Privacy Policy

Last updated: 20 October 2026 · Baca dalam Bahasa Indonesia

This Privacy Policy explains how PT Karya Kreatif Khawarizmi (Highkey Academy) handles personal data on academy.hktiga.com, in line with Indonesian Law No. 27 of 2022 on Personal Data Protection.

Data we collect

• Account data: name, email address, username and password (stored only in hashed form).
• Billing data you enter at checkout: name, phone number, address.
• Order data: courses bought, amounts, payment status and payment method.
• Learning data: lessons opened, progress and quiz results.
• Technical data: cookies needed for login, language choice and cart, and server logs.

Reseller Program

If you join the Reseller Program we also keep your WhatsApp number, your reseller code and the sales made with it. Buyers who use a reseller code are not named to the reseller. Bank details and NIK for payouts are collected through a separate form, not stored on this site, and used only to check identity and pay commission.

Payment data

Payments through Xendit are entered on Xendit's secure page. We do not receive or store card numbers, CVV or e-wallet credentials. We receive only the payment result (for example paid, amount, method and a transaction reference).

How we use it

• To create your account and give you access to the courses you buy.
• To process orders and payments and to send order emails.
• To answer customer service questions.
• To keep the site secure and improve the courses.
• To send course news only if you agree; you can stop at any time.

Who we share it with

We do not sell personal data. We share it only with service providers we need to run the site: Xendit (payments), our hosting provider in Indonesia and our email delivery service, and with authorities when the law requires it.

How long we keep it

Account and learning data are kept while your account is active. Order and payment records are kept as long as required by Indonesian tax and accounting rules.

Your rights

You can ask to see, correct or delete your personal data, or withdraw consent, by contacting us. Deleting your account removes your access to purchased courses.

Security

The site uses HTTPS. Access to personal data is limited to staff who need it.

Changes

We may update this policy; the date below shows the latest version.

Contact