01Optional Analytics
Google Analytics and optional public interaction records stay off until you allow Analytics. Declining does not limit access. Change your choice using Analytics preferences. Your choice lasts up to 180 days. Withdrawal disables collection, clears accessible Analytics cookies and reloads the page. With permission, Google uses Analytics cookies and browser/device and network information, and may process this outside Indonesia. Google receives public page information and only the origin of an external referring website, such as https://www.google.com/. Queries, fragments, referring paths, form contents and financial details are excluded. Private workspaces and forms are not measured by Google Analytics. Advertising features and Google signals stay disabled.
02Information we collect
Contact details, Fit Check and Diagnostic responses, planning priorities, session records, messages, documents you choose to upload, and technical service records needed to operate the portal.
03Why we use it
To assess fit, prepare and deliver planning services, maintain your private workspace, communicate with you, secure the service, and meet reasonable record-keeping obligations.
04Lawful bases
Depending on the activity, AFC processes information with your explicit consent, to take steps before or perform a planning engagement, to meet applicable obligations, or for proportionate legitimate interests such as service security, fraud prevention, and record integrity. You may withdraw consent for future processing where consent is the basis.
05Sharing and processors
AFC does not sell client data. Limited information may be processed by infrastructure, storage, authentication, email, and security providers only as needed to deliver the service.
06Location and transfers
Some service providers may process information outside Indonesia. Where that occurs, AFC assesses the provider and uses contractual, technical, or other appropriate safeguards relevant to the service and the sensitivity of the data.
07Retention and deletion
Records are kept only for as long as reasonably needed for the planning relationship, security, or applicable obligations. You may request access, correction, a copy, or deletion, subject to records AFC is required or reasonably entitled to retain.
08Your rights and choices
You may ask AFC to confirm whether your data is processed and request access, correction, a portable copy where applicable, restriction, objection, withdrawal of consent, or deletion. AFC will verify identity before acting and explain if a request cannot be fulfilled in full.
09Security and incidents
AFC applies access controls, private sign-in links, encryption provided by its infrastructure, minimisation, and audit records appropriate to the service. If a personal-data incident creates a material risk, AFC will investigate, contain it, and provide notices required by applicable law.
10Your safety
Never submit passwords, PINs, OTPs, complete card credentials, or unnecessary account numbers. Use only your private portal link and contact AFC if you believe it has been exposed.