Privacy Policy

Last updated: 10 October 2026

PetaKerja respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit petakerja.com, create an account, build a professional profile, apply for jobs, or use our talent sourcing and recruitment services.

1. Who Manages Your Personal Data?

PetaKerja is an industrial talent network operated by PT Karsa Reka Cipta, referred to in this policy as “PetaKerja,” “we,” “us,” or “our.”

PT Karsa Reka Cipta acts as the personal data controller for processing activities whose purposes and methods are determined by PetaKerja.

This policy applies to website visitors, professionals, job seekers, employers, recruiters, and anyone who contacts us through PetaKerja.

We process personal data in accordance with applicable Indonesian laws, including Law No. 27 of 2022 on Personal Data Protection.

2. Personal Data We Collect

The information we collect depends on the services and features you use.

Account and contact information

Your name, username, email address, telephone number, authentication information, and account type.

Professional profile information

Your profile photograph, location, professional summary, education, employment history, skills, certifications, industrial experience, portfolio, job preferences, and work availability.

Documents and competency evidence

CVs, certificates, supporting documents, portfolio links, and assessment information that you submit or authorize us to connect to your profile.

Application and recruitment information

The positions you apply for, information submitted with applications, recruitment communications, and screening records necessary to provide the relevant service.

Employer information

Company representative names, contact details, job titles, company information, vacancies, hiring requirements, and information submitted through talent sourcing requests.

Technical and usage information

IP addresses, device and browser information, access times, pages visited, security logs, and information collected through cookies or similar technologies used on the website.

Communications

Questions, support requests, complaints, and other communications you send to us.

Please do not upload confidential employer documents, passwords, bank account information, or sensitive personal data that is unnecessary for the service. If a process requires additional information, we will explain what is needed and why.

3. How We Use Your Personal Data

We use relevant personal data to:

• Create and manage accounts.
• Display professional profiles according to applicable visibility settings.
• Facilitate job searches, applications, and recruitment communications.
• Help employers identify suitable candidates.
• Provide talent sourcing, screening, and shortlisting services.
• Review profile information and competency evidence you submit.
• Connect assessment results to your profile when you authorize this.
• Send account notifications, service updates, and opportunities you request.
• Respond to support requests, complaints, and privacy enquiries.
• Maintain security, prevent fraud, and address misuse.
• Evaluate and improve our services.
• Meet applicable legal obligations.

We limit processing to the information necessary for the relevant purpose.

4. Legal Bases for Processing

We process personal data on an appropriate legal basis, depending on the activity. These may include:

• Performance of a contract, to provide services you request.
• Consent, for activities requiring your choice, such as marketing communications or specific data sharing.
• Legal obligations, where applicable laws require retention or disclosure.
• Legitimate interests, such as maintaining security and preventing misuse, after considering the purpose, necessity, and impact on your rights.

Where consent is required, we will request it clearly and separately. Reading this policy does not, by itself, constitute consent to every processing activity.

You may withdraw consent by contacting us. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Public Profiles and Private Information

PetaKerja helps professionals present their experience and competencies to potential employers. Information in profile sections identified as public may therefore be accessible to website visitors.

Public information may also appear in search engines or be copied by third parties. Removing information from PetaKerja may not immediately remove copies or cached versions outside our control.

Before publishing your profile, review the information that will be visible. Avoid including your full residential address, identification numbers, or other unnecessary personal details.

CVs, supporting documents, nonpublic contact information, and application data are handled according to the purpose for which you submit them and the access conditions explained for the relevant feature. Uploading a document for recruitment does not automatically authorize its public publication.

If the visibility control you need is unavailable, contact us to request an adjustment or removal.

6. Who May Receive Your Personal Data?

We may share relevant personal data with:

Relevant employers or recruiters

When you submit an application or authorize us to share information for a particular opportunity or shortlist. Information shared is limited to what is needed for that process.

Service providers

Providers supporting website operations, such as hosting, storage, email delivery, security, and technical support. Their access is limited to service requirements and applicable data protection obligations.

Authorized personnel

Team members who need access to deliver services, handle requests, or maintain security.

Authorities or other authorized parties

Where required by law, a valid legal process, or to protect rights and safety in accordance with applicable law.

We do not sell your personal data.

Employers may act as independent data controllers for information they receive and use in their recruitment processes. Their subsequent processing is subject to their own legal obligations and privacy policies.

7. UpSkills and Other Rekacipta Services

PetaKerja may support the use of competency evidence from UpSkills or related services within the PT Karsa Reka Cipta ecosystem.

Using PetaKerja does not automatically authorize us to share all your personal data with other services.

If you choose to connect assessment results, we will explain the information involved, the purpose of the connection, and who can access it. Relevant information may include the assessment name, completion date, results, and verification status.

Processing carried out by another website or service is also subject to that service’s privacy policy.

8. Cookies and Similar Technologies

Our website may use cookies or similar technologies to maintain login sessions, remember preferences, support security, and understand service usage.

Cookies necessary for essential website functions may be used to operate the service. If we use analytics or marketing cookies requiring consent, we will provide appropriate information and choices before activating them.

You can manage cookies through your browser. Disabling certain cookies may affect login and other website functions.

9. Data Retention and Deletion

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, provide services, and meet legal obligations.

Our retention schedule is:

• Account and profile information: while the account is active; following closure, [retention period and deletion conditions].
• Application and shortlist information: [period] after the relevant recruitment process ends.
• Supporting documents and assessment information: [period or retention criteria].
• Security logs and support communications: [period].
• System backups: deleted or overwritten within a [period] backup cycle.

Certain records may be retained longer where necessary to meet legal obligations or resolve disputes, with access and use restricted accordingly.

When information is no longer needed, it will be deleted, destroyed, or anonymized as appropriate to the information and system involved. We will notify you of deletion where required by law.

10. Security and Data Protection Incidents

We are committed to implementing technical and organizational measures appropriate to the risks of processing, including access controls and system security measures.

You also help protect your account by using a strong password, keeping access credentials private, and promptly reporting suspicious activity.

If a personal data protection failure occurs, we will take appropriate response measures and provide written notification to affected individuals and the competent institution within the 3 × 24-hour period required by applicable law.

The notification will describe the personal data exposed, when and how the exposure occurred, and the measures taken to address the incident and support recovery.

11. Processing Outside Indonesia

If a service provider processes or stores personal data outside Indonesia, we will meet applicable requirements for international data transfers.

This includes assessing the level of protection in the receiving country or ensuring adequate and binding safeguards. If these requirements cannot be met, we will obtain your consent as required by law.

You may contact us for relevant information about service providers and processing locations.

12. Your Personal Data Rights

Subject to applicable law, you may request:

• Information about how your personal data is processed.
• Access to and a copy of your personal data.
• Correction or updating of inaccurate information.
• Termination of processing, deletion, or destruction of personal data.
• Withdrawal of consent.
• Suspension or restriction of processing.
• Use or transfer of your data under the conditions established by law.
• The right to object to decisions based solely on automated processing that produce legal effects or significantly affect you.
• Complaint handling and access to available legal remedies.

Submit requests using the contact details below. We may request sufficient information to verify your identity and protect your data against unauthorized access.

We will handle requests within applicable statutory deadlines. If a lawful restriction or exception applies, we will explain the reason.

13. Automated Processing and Artificial Intelligence

If AI-assisted or automated features are used to analyze profiles, match opportunities, or support screening, we will explain their purpose, the information involved, and the participation of relevant service providers before introducing that processing.

Where a decision is based solely on automated processing and significantly affects you, you may object and request a review in accordance with applicable rights.

14. Children’s Personal Data

PetaKerja is intended for adult users.

If processing children’s personal data becomes necessary for a service specifically designed to accommodate them, we will require parent or guardian consent and apply the protections required by law.

If you believe a child’s personal data has been processed without an appropriate legal basis, contact us so we can review the matter.

15. Third-Party Websites and Services

Our website may contain links to employer websites, application portals, portfolios, or other services.

When you visit those services or provide information directly to them, their privacy policies apply. We encourage you to review those policies before sharing personal data.

16. Changes to This Policy

We may update this policy to reflect changes in our services, data processing practices, or legal requirements.

The latest version will appear on this page with its revision date. We will communicate material changes through an appropriate channel. If a change requires new consent, we will obtain it before carrying out the relevant processing.

17. Contact Us

For privacy questions, complaints, or personal data requests, contact:

PT Karsa Reka Cipta — PetaKerja Operator
Website: https://petakerja.com
Privacy email: contact@petakerja.com

Use the subject line “PetaKerja Privacy Request” and describe your request.

Please do not send passwords or complete identity documents unless they are necessary under a verification procedure we have explained to you.