Skip to main content
Official Polaroid Authorized Seller in Indonesia

Privacy Policy

In effect from Oct 28, 2026 · version 4

This Privacy Policy explains how PT Kamera Instant Indonesia ("we"), as the personal data controller operating kamerainstant.id (the "Site"), collects, uses, stores, shares and protects your personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (the "PDP Law") and its implementing regulations.

Data controller

PT Kamera Instant Indonesia, Jl. Sedayu City Boulevard Selatan No.20 Blok. B, Cakung Barat, Cakung, Kota Jakarta Timur, DKI Jakarta 13910. Email: customer.care@kamerainstant.id.

Data we collect

  • Identity and contact data: name, email address and WhatsApp number.

  • Shipping data: full address, district, postal code and, if you choose an instant courier, a map location.

  • Transaction data: Order history, Products, payment amounts, and payment method and status from Midtrans. We do not store payment card numbers.

  • Company invoice data: company name and tax number (NPWP) if you request an invoice in a company name.

  • Account data: your password in hashed form, your date of birth if provided, communication preferences, points and wishlist.

  • After-sales data: photos, videos, serial numbers and descriptions you submit for returns or warranty claims.

  • Live chat data: the conversation, photos you send, and the Site page you are on while using live chat.

  • Consent data: your cookie choices and permission for promotional messages, with the time and the policy version in effect.

  • Technical data: device and browser information and IP address, processed for security and abuse prevention, and Site usage data if you allow analytics cookies.

  • Performance of a contract: processing Orders and payments, delivering Products, issuing invoices and handling returns and warranty claims.

  • Legal obligations: meeting tax and accounting obligations and requests from competent authorities.

  • Legitimate interests: keeping the Site secure, preventing fraud and misuse of promotions, answering questions through live chat, and improving our services.

  • Consent: sending promotional messages by email or WhatsApp and enabling analytics and marketing cookies. Consent can be withdrawn at any time.

Transactional notices, such as payment confirmations and tracking numbers, are always sent because they are part of fulfilling your Order.

Recipients of personal data

We share personal data only as needed for the purposes above, with:

  • Midtrans, to process payments and refunds.

  • Biteship and courier companies (JNE, J&T Express, GoSend and GrabExpress), to ship and track parcels.

  • Amazon Web Services (Amazon SES), to send email.

  • WhatsApp service providers, to send messages.

  • Site infrastructure and security providers, including Cloudflare.

  • Google (Google Analytics), Meta and TikTok, only if you allow analytics or marketing cookies.

  • Competent authorities, where required by law.

Some of these providers may process data outside Indonesia. In that case, we ensure an equivalent level of protection as required by the PDP Law. We do not sell your personal data to anyone.

Retention

  • Transaction records and invoices are kept for the period required by tax and accounting regulations.

  • Photos and videos for returns or warranty claims are deleted 90 days after the case is closed.

  • Live chat conversations and their photos are deleted 12 months after the last message, or with the account if it is deleted.

  • Account data is kept while the account is active. Once an account deletion request is processed, personal data is anonymized, except for transaction records that must be kept.

  • Records of cookie and promotional consent are kept as proof of consent.

Security

We apply reasonable technical and organizational measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, role-based access, two-step verification for staff and activity logging. In the event of a personal data protection failure, we will give notice as required by the PDP Law.

Your rights

Under the PDP Law, you have the right to:

  • obtain information about the processing of your personal data;

  • access and obtain a copy of your personal data;

  • correct inaccurate personal data;

  • request deletion of your personal data;

  • withdraw consent you have given;

  • object to certain processing; and

  • lodge a complaint with the competent authority.

You can download your data and request account deletion through Account > Privacy, and update your details on your profile page. Other requests can be sent to customer.care@kamerainstant.id, and we will respond within the period set by law.

Promotional messages

Promotional messages by email and WhatsApp are only sent with your consent. Every promotional email includes an unsubscribe link, and you can also change your preferences on your account page.

Cookies

Our use of cookies and similar technologies is described in our Cookie Policy.

Changes to this policy

We may update this Privacy Policy from time to time. The version and effective date are shown at the top of this page. Material changes will be announced on the Site.

Contact

Questions about this Privacy Policy or requests about your personal data can be sent to customer.care@kamerainstant.id or through our Contact Us page.