IP Address Policy
This IP Address Policy explains how YPYM Company ("we," "us," or "our") collects, uses, and protects Internet Protocol (IP) address information when you visit our websites or use our services.
1. Introduction
An IP address is a unique numerical label assigned to every device connected to the internet. We automatically collect IP addresses as part of standard internet communication. This policy describes what we do with this information and how we protect your privacy.
2. What Is an IP Address?
An Internet Protocol (IP) address is a numerical identifier assigned to your device by your Internet Service Provider (ISP). There are two types:
- IPv4: A 32-bit address (e.g., 192.168.1.1)
- IPv6: A 128-bit address (e.g., 2001:0db8:85a3::8a2e:0370:7334)
Under applicable privacy laws (including GDPR and Indonesia's PDP Law), IP addresses may be considered personal data as they can potentially identify an individual.
3. Why We Collect IP Addresses
| Purpose | Legal Basis |
|---|---|
| Website functionality & content delivery | Legitimate interest / Contract performance |
| Security & fraud prevention | Legitimate interest / Legal obligation |
| Analytics & performance monitoring | Consent / Legitimate interest |
| Geographic content localization | Legitimate interest |
| Rate limiting & abuse prevention | Legitimate interest |
| Legal compliance & law enforcement | Legal obligation |
Figure 1: Operational purposes and lawful processing bases for logging and utilizing IP addresses.
4. How We Process IP Addresses
- Anonymization: Where possible, we truncate or hash IP addresses in analytics to prevent individual identification
- Aggregation: We aggregate IP-based data for statistical analysis rather than tracking individuals
- Encryption: IP addresses stored in our systems are protected by encryption at rest and in transit
- Access Control: Only authorized personnel with a business need can access raw IP address data
5. Edge Infrastructure & Cloudflare Security Measures
We route platform traffic through Cloudflare's global edge network to safeguard infrastructure integrity:
- DDoS Mitigation & Threat Filtering: Analyzing connection patterns and IP velocity to block volumetric and layer-7 attacks.
- Web Application Firewall (WAF): Enforcing managed security rules against malicious payload injections, credential abuse, and unauthorized crawlers.
- Anonymization & Hashing: Truncating or hashing IP addresses in internal performance logs to prevent individual re-identification.
- Access Restrictions: Applying rate-limiting and geo-compliance restrictions where required by law.
6. Your Rights Regarding IP Data
Depending on your jurisdiction, you may have the right to:
- Access: Request information about what IP address data we hold about you
- Deletion: Request deletion of your IP address data (subject to legal retention requirements)
- Objection: Object to processing of your IP address for analytics purposes
- Restriction: Request limitation of IP address processing
To exercise these rights, contact us at [email protected].
7. Data Retention
| Log Category | Retention Period |
|---|---|
| Server Connection Logs | 30 to 90 days |
| Security & Threat Logs | Up to 12 months |
| Aggregated Analytics Data | Anonymized and retained indefinitely |
| Statutory Legal Compliance | As mandated by applicable laws and regulations |
Figure 2: Data retention timeline and lifecycle management for IP address telemetry and connection logs.
8. Changes to This Policy
We may update this IP Address Policy periodically. Material changes will be posted on our website with an updated effective date.
9. Contact Us
For questions or concerns regarding our IP address handling practices, please contact our legal team:
YPYM Company (PT ADI TJANDRA TEKNOLOGI)
NIB: 1003260083966
Address: Indonesia Stock Exchange Tower 1 Level 3, Unit 304, Jl. Jendral Sudirman Kav. 52-53, Senayan, Kebayoran Baru, Jakarta, Indonesia, 12190
Email: [email protected]
Ready to expand your organic market presence?
© 2026 YPYM Company, all rights reserved.