Discipulus Privacy Policy

This Privacy Policy explains how PT XQUARE EDU NUSANTARA (“we”, “our”, “us”) collects, uses, and protects your personal information when you use Discipulus. By signing up, you agree to the terms below.

1. Data Controller & Contact

• Data Controller: PT XQUARE EDU NUSANTARA
• Address: Jl Raya Boulevard Barat #J-15, Mall of Indonesia, Jakarta 14240
• Email: support@discipulus.org
• We are fully responsible for the processing of personal data in accordance with Indonesia’s Personal Data Protection Law (UU PDP). 

2. What We Collect

We may collect the following data: 

• Identity: name, email, contact number, church/organization affiliation. 

• Activity: course, event, forum data, and participation in discussions. 

• Technical: cookies, IP address, device data, activity logs. 

• Transactions: payment information (not stored permanently). 

3. Purposes of Data Processing

Personal data is used only to: 

• Provide course, event, and community services. 

• Manage communications, notifications, and account updates. 

• Maintain security, prevent misuse, and ensure legal compliance. 

• Perform internal analysis and platform development (aggregated/anonymized data). 

4. Communication & Privacy Principles 

• All course discussions, community rooms, and forums are private member spaces. 
• Forwarding or sharing conversations/discussions outside the platform without permission of the parties involved is prohibited. 
• Violations may be treated as infringements of privacy rights under the PDP Law. 
• Simple principle: What happens in Discipulus stays in Discipulus. 

5. Legal Bases for Processing

In accordance with the PDP Law, data processing is based on: 

• Member consent at registration. 

• Fulfillment of contractual obligations (e.g., course/event registration). 

• Compliance with Indonesian law. 

• Protection of the vital interests of users (e.g., security). 

6. Data Subject Rights (User Rights) 

Under the PDP Law, you have the right to: 

• Obtain information regarding the use of your data. 

• Access, update, and correct personal data. 

• Withdraw consent for data processing. 

• Request deletion of your account and personal data. 

• Object to certain data processing. 

• Raise objections/complaints in the event of violations or data breaches. 

Requests can be sent to support@discipulus.org and will be processed within 14 business days. 

7. Data Storage & Security 

• Data is stored in Indonesia. 

• We use physical and digital security systems in line with industry standards. 

• Data is retained only as long as necessary for processing purposes. 

• When an account is deleted, data will be deleted as well unless retention is required by law. 

• In the event of a data breach, we are obliged to notify you in accordance with PDP Law procedures.

8. Third Parties 

• We may work with third-party service providers (hosting, payments, cloud). 
• Third parties access data only as necessary and are prohibited from misuse. 
• We do not sell personal data to any party. 

9. User Responsibilities

Users are required to: 

• Respect the privacy of other members. 

• Not misuse other members’ personal data. 

• Not attempt to hack or access without authorization (this is a criminal act in Indonesia). 

• Respect copyrights for courses, events, and other content. 

10. Access to Related Sites

By registering, you automatically grant permission to access: 

• Discipulus subdomains. 

• Sister site: hartabadi.id. 

11. Policy Changes 

This policy may be updated from time to time. If there are significant changes, we will notify you via email or platform notifications. 

12. Contact

For questions, access requests, data deletion, or complaints: 
📧 support@discipulus.org