Insimen Market
Security, privacy, and terms for Insimen services.
← Back to serviceRead the general and service-specific provisions together. Your statutory rights continue to apply.
Read the privacy policy for Insimen Market, including user rights, the parties’ duties and how to contact support. General and service provisions are read together with applicable transaction agreements.
Last updated: September 28, 2026
Supplemental policies updated 24 October 2026. Specific agreements retain the versions shown in their documents.
This policy applies to Insimen Market, including seller stores, product catalogs, carts, checkout, orders, payments, delivery, ratings, and Seller Center.
The data involved depends on the features you use and the information you choose to provide.
Data may come from you, another member's action connected to your account, an authorized party in a service process, or your browser and device when a feature is used. We seek to explain the need when data is requested and do not request unrelated data without a reasonable purpose.
Data is used only for legitimate purposes connected to the service.
Some visibility choices can be managed in product settings.
We process seller data to create and manage a store, show catalogs, manage stock, support orders, and maintain transaction history. Certain information such as store name, products, prices, ratings, and images may be public because it is needed for Insimen Market.
For buyers, we process cart contents, order details, address, recipient contact, payment status, and delivery information so a transaction can operate. Information not needed for a public catalog is not displayed publicly.
We share the minimum data needed for a seller to fulfil an order and for a buyer to receive the product. A seller may receive relevant recipient and delivery information, while a buyer can see store and delivery information needed to monitor an order.
Payment, courier, and infrastructure providers may process information according to their function and may have their own terms. Use official channels and review relevant notices before providing extra information.
Device, session, account activity, transaction pattern, and security-signal data may be used to protect accounts, prevent fraud, maintain order integrity, and investigate breaches. A security review can result in delay, verification, or a temporary restriction explained reasonably when safe.
We aim not to store passwords, one-time codes, tokens, or payment credentials in ordinary operational logs. Never send these details to a seller, buyer, or support through an unrequested field.
Transaction, payment, delivery, support, and audit data can be retained as needed to operate the service, meet obligations, prevent fraud, resolve disputes, or maintain lawful records. When no longer needed, it is deleted, anonymized, or restricted under applicable processes.
You may request access, correction, or deletion of certain data subject to applicable law. We may verify identity and cannot always remove records needed for transactions, security, audit, tax, disputes, or legal obligations.
Cookies and similar technologies maintain sessions, security, language preferences, carts, and Insimen Market features. Disabling necessary cookies may prevent login, cart, checkout, or order status from working correctly.
We may send order, payment, delivery, security, or important update notices through available channels. This policy may change when features or rules change; the date above identifies the applicable version.
We do not sell personal data as a commodity. Data may be shared on a limited basis with:
Data is retained only as long as needed to operate the service, protect users, resolve disputes, or meet applicable obligations. It is then deleted, anonymized, or restricted as appropriate.
We use technical and organizational controls proportionate to risk. No digital transmission or storage can be guaranteed 100% secure, so users must also protect their accounts and devices.
Subject to applicable law, you may request access, correction, restriction, or deletion of certain data. Some information may need to be retained for security, audit, service, or legal reasons. We will explain a decision where reasonably possible.
Cookies or similar technologies may be used for sessions, language preferences, security, and product operation. Disabling necessary cookies may prevent parts of the service from working.
This policy may be updated when the product, processing practices, or legal requirements change. The latest version is identified by the update date above; material changes may receive an additional notice through an appropriate channel.
Data is processed to deliver requested features, perform transactions, protect security, handle support and meet relevant duties. Grounds may include contract performance, legal duties, valid consent, vital interests, legally established public tasks or legitimate interests balanced against individual rights. The ground depends on the purpose and circumstances, rather than blanket consent to every use.
Insimen determines purposes for its own account and operational processing. For business workspaces, healthcare facilities or organisation documents, another party may act as controller and Insimen as processor according to actual roles and agreements. Uploading another person’s data requires authority and a lawful ground; reuse outside original instructions or purposes requires separate assessment.
Data depends on the service: identity and contact details; submitted content and documents; transaction records; and necessary technical, session and audit data. Health, personal financial and children’s data require additional care. Do not upload unnecessary secrets. The service section below explains its specific data context.
Recipients may include people you choose, necessary service providers, authorised support personnel and authorities acting on lawful requests. Sharing is limited by purpose and need; recipients do not receive a blanket right to reuse data for themselves. Authority requests are assessed for legal power, grounds and scope.
Where processing requires a transfer outside Indonesia, applicable cross-border data-protection requirements must be met, including protection-level assessment, adequate binding safeguards or another legally permitted basis. This policy is not unrestricted consent to send all data to any country or recipient.
Subject to law, you may request processing information, access and copies, correction, cessation or restriction, deletion or destruction, withdrawal of consent, objections to certain automated decisions, and other rights including portability where applicable. Withdrawing consent does not invalidate prior lawful processing; some features may stop if a necessary ground is no longer available.
Send requests to cs@insimen.com with your account and service context. Identity or authority verification is proportionate and does not require passwords or one-time codes. Requests are assessed against your rights, others’ rights, retention duties and statutory time limits. Where a request cannot be fully met, the reason and available next steps are explained through an appropriate channel.
Data is kept for as long as justified by purpose, service status, legal duties, transaction evidence or relevant disputes. Removing a view or account does not always immediately erase every archive and backup. Lawfully retained copies must have restricted access and use; deletion or anonymisation follows applicable processes when retention grounds end.
Necessary cookies or device storage may support sessions, security, language and requested functions. Additional processing requiring consent must respect valid choices. Using the service does not authorise every form of tracking.
If a data-protection incident occurs, Insimen assesses impact, restricts risky access and takes response measures. Notifications to individuals and authorities follow applicable statutory requirements and deadlines. This policy does not promise absolute security or shift incident-response duties to users.
Recipient names, contacts, addresses, order contents and instructions are shared only as needed with sellers, couriers and payment providers for fulfilment. Seller verification documents and bank details are limited to lawful purposes. Buyer data must not be added to personal marketing lists without an appropriate ground.
