Information we collect
Contact details, Fit Check and Diagnostic responses, planning priorities, session records, messages, documents you choose to upload, and technical service records needed to operate the portal.
Privacy Notice
Your information deserves considered care.
This notice explains what AFC collects, why it is needed, how it is protected, and the choices available to you.Why we use it
To assess fit, prepare and deliver planning services, maintain your private workspace, communicate with you, secure the service, and meet reasonable record-keeping obligations.
Lawful bases
Depending on the activity, AFC processes information with your explicit consent, to take steps before or perform a planning engagement, to meet applicable obligations, or for proportionate legitimate interests such as service security, fraud prevention, and record integrity. You may withdraw consent for future processing where consent is the basis.
Sharing and processors
AFC does not sell client data. Limited information may be processed by infrastructure, storage, authentication, email, and security providers only as needed to deliver the service.
Location and transfers
Some service providers may process information outside Indonesia. Where that occurs, AFC assesses the provider and uses contractual, technical, or other appropriate safeguards relevant to the service and the sensitivity of the data.
Retention and deletion
Records are kept only for as long as reasonably needed for the planning relationship, security, or applicable obligations. You may request access, correction, a copy, or deletion, subject to records AFC is required or reasonably entitled to retain.
Your rights and choices
You may ask AFC to confirm whether your data is processed and request access, correction, a portable copy where applicable, restriction, objection, withdrawal of consent, or deletion. AFC will verify identity before acting and explain if a request cannot be fulfilled in full.
Security and incidents
AFC applies access controls, private sign-in links, encryption provided by its infrastructure, minimisation, and audit records appropriate to the service. If a personal-data incident creates a material risk, AFC will investigate, contain it, and provide notices required by applicable law.
Your safety
Never submit passwords, PINs, OTPs, complete card credentials, or unnecessary account numbers. Use only your private portal link and contact AFC if you believe it has been exposed.