This Privacy Policy explains how PT Mitra Kreasi Natural ("The Bath Box", "we", "us") collects, uses, and protects your information when you use the MyTBB mobile application (the "App"). By using the App, you agree to the practices described here.
1. Information We Collect
| Category | Examples | Why |
|---|---|---|
| Account information | Name, email address, phone number | Create and manage your membership account |
| Delivery address | Recipient name, address, map pin | Deliver your orders |
| Location | Approximate and precise location | Find nearby stores and set a delivery pin (only when you grant permission) |
| Purchase & order data | Orders, order history, membership points | Process orders and manage rewards |
| Photos | Images you upload (e.g. payment proof) | Verify your transactions |
| Device & notification data | Device identifiers, push notification token | Send order and promotional notifications |
| Usage data | Screens viewed, in-app interactions, analytics events | Understand and improve the App |
We do not collect or store your payment card details. Payments are processed securely by our payment provider (Midtrans) within a secure payment page.
2. How We Use Your Information
- To process, deliver, and support your orders and pickups.
- To manage your membership, tier, points, and vouchers.
- To send you order updates and, where permitted, promotions.
- To operate, secure, and improve the App through analytics.
- To comply with legal obligations.
3. Sharing With Third Parties
We do not sell your personal data. We share limited data only with trusted service providers strictly to operate the App:
- Google Firebase — analytics and push notifications.
- Midtrans — secure payment processing.
- Logistics/courier partners — order delivery.
These providers may process your data only as needed to perform their services. We do not share your data for third-party advertising.
4. Data Security
All data is transmitted over encrypted connections (HTTPS). We apply reasonable technical and organizational measures to protect your information. Please keep your account password confidential.
5. Data Retention
We keep your information for as long as your account is active or as needed to provide the App and to comply with legal, tax, and accounting obligations.
6. Your Rights & Data Deletion
You may request access to, correction of, or deletion of your account and personal data. To request deletion of your account and associated data, email us at cs@thebathbox.co.id with the subject "Account Deletion Request" from the email registered to your account. We will process verified requests within 30 days, subject to data we must retain by law.
7. Children's Privacy
The App is not directed to children under 18. If you are under 18, please use the App only under the supervision of a parent or guardian.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated "Last updated" date.
9. Contact Us
PT Mitra Kreasi Natural (The Bath Box)
Email: cs@thebathbox.co.id
Website: https://thebathbox.co.id