Privacy Notice

This notice covers personal information that Red Asia Group and its group companies ("Red Asia Group", "we", "us") handle when you visit redasiainc.com, contact us, or deal with us as a business contact. Where we decide why and how your information is used, we are responsible for it under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and any other data protection laws that apply. This notice does not cover websites or services run by other companies, even when we link to them. They have their own privacy notices.

We collect only what we need. Depending on how you deal with us, that may include: • Contact details: your name, work email, phone number, company, job title and country. • What you tell us: the topic and content of your message, and anything you send us later in the conversation. • Your preferences: whether you have asked to receive updates from us. • Technical information: your IP address, browser and device type, the pages you visit and when, recorded automatically by our servers and security systems. • Applications: if you send us a CV or apply for a role, the information in it. We do not ask for sensitive information, such as health, religious, biometric or financial data, through this website. Please do not send it to us.

• Directly from you, when you fill in the contact form, email us or speak with us. • Automatically, when your browser connects to the website. • From other sources, such as your employer, a mutual contact or public professional sources, when this is relevant to a business relationship.

• To reply to your enquiry and follow up on it. • To discuss, provide and manage our services with you or your organization. • To send you updates, insights or event invitations, if you asked for them. You can opt out at any time. • To run, secure and improve the website, and to prevent fraud and misuse. • To consider you for a role, if you applied for one. • To meet our legal obligations and protect our rights. We do not sell your personal information, and we do not use it to make automated decisions that have legal or similarly significant effects on you.

We use personal information only when the law allows it. Depending on the situation, that means: • your consent, for example when you opt in to updates; • taking steps you asked for before entering into a contract, or carrying out a contract; • meeting a legal obligation; • our legitimate interests in running and protecting our business, where your rights do not outweigh them. Where we rely on consent, you can withdraw it at any time. Withdrawing does not affect what we did before.

We share personal information only when needed: • Within Red Asia Group, so the right company in the group can respond to you or work with you. • With service providers that help us run the business, such as website hosting, databases, email delivery and IT support. They may use your information only on our instructions and must keep it secure. • With professional advisers, such as auditors and insurers, when needed. • With authorities, courts or regulators when the law requires it, or to protect our rights, our people or others. • With a buyer or successor if all or part of our business is reorganized, merged or sold. We do not sell or rent personal information to anyone.

We are based in Indonesia, but some of our service providers store or process information in other countries. When your information leaves the country where it was collected, we take the steps the law requires to keep it protected, such as working with providers that offer adequate safeguards and contractual protections.

We keep personal information only as long as we need it for the purpose we collected it for, or as long as the law requires. In practice: • Enquiries are kept while we are in conversation with you, and for a reasonable period afterward in case you follow up. • Records of a business relationship are kept while it lasts, and afterward for as long as legal, tax and accounting rules require. • Marketing preferences are kept until you unsubscribe. After that we keep only a note that you opted out, so we do not contact you again. • Technical logs are kept for a short period for security. When we no longer need information, we delete it or make it anonymous.

We use reasonable technical and organizational measures to protect personal information from loss, misuse and unauthorized access, disclosure or change. These include encrypted connections, access controls, and limiting access to people who need it. No system is completely secure, and we cannot guarantee the security of information sent over the internet. If a breach affects your personal information, we will notify you and the authorities where the law requires it.

The website uses cookies and similar technologies that it needs to work and stay secure. If we use optional cookies, such as analytics, we will ask for your consent first where the law requires it, and you can change your choice at any time. Our Cookie Notice at /cookies explains the categories we use and how to manage them. You can also block or delete cookies in your browser settings, though some parts of the website may then not work properly.

Subject to the law that applies to you, you have the right to: • know how your information is used; • access the personal information we hold about you and get a copy; • correct information that is wrong or incomplete; • ask us to delete it, or to stop or limit using it; • withdraw consent you have given; • object to certain uses, including direct marketing; • receive your information in a common format, or have it sent to another organization, where that applies. To use any of these rights, email hello@redasiainc.com. We may need to confirm your identity first. We will respond within the time the law requires. If you are not satisfied with our response, you may complain to the data protection authority in your country.

This website is meant for business audiences. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has sent us personal information, contact us and we will delete it.

We may update this notice from time to time. The latest version will always be on this page, with the date it was last changed. If a change is significant, we will take reasonable steps to let you know. Last updated: October 20, 2026.

For questions about this notice or how we handle your personal information, contact: Red Asia Group Jl. Tanah Abang II No.47, Jakarta, Indonesia hello@redasiainc.com