QolaQ Foundation, established under the laws of Cook Islands and registered in the business address at offices of Trustees & Fiduciaries (Cook Islands) Limited, T&F Chambers, Rarotonga, Cook Islands (“Foundation”, “QolaQ”, “we”, or “us”) is the operator of any website published by us, including but not limited to QolaQ.org (the “Websites”).

QolaQ operates a blockchain-based Mutual Aid Platform (“MAP”), in which, through the Websites, you may have the opportunity to become a member of the MAP, own tokens developed by the Foundation, participate in providing aid to the fellow member in a decentralized way, and apply for a claim benefit.

This Privacy Policy applies to the Foundation's operations in any country. Therefore, it grants you the rights to data protection and privacy as applicable in the respective country. This includes but is not limited to Indonesia's data protection-related regulations and the Cook Islands.

As the operator of the Websites, we take your data processing seriously. In this Privacy Policy, you will be provided information about how we process your data. Any statement from now on complies with the laws in the country where the Foundation operates. It also complies with the laws where we make the MAP available for your access, as may be applicable.

For this Privacy Policy, the following words shall have the scope as defined below:
- Personal data shall mean any information relating to an identified or identifiable individual. An identifiable person can be identified, directly or indirectly, in particular by reference to one or combined identifiers such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.
- Processing shall mean activities performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise made available, alignment or combination, restriction, erasure or destruction.

The data processing we conduct through our Websites is for:
- Assessing your eligibility to be a member of our MAP;
- Registering you as a member of our MAP;
- Assessing your eligibility for a claim benefit;
- Assessing your eligibility for tokens withdrawal;
- Providing information to you about developments and new Programs, including updates to the Websites;
- Maintaining Website security;
- Communicating with you regarding your MAP membership;
- Complying with the legal and regulatory requirements in the country where MAP is made available for your access and where our Foundation operates.

We may make your data available to any third parties we collaborate with in processing your data to achieve the purpose of data processing. We reserve the right to disclose personal data as we may deem appropriate for us to comply with the laws and regulations. We will take any measures to ensure the protection of your privacy rights.

If the Foundation is involved in a merger, acquisition, sale, bankruptcy, insolvency, reorganization, receivership, assignment, or the application of laws or change of control, there may be a disclosure of your information to another entity related to such an event.

We implement appropriate technical and organizational security measures to protect and safeguard your stored personal data against manipulation, partial or complete loss, use, and access in an unauthorized way. A limited access policy is also implemented for the Foundation’s employees and any third parties collaborating with us by encrypting your data, thus it cannot be seen unless it’s needed. Any person and/or companies with access to your data are bound to the duty of confidentiality.

We also implement a procedure to address, respond to, and deal with any suspected personal data breach. Any suspected personal data breach will be notified to you in writing and to the regulators supervising the enforcement of data protection laws in the relevant countries.

This Section shall not apply to the Websites of third parties and the corresponding links given on our Websites. The Foundation shall not be responsible and liable for any security breach related to those.

We retain your data for the period necessary to achieve the data processing purposes stated in this Privacy Policy regarding the purposes described and where retention is required for compliance with legal and regulatory requirements.

Regarding the personal data processed to relate to your identity and AMLCFT verification, the Foundation will retain your data for six (6) years since your transaction in MAP or the end of your membership in the MAP as required by the AMLCFT Laws.

We may update and make changes to this Privacy Policy from time to time as necessary. We will notify you in writing through your registered email address of any updates and changes we make to the Privacy Policy.

Any objection to the updates or changes of this Privacy Policy, we suggest you discontinue your engagement with us, and if you do so, we will stop any access to our MAP for you.

Government Regulation of the Republic of Indonesia No. 71 of 2019 - Ministry of Telecommunication and Information of the Republic of Indonesia No. 20 of 2016.

If you have any questions regarding this Privacy Policy, please community@qolaq.org