Privacy Policy

This policy provides one privacy framework for the Okuzono Hospitality Group website and its restaurant brands. It describes the personal data handled across guest, reservation, marketing, digital, and social media interactions.

• Group:
  • Okuzono Hospitality Group
• Brands and operators:
  
  • Okuzono Hospitality Group and Okuzono Japanese Dining – PT Okuzono Nipindo Paradiso
  • Twelve Chinese Dining – PT Twelve Nippindo Paradiso
  • Casa Cuomo Ristorante – PT Cuomo Nippindo Paradiso
  • Okuzono Bali – PT Okuzono Nippindo Bali

About this policy

This Privacy Policy explains how the companies operating under Okuzono Hospitality Group collect, use, disclose, retain, and protect personal data. The relevant operator acts as the personal data controller for its restaurant and Services. This policy applies to Okuzono Hospitality Group, Okuzono Japanese Dining, Twelve Chinese Dining, Casa Cuomo Ristorante, and Okuzono Bali, including their websites, reservations, events, promotions, loyalty activities, customer communications, social media integrations, digital forms, and related services (collectively, the Services). The operating companies covered by this policy are PT Okuzono Nipindo Paradiso; PT Twelve Nippindo Paradiso; PT Cuomo Nippindo Paradiso; and PT Okuzono Nippindo Bali.

Personal data we collect

Depending on how you interact with us, we may collect your name, telephone number, email address, reservation details, dining preferences, allergy or dietary information that you choose to provide, event enquiries, feedback, survey responses, promotion participation, transaction and payment-related information, and correspondence with our teams.

When you use our websites or digital services, we may collect device and browser information, IP address, approximate location, cookie identifiers, page views, referral sources, and security or diagnostic logs. Payment card details may be processed directly by payment providers and are not necessarily stored by us.

If you connect or authorize a social media account, we may receive information permitted by that platform and your authorization, such as account identifiers, display name, avatar, profile details, follower and engagement statistics, public content, public video information, and access tokens needed to maintain the connection.

How we collect personal data

We collect personal data directly from you, from restaurant and reservation interactions, through our websites and forms, from authorized social media or technology integrations, from payment and reservation providers, from event partners, and from publicly available sources where permitted by law.

How we use personal data

We use personal data to manage reservations and events; provide dining and customer services; respond to enquiries and feedback; process transactions; send requested service messages; administer promotions and loyalty activities; personalize experiences; operate social media and business intelligence dashboards; measure marketing and content performance; maintain historical business records; prevent fraud and misuse; protect our guests, staff, systems, and premises; comply with legal obligations; and establish, exercise, or defend legal claims.

Where required, we rely on consent. We may also process data to perform a contract, comply with law, protect vital or legitimate interests, and pursue proportionate business interests that do not override your rights, in each case as permitted by applicable law.

Marketing communications

We may send marketing messages where you have consented or where otherwise permitted by law. You may unsubscribe using the instructions in a message or contact us through our official website. Service and transactional messages may still be sent when needed to complete a reservation, respond to a request, or protect an account.

Cookies and similar technologies

Our websites may use necessary, preference, analytics, and advertising cookies or similar technologies. You may control cookies through available consent tools and browser settings. Disabling some cookies may affect website functionality.

Sharing personal data

We do not sell personal data. We may share it with companies and brands within our group; reservation, payment, communications, hosting, cloud, analytics, marketing, security, and professional service providers; event and promotion partners where necessary; social media platforms when you use an integration; public authorities or courts when legally required; and parties involved in a business reorganization, subject to appropriate safeguards.

Providers may process data only for agreed purposes and under applicable confidentiality, security, and data protection obligations.

International transfers

Some service providers may process personal data outside Indonesia. Where required, we use appropriate contractual, organizational, or legal safeguards and assess the protection available in the receiving country.

Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including operational, accounting, tax, security, dispute, and legal requirements. Retention periods vary by record type. When data is no longer required, we delete, anonymize, or securely isolate it, subject to lawful exceptions.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No system is completely secure, and we cannot guarantee absolute security.

Your rights

Subject to applicable law, you may request information about our processing; access or obtain a copy of your personal data; correct inaccurate data; withdraw consent; object to or restrict certain processing; request deletion or termination of processing; and exercise other rights provided by law. We may verify your identity and may retain information when legally permitted or required.

Children

Our general websites and digital services are not directed to children. We do not knowingly collect children’s personal data through these services without the authorization required by law. Restaurant visits involving children may be arranged by a parent or guardian.

Third party services

Our Services may link to or integrate with third-party websites and platforms. Their privacy notices govern their own processing. We encourage you to review those notices before providing information or authorizing an integration.

Changes to this policy

We may update this policy to reflect operational, technological, or legal changes. The effective date shown above identifies the current version. Material changes will be communicated where required by law.

Contact us

Questions, complaints, and requests concerning personal data may be submitted through the contact channels published at www.okuzonogroup.com. Please identify the relevant restaurant brand and describe your request clearly.