PRIVACY POLICY Above the Clouds Natural Wear

Privacy Policy – PT ATAS AWAN BALI (Above the Clouds Natural Wear)
Effective Date: 2nd April 2026

1. Introduction

PT ATAS AWAN BALI (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection (PDPL).

This Privacy Policy explains how we collect, use, store, and protect your personal data when you access our website, purchase our products, or interact with our services.

By using our website, you agree to the collection and use of information in accordance with this policy.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Identification Data

Full name
Email address
Phone number

b) Transaction Data

Billing and shipping address
Order history
Payment details (processed via secure third-party providers)

c) Technical Data

IP address
Browser type and device information
Website usage data (pages visited, time spent, interactions)

d) Marketing and Tracking Data

Cookie identifiers
Advertising identifiers
Interaction with advertisements and campaigns
Newsletter subscriptions and preferences

3. Legal Basis for Processing (PDPL)

We process your personal data based on:

Consent (cookies, marketing, advertising tracking)
Contractual necessity (order fulfillment and delivery)
Legal obligations (tax and regulatory compliance)
Legitimate interest (fraud prevention, service improvement, analytics)

4. Purpose of Data Processing

Your personal data is used to:

Process and fulfill orders
Deliver products and manage logistics
Provide customer support
Manage payments securely
Send transactional and marketing communications (where consent is given)
Improve website performance and user experience
Measure advertising performance and optimize campaigns
Prevent fraud and ensure platform security

5. Use of Shopify Platform

Our website is hosted on Shopify Inc., which provides the online e-commerce platform that allows us to sell our products.

Your data may be stored through Shopify’s data storage, databases, and general applications.
Shopify stores your data on secure servers protected by industry-standard safeguards.
Payment data is processed securely through Shopify’s integrated payment gateways and is not stored directly on our servers.

For more information, please refer to Shopify’s privacy documentation.

6. Advertising, Analytics and Tracking Technologies

We use third-party tools to understand user behavior and improve marketing performance:

a) Google Services

We use services provided by Google LLC, including:

Google Analytics (website traffic analysis)
Google Ads (advertising and remarketing)

These tools may collect:

IP address
Device and browser data
Pages visited and interactions
Ad engagement data

Google may use cookies and similar technologies to display personalized advertisements across its network.

b) Meta (Facebook / Instagram)

We use services provided by Meta Platforms, Inc., including:

Facebook Pixel
Instagram advertising tools

These technologies allow us to:

Measure ad performance
Retarget visitors
Deliver relevant advertisements

Meta may collect data such as:

Website interactions
Device information
Advertising identifiers

c) Cookies and Consent

We use cookies and tracking technologies for:

Essential website functionality
Analytics and performance measurement
Advertising and remarketing

Where required, we obtain your consent before placing non-essential cookies. You can manage your preferences through your browser or cookie banner settings.

7. Data Sharing and Disclosure

We do not sell your personal data.

We may share your data with:

Payment service providers
Logistics partners
Technology providers (including Shopify, Google, Meta)
Marketing and analytics platforms
Regulatory authorities, when required by law

All third parties are required to process your data securely and only for specified purposes.

8. Cross-Border Data Transfer

Your personal data may be transferred and processed outside Indonesia, including in countries where our service providers operate.

In accordance with PDPL, we ensure:

Adequate protection standards, or
Appropriate contractual safeguards

9. Data Retention

We retain personal data only as long as necessary to:

Fulfill the purposes described in this policy
Comply with legal and regulatory obligations

Data is securely deleted or anonymized when no longer required.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption and secure servers
Restricted access controls
Monitoring systems

However, no method of transmission or storage is completely secure.

11. Your Rights Under PDPL

You have the right to:

Access your personal data
Request correction or deletion
Withdraw consent for marketing and tracking
Restrict or object to processing
Request data portability (where applicable)

Requests can be submitted via the contact details below.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

13. Children’s Data

Our services are not intended for individuals under 18. We do not knowingly collect personal data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted with an updated effective date.

15. Contact Information

For any privacy-related requests:

PT ATAS AWAN BALI
Email: info@abovetheclouds.store
Website: www.abovetheclouds.store

Optional – Marketing Communications

By subscribing to our communications, you agree to receive updates about collections and products. You may unsubscribe at any time.

End of Policy