Privacy Policy
Your Privacy, Held with Care
Every being carries a basic goodness. Honoring that also means caring for what you entrust to me.
This page explains in plain words what happens to your information when you visit sangpemenang.com or get in touch with me. The principle is simple: collect as little as possible, use it only for a clear purpose, and look after it wholeheartedly.
- Effective 2 November 2026
- No analytics, no ads
- Indonesian PDP Law 27/2022 and GDPR
At a Glance
The six things that matter most, if you only have a minute.
No Forms
There is no contact form, account sign-up, or newsletter on this site. You reach me through your own email or WhatsApp.
No Tracking
No Google Analytics, no advertising pixels, no tag manager, and nothing that follows you from page to page.
One Small Cookie
The pll_language cookie only remembers your language, Indonesian or English. Nothing more.
Never Sold
Your personal data is never sold, rented, or traded to anyone, for any reason.
You Stay in Control
You can ask to see, correct, or delete your data at any time, with a single email.
A Separate Learning Space
Online courses run on the Zenos platform, with their own account and terms. Section 4 explains how.
Who I Am
The website sangpemenang.com is run by me, Andreas Pasolympia, a meditation and nonduality teacher living and working in Bali. On this page, “I” and “me” refer to me as the person responsible for the site.
This policy covers your visit to sangpemenang.com and any conversation that begins here, for example when you ask about learning meditation, private sessions, Reiki, or programs for organizations. For the personal data I handle in this work, I am the data controller under Indonesia’s Personal Data Protection Law, Law No. 27 of 2022, referred to here as the PDP Law.
What Data I Receive and Why
Reading this website never requires you to introduce yourself. Only a few kinds of information may reach me:
Technical Visit Data
Like most websites, the hosting server automatically logs technical data: IP address, browser and device type, pages opened, time of access, and the referring page. Words you type into the search box on the Writing page are logged too, as part of the page address.
Why: to keep the site running, protect it from abuse, and fix errors. I do not use it to build a profile of you.
Email and WhatsApp Messages
The email buttons open the email app on your device, and the WhatsApp buttons open WhatsApp. When you write, I receive your email address or WhatsApp number, your name, your message, and whatever you choose to share. Some buttons prepare a sample message, such as your meditation experience or your organization’s needs. Every part of it is up to you to change or remove.
Why: to answer you, arrange sessions, classes, or organizational programs, and follow up on our conversation.
Personal Stories
On an inner journey, you may want to share experiences, health matters, beliefs, or relationships. Some of this counts as specific, sensitive personal data under the PDP Law. I hold it in full confidence and use it only to support you.
A gentle suggestion: in a first message, a few sentences about what you are looking for are plenty. Deeper stories can come later, once we know each other and you feel safe.
The legal bases follow the PDP Law: your consent, steps you ask for before or during our work together, legal obligations, and the legitimate interest of keeping the website secure. I never use your data for advertising and make no automated decisions about you.
Cookies and Browser Storage
Cookies are small files your browser stores on your device. This site deliberately uses as few as possible. Here is the complete list I found when checking the site on 2 November 2026:
| Name | Set By | Purpose | Duration |
|---|---|---|---|
pll_languageNecessary | sangpemenang.com, Polylang plugin | Remembers your chosen language so pages appear in the same language. | 1 year |
wpEmojiSettingsSupportssessionStorage, not a cookieTechnical | WordPress | Checks whether your browser can display emoji. Contains no personal data. | Until the tab closes |
wordpress_*WordPress login cookiesAdmin Only | WordPress | Used only when the site owner logs in to the admin dashboard. Visitors never receive them. | Session, up to 14 days |
| YouTube videosyoutube-nocookie.comThird Party | Some pages embed videos in privacy-enhanced mode. When the page opens, the player loads from Google’s servers. When you play a video, Google may store cookies or local data under its own policy. | Set by Google |
Because the site only uses what it needs to work, there is no cookie consent banner. The fonts are served from this site’s own server, not from Google Fonts. You can view and delete cookies at any time in your browser settings. If I ever add analytics or similar technology, this policy will be updated first, and your consent will be asked where the law requires it.
Third-Party Services
A few trusted services help this website and this work run. Each handles data under its own policy:
Rumahweb Indonesia
The website’s server is hosted by Rumahweb Indonesia in Jakarta. Technical visit logs are stored there.
Videos on some pages load from YouTube. My email runs on Gmail, and online sessions may use Google Meet. Google Privacy Policy.
When you tap a WhatsApp button, the conversation takes place in WhatsApp, which is owned by Meta. WhatsApp Privacy Policy.
Zenos
Online courses live at sangpemenang.zenos.id. Sign-up, payment, and course progress are handled by Zenos. As the teacher, I can see the data needed to run the class.
Online sessions may also use Zoom, if that is what we choose together. The site also links to Instagram, TikTok, LinkedIn, YouTube, Lynk, Udemy, and innerpeace.id. Those links send nothing to the platform until you click them.
Some providers, such as Google and Meta, may process data outside Indonesia. I only use providers with reasonable data protection practices, in line with the PDP Law’s rules on cross-border transfers. Beyond that, data is shared only when the law requires it or when you ask me to.
How Long Data Is Kept
Data is kept only as long as it is needed, then deleted or minimized.
- Emails and messages: for as long as they are relevant to our conversation or ongoing work, then reviewed for deletion. You may ask for earlier deletion.
- Administrative and payment records: for as long as Indonesian tax and record-keeping rules require.
- Server logs: according to Rumahweb’s standard retention cycle.
- Language cookie: 1 year, or until you delete it from your browser.
- Backups: may remain for a limited time until overwritten by routine backups.
Security
The whole site is served over encrypted HTTPS, with security settings that block browser access to the camera, microphone, location, and payments. Access to the site dashboard and my inbox is limited to me. I will never ask for your password or card details.
No digital system is entirely free of risk. If a breach ever affects your data, I will inform you and the authorities as the PDP Law requires.
Your Rights over Your Data
Under Indonesia’s PDP Law, you have the right to:
- Be Informedabout who processes your data, for what purpose, and on what basis.
- Accessyour personal data and receive a copy.
- Correctdata that is wrong or incomplete.
- Eraseor have your data destroyed, as the law allows.
- Withdraw Consentat any time, where processing relies on consent.
- Pause or Restrictthe processing of your data.
- Move Your Datain a commonly used format.
- Objectand seek redress if your rights are violated.
Send your request to the email below with the subject “Privacy Request”. I will reply as soon as I can, within the time limits set by law. To protect you, I may ask for reasonable proof of identity. Please do not send identity documents unless asked.
For Visitors from the European Union
If you are in the EU, the European Economic Area, or the UK, you also have rights under the GDPR: access, rectification, erasure, restriction, portability, objection, and withdrawing consent. The legal bases are consent, steps before a contract, legal obligations, and the legitimate interest of keeping the site secure. You also have the right to complain to the data protection authority in your country.
Children’s Privacy
This website and its services are meant for adults. If you are under 18, please ask a parent or guardian to contact me and accompany you. If I learn that a child’s data was sent without a parent’s or guardian’s consent, I will delete it promptly.
Changes to This Policy
This policy will be updated when the site’s features, the services it uses, or the law change. The latest version always lives on this page with its effective date. If a change is significant and we are in touch, I will let you know directly.
Contact Me
A question, a request, or a concern about your data? I would be glad to hear from you.
Let’s Talk
Send an email with the subject “Privacy Request”. Share just what you need, and I will reply with full attention.
May you always feel safe, respected, and welcomed just as you are, here and everywhere.