At Waruwu & Partners ("WP Lawyers", "we", "our", or "us"), we are committed to protecting personal data and maintaining the confidentiality expected in a professional legal relationship. This Privacy Policy explains how we collect, use, process, disclose, store, and protect personal data obtained through our website, legal services, and professional communications.

By accessing our website, communicating with us, or engaging our legal services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Data We Collect

We may collect and process personal data that you voluntarily provide to us, as well as personal data obtained through lawful sources in connection with our legal services and professional activities.

The categories of personal data we may process include:

• Identification information, such as name, date of birth, identification number, passport information, or other identifying details;
• Contact information, such as email address, telephone number, residential or business address;
• Employment, professional, and corporate information;
• Financial and payment-related information;
• Information relating to legal matters, disputes, transactions, or inquiries submitted to us;
• Information required for client onboarding, conflict checks, due diligence, regulatory compliance, or verification purposes; and
• Any other information voluntarily provided to us or otherwise lawfully obtained in connection with the provision of legal services.

2. How We Collect Personal Data

• You submit inquiries through our website or contact forms;
• You communicate with us by email, telephone, messaging applications, or other communication channels;
• You engage us to provide legal services;
• You attend meetings, seminars, webinars, events, or other activities organized by us;
• We receive information from our clients, business partners, professional advisers, representatives, or authorized third parties;
• We obtain information from publicly available sources, government institutions, courts, regulatory authorities, public registries, or other lawful sources; or
• You otherwise interact with us in the course of our professional activities.

3. Purposes and Legal Basis for Processing

We process personal data only where permitted by applicable laws and regulations, including where such processing is necessary to:

• Provide legal advice and legal services;
• Respond to inquiries and requests;
• Conduct client onboarding, conflict checks, due diligence, and compliance procedures;
• Prepare legal documents, agreements, legal opinions, filings, and other work products;
• Manage client relationships and communications;
• Process billing, invoicing, and payment matters;
• Comply with legal, regulatory, professional, and ethical obligations;
• Protect our legal rights and legitimate interests;
• Improve the functionality, security, and performance of our website; and
• Send legal updates, publications, invitations, or other information that may be relevant to you.

The legal basis for processing personal data may include contractual necessity, compliance with legal obligations, legitimate interests, consent, or any other lawful basis recognized under applicable laws and regulations.

4. Confidentiality and Attorney-Client Relationship

WP Lawyers recognizes the importance of confidentiality in legal matters and handles information provided to us with the highest degree of professional care.

However, the submission of information through our website, contact forms, email communications, or other communication channels does not, by itself, create an attorney-client relationship. Such relationship shall only arise upon our formal acceptance of an engagement in accordance with applicable laws, professional standards, and internal procedures.

Visitors should refrain from transmitting highly sensitive or confidential information until a formal attorney-client relationship has been established.

Nothing in this Privacy Policy shall limit any duty of confidentiality, legal professional privilege, attorney-client privilege, or other professional obligations applicable to WP Lawyers under Indonesian laws and professional codes of conduct.

5. Disclosure of Personal Data

We do not sell, rent, trade, or otherwise disclose personal data for marketing purposes.

We may disclose personal data only where necessary and lawful, including to:

• Courts, arbitral tribunals, government agencies, regulatory authorities, or law enforcement agencies;
• Professional advisers, consultants, experts, notaries, translators, accountants, auditors, tax advisers, and other service providers engaged in connection with legal services;
• Financial institutions involved in processing payments related to our services;
• Third parties involved in transactions, disputes, investigations, or legal proceedings where disclosure is necessary for the provision of legal services; and
• Other parties where disclosure is required by law or authorized by the relevant individual.

Any disclosure of personal data will be conducted in accordance with applicable laws and regulations.

6. Data Retention