inquiries, requests, or complaints; and
Transmitting essential administrative or operational communications.

5.4. Promotions and Marketing

Subject to your consent or where permitted by Applicable Laws and Regulations, we may process data to:

Send information on new product launches;
Deliver promotional offers, discounts, and exclusive deals;
Issue vouchers, gifts, or promotional incentives;
Send newsletters;
Invite you to events, launches, or marketing activities; and
Share relevant updates regarding Everbest, EVB, and Tracce brands.

Marketing messages may be delivered via email, WhatsApp, SMS, push notifications, or other official channels based on your selected preferences.

5.5. Personalization of Customer Experience

We process your Personal Data for the following purposes:

Analyzing shopping habits and preferences;
Offering tailored product recommendations;
Maintaining wishlists and account preferences;
Presenting customized promotions and relevant content; and
Optimizing Website, Member Portal, and digital platform user interfaces.

5.6. Service Analysis, Development, and Improvement

We process your Personal Data for the following purposes:

Analyzing Website usage and digital Service traffic;
Researching consumer behavior and market trends;
Measuring promotional and marketing campaign effectiveness;
Conducting internal business intelligence and market research;
Developing new products, features, and technology solutions;
Enhancing Website, Member Portal, app, and system performance; and
Generating aggregated or anonymized business analytics reports.

5.7. Security and Fraud Prevention

We process your Personal Data for the following purposes:

Securing customer accounts, applications, and IT systems;
Verifying user identity;
Detecting, preventing, and mitigating fraudulent or unauthorized activities;
Preventing abuse of the Everbest Reserve Program, vouchers, or promotions;
Executing internal audits and legal investigations; and
Safeguarding the rights, interests, assets, customers, and personnel of Everbest.

5.8. Legal and Regulatory Compliance

We process your Personal Data for the following purposes:

Complying with statutory and regulatory duties;
Responding to lawful orders from government agencies, regulators, law enforcement, or judicial courts;
Conducting mandatory legal or tax compliance audits;
Resolving legal disputes, claims, or proceedings; and
Enforcing or protecting Everbest's legal rights.

5.9. Other Legitimate Purposes

Where Personal Data is processed for purposes not explicitly detailed in this Privacy Policy, Everbest will ensure processing aligns with Applicable Laws and Regulations, providing advance notice and/or obtaining your consent where required by law.

6. Disclosure and Sharing of Personal Data

Everbest may disclose or share your Personal Data with third parties strictly when necessary to deliver Services, execute business operations, fulfill legal obligations, or achieve other legitimate purposes under Applicable Laws and Regulations.

We do not sell or trade your Personal Data to third parties for commercial gain.

Your Personal Data may be shared with or disclosed to the following categories of recipients:

6.1. Service Providers

We share Personal Data with third-party service providers assisting our operations, including:

Website and e-commerce platform providers (including Shopify);
Member Portal and loyalty program platform providers;
Customer Relationship Management (CRM) service providers;
Payment gateways and financial processing partners;
Logistics, courier, and fulfillment partners;
Information technology and infrastructure providers;
Data hosting, cloud storage, and database management providers;
Official communication service providers (email, WhatsApp, SMS, messaging gateways);
Analytics, cybersecurity, and fraud prevention vendors; and
Professional advisors (auditors, legal counsel, consultants).

Service providers are restricted to processing Personal Data solely under Everbest's written instructions and are bound to implement strict technical and organizational security controls in compliance with Applicable Laws and Regulations.

6.2. Official Marketplaces and Business Partners

For transactions conducted via Official Marketplaces or co-branded channels, data necessary to fulfill orders, process payments, execute deliveries, deliver customer support, handle returns, or administer membership benefits may be shared. Such third-party platforms process data in accordance with their respective privacy policies.

6.3. Corporate Affiliates

We may share Personal Data with affiliated entities within the Everbest corporate group to support business operations, deliver customer support, manage loyalty programs, execute marketing campaigns, or fulfill other legitimate operational needs consistent with this Privacy Policy. Affiliates are bound to uphold data protection standards consistent with Everbest's policies.

6.4. Government Authorities and Law Enforcement

We may disclose Personal Data to government agencies, regulatory bodies, law enforcement officials, courts, or statutory authorities when mandated by Applicable Laws and Regulations, court orders, formal legal process, or when necessary to protect the safety, rights, or legal interests of Everbest, its customers, or the public.

6.5. Corporate Transactions

In the event of a merger, acquisition, corporate restructuring, consolidation, asset sale, business transfer, or financing transaction, your Personal Data may be transferred or disclosed to prospective or actual acquiring entities as permitted by law. Everbest will take reasonable measures to ensure receiving parties handle Personal Data in compliance with this Privacy Policy and applicable data protection standards.

6.6. Express Consent

Beyond the provisions outlined herein, we may share your Personal Data with third parties whenever you provide explicit consent or where disclosure is permitted under Applicable Laws and Regulations.

6.7. Data Disclosure Principles

In every instance of Personal Data sharing, Everbest strives to ensure that:

Only strictly necessary Personal Data is shared;
Disclosures are conducted for clear, lawful, and specified purposes;
Recipients are bound by strict confidentiality and data security obligations; and
Data processing remains compliant with Applicable Laws and Regulations.

7. Cookies and Similar Technologies

Everbest Websites utilize Cookies and similar technologies to ensure proper website functionality, enhance user experiences, analyze traffic patterns, and maintain system security and performance.

Cookies are small text files placed on your device when visiting our Website. They enable us to recognize your browser or device and store user preferences.

We use Cookies to:

Enable essential website functionalities and secure browsing;
Remember your settings, preferences, and language selections;
Analyze website performance, user journeys, and engagement to improve Services; and
Enhance platform security and prevent fraudulent access.

Certain Cookies may be set by Third-Party Service Providers supporting our analytics or functionality. Third-party Cookie usage is governed by the respective privacy policies of those parties.

You can control, restrict, or erase Cookies via your web browser settings. Please note that disabling essential Cookies may impact website performance and restrict access to certain features.

8. Storage and Security of Personal Data

Everbest is committed to safeguarding your Personal Data by implementing reasonable administrative, technical, and physical security measures in accordance with Applicable Laws and Regulations.

We employ robust measures to protect Personal Data against unauthorized access, use, disclosure, modification, loss, or destruction. Security measures include strict access controls, secure encryption protocols, firewall defenses, and periodic security evaluations.

Your Personal Data is retained only for as long as necessary to fulfill the collection and processing purposes outlined in this Privacy Policy, or as required to comply with statutory data retention mandates under Applicable Laws and Regulations.

When Personal Data is no longer required or its retention period expires, we will securely delete, destroy, or permanently anonymize the data in accordance with applicable legal procedures.

While we enforce rigorous security protocols, no internet transmission or electronic storage system can be guaranteed to be completely impenetrable. Consequently, absolute security cannot be guaranteed.

We urge you to safeguard your account credentials by keeping your passwords and One-Time Passwords (OTPs) strictly confidential, and to notify Customer Care immediately upon suspecting any unauthorized access to your account.

9. Your Data Protection Rights

Under Applicable Laws and Regulations, you possess specific rights regarding the Personal Data we process, including the right to:

9.1. Access Personal Data

Request information regarding the Personal Data we hold about you and how it is being processed.

9.2. Rectify or Update Personal Data

Request updates or corrections to inaccurate, incomplete, or outdated Personal Data.

9.3. Withdraw Consent

Withdraw previously granted consent for processing Personal Data where consent serves as the legal basis for processing. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

9.4. Opt-Out of Marketing Communications

Modify communication preferences or unsubscribe from promotional emails, WhatsApp messages, or marketing broadcasts at any time via the Member Portal or by contacting Customer Care.

Opting out of marketing communications does not affect operational or transactional notifications, such as OTP verification codes, order confirmations, account security updates, point/voucher alerts, or essential service notices.

9.5. Request Erasure/Deletion of Personal Data

Request the deletion or erasure of your Personal Data under eligible circumstances as provided by Applicable Laws and Regulations. Deletion requests will be fulfilled provided they do not conflict with statutory obligations or legitimate legal grounds requiring Everbest to retain the data.

9.6. Contact Us regarding Rights Execution

To exercise your privacy rights, submit questions, or lodge privacy complaints, contact Customer Care using the details provided in Section 11 (Contact Us). We will respond to valid requests within timelines prescribed by Applicable Laws and Regulations. Identity verification documentation may be requested prior to processing data requests.

10. Amendments to this Privacy Policy

Everbest reserves the right to amend, update, or revise this Privacy Policy periodically to reflect changes in our Services, operational practices, technology, or legal requirements.

Material updates will be communicated via our Websites, Member Portal, or official communication media in accordance with applicable standards.

The latest version of this Privacy Policy will always be accessible on the Everbest Website, displaying the updated Effective Date at the top of the policy.

By continuing to access or use our Services after an updated Privacy Policy becomes effective, you acknowledge that you have read and understood the revised policy, as permitted by Applicable Laws and Regulations.

11. Contact Us

If you have inquiries, requests, complaints, or wish to exercise your data protection rights as set out in this Privacy Policy, please contact Everbest Customer Care through:

PT Everbesindo Surya Jaya

Customer Care

Phone: (021) 2252-9393

WhatsApp: +62 812-8770-9393

Email: customercare@everbestgroup.com

Address:

EVERBEST TOWER
Jl. Atang Sanjaya No. 21
Benda, Kota Tangerang
Banten 15125 – Indonesia

Customer Care Operating Hours:

Monday – Friday, 09:00 – 18:00 WIB
(Closed on Saturdays, Sundays, and National Public Holidays)

We will endeavor to respond to your inquiries, requests, or complaints within a reasonable time frame in compliance with Applicable Laws and Regulations. To protect your privacy and security, we may request additional information to verify your identity before processing your request.