Internal Application Document

Privacy Policy

Umama Integrated Management System (UMAMA IMS)

Operated by PT Umama Karya Nusantara

Effective Date: 24 September 2026
Last Updated: 24 September 2026

Overview & Application Scope

PT Umama Karya Nusantara (“Company”, “we”, “us”, or “our”) operates the Umama Integrated Management System (“UMAMA IMS”).

UMAMA IMS is a private internal management application developed for the operational needs of PT Umama Karya Nusantara. The application currently provides Human Resources Information System (HRIS) functions and may be expanded in the future to include additional internal management and operational functions.

Internal Use Only: UMAMA IMS is not intended for public use. Access is limited to employees and other authorized personnel who have been registered and granted access by PT Umama Karya Nusantara.

This Privacy Policy explains how personal information is collected, used, stored, and protected when authorized users access and use UMAMA IMS.

1. Information We Collect

Depending on the features used within UMAMA IMS, we may collect and process the following information. The specific information collected may vary depending on the features and modules available to the user.

A. Personal and Employee Information

We may process information including:

  • Full name
  • Employee identification information
  • Phone number
  • Email address
  • Job title
  • Department or division
  • Work location
  • Employment status
  • Attendance information
  • Employment-related information
  • HR records
  • Documents and attachments submitted through the application
  • Other information required for legitimate internal administration and company operations
B. Location Information

UMAMA IMS may request access to the user’s device location for features that require location verification, particularly employee attendance.

Location information may be used to verify whether an employee is at or within an authorized work location when performing attendance-related activities such as check-in or check-out. Location information is used for legitimate internal operational and attendance purposes.

Users may control location permissions through their device settings. Certain features, including location-based attendance, may not function properly if location permission is disabled.
C. Camera and Photos

UMAMA IMS may request permission to access the device camera. Camera access may be used when an employee voluntarily uses a feature that requires taking or uploading a photograph, document, receipt, evidence, or other supporting attachment.

UMAMA IMS does not activate the camera without a user-initiated action.

D. Files and Attachments

Users may be permitted to upload documents, photographs, receipts, forms, or other files required for HR administration or other internal company processes. Uploaded information may be stored and made available to authorized personnel where necessary to process the relevant request or business activity.

E. Account and Login Information

UMAMA IMS may process information associated with a user’s account, including:

  • User identification
  • Account information
  • Login records
  • Authentication information
  • Account activity
  • Access permissions and roles

This information may be used to authenticate users, control access, maintain application security, and prevent unauthorized use.

F. Device and Technical Information

We may collect limited technical information necessary for application functionality, security, maintenance, and troubleshooting. This may include device information, application version, operating system information, login activity, error information, and other technical records.

2. How We Use Personal Information

PT Umama Karya Nusantara may use information processed through UMAMA IMS to:

  • Create and manage employee accounts
  • Maintain employee records
  • Manage HR administration
  • Record and manage employee attendance
  • Verify attendance locations
  • Process employee requests and submissions
  • Manage documents and attachments
  • Manage internal approvals and workflows
  • Authenticate users
  • Manage user roles and access permissions
  • Maintain internal operational records
  • Support company administration and management
  • Maintain application security
  • Detect or prevent unauthorized access or misuse
  • Troubleshoot technical issues
  • Improve the functionality and reliability of UMAMA IMS
  • Fulfill applicable legal and regulatory obligations
  • Support additional legitimate internal management functions introduced to UMAMA IMS in the future

3. Internal and Restricted Access

UMAMA IMS is a private application intended for internal use. Only employees or other personnel who have been registered and authorized by PT Umama Karya Nusantara may access the application.

Registration or installation of the application alone does not automatically provide access. Access rights may be determined according to the user’s position, department, responsibilities, and authorization level.

PT Umama Karya Nusantara reserves the right to grant, modify, suspend, or revoke access to UMAMA IMS when appropriate, including when an employee’s employment or authorization ends.

4. Location Permission

Location permission is primarily used for features such as employee attendance and work-location verification. Where applicable, UMAMA IMS may obtain location information when an employee performs an attendance-related action.

No Advertising: UMAMA IMS does not use location information for advertising purposes.

If additional location-based functionality is introduced in the future, this Privacy Policy and relevant disclosures may be updated as required.

5. Camera Permission

Camera permission may be used to enable employees to capture and submit photographs or supporting documents directly through UMAMA IMS.

Camera access is only requested where necessary for application functionality and is not used for advertising purposes. Users may manage camera permissions through their device settings.

6. How We Share Information

PT Umama Karya Nusantara does not sell employees’ personal information.

Personal information may be accessed internally by authorized personnel where necessary for legitimate purposes, including:

Human Resources
Finance
Management
Authorized supervisors
Administrators
IT or system administrators
Other authorized departments where access is required for their responsibilities

Access may be limited according to user roles and responsibilities.

Information may also be disclosed where required by applicable law, regulation, court order, legal process, or lawful request from an authorized government authority.

If UMAMA IMS later uses third-party technology or service providers that process personal information on our behalf, appropriate disclosures may be added to this Privacy Policy.

7. Data Security

PT Umama Karya Nusantara takes reasonable administrative, organizational, and technical measures to protect information processed through UMAMA IMS.

These measures may include authentication, access controls, user permissions, restricted system access, and other security measures appropriate to the nature of the information processed.

User Responsibility: Users are responsible for maintaining the confidentiality of their account credentials and must not provide access to unauthorized persons.

Although reasonable measures are taken to protect information, no electronic system, network, or method of data storage can guarantee absolute security.

8. Data Retention

Personal information may be retained for as long as reasonably necessary for:

  • Employment administration
  • Internal company operations
  • Attendance and HR records
  • Financial or administrative records
  • Security and audit requirements
  • Legal and regulatory obligations
  • Dispute resolution
  • Other legitimate business requirements

When information is no longer reasonably required, it may be deleted, anonymized, archived, or otherwise handled in accordance with applicable requirements and Company policies.

Termination of an employee’s UMAMA IMS account does not necessarily result in immediate deletion of employment records that PT Umama Karya Nusantara is required or permitted to retain.

9. User Rights and Data Requests

Subject to applicable laws and regulations, users may have rights relating to their personal data, including requesting access to, correction of, or updating of certain personal information.

Where applicable, users may also request deletion of personal data. However, certain information may need to be retained for employment administration, legal compliance, security, financial records, audit requirements, dispute resolution, or other legitimate purposes.

Users may submit privacy-related requests to PT Umama Karya Nusantara using the contact information provided in this Privacy Policy.

10. Account Deactivation and Employment Termination

UMAMA IMS accounts are provided based on authorization from PT Umama Karya Nusantara.

When an employee resigns, is terminated, changes responsibilities, or otherwise ceases to be authorized to use UMAMA IMS, the Company may suspend or deactivate the employee’s access.

Certain records associated with the employee may continue to be retained where necessary for legitimate business, administrative, legal, or regulatory purposes.

11. Children’s Privacy

UMAMA IMS is an internal business application intended for authorized employees and personnel of PT Umama Karya Nusantara.

The application is not designed or intended for general use by children.

12. Advertising

UMAMA IMS is an internal company application and does not use personal information collected through the application for third-party advertising.

13. Future Features and Modules

UMAMA IMS is designed as an integrated internal management platform. Although the application currently focuses primarily on HRIS functionality, PT Umama Karya Nusantara may introduce additional internal management modules and features in the future.

These may include operational, administrative, finance, inventory, retail, approval, reporting, communication, or other internal business-management functions.

Where new features materially change how personal information is collected or processed, this Privacy Policy may be updated accordingly. Where required, additional permission or consent may also be requested before a new feature accesses relevant information on a user’s device.

14. Third-Party Services

UMAMA IMS may in the future integrate third-party infrastructure or services necessary for application functionality, such as hosting, notifications, analytics, authentication, file storage, or other technical services.

If third-party services process personal information on behalf of PT Umama Karya Nusantara, we will update our disclosures where appropriate and take reasonable measures to ensure personal information is handled appropriately.

15. Changes to This Privacy Policy

PT Umama Karya Nusantara may update this Privacy Policy periodically to reflect:

  • New UMAMA IMS features
  • Changes to internal business processes
  • Changes to how information is processed
  • Security improvements
  • Legal or regulatory requirements

The latest version of this Privacy Policy will be made available through UMAMA IMS or an official webpage designated by PT Umama Karya Nusantara. The “Last Updated” date at the top of this Privacy Policy indicates when the policy was most recently revised.

16. Contact Us

For questions, concerns, or requests regarding privacy or personal information processed through UMAMA IMS, please contact:

PT Umama Karya Nusantara

Application: Umama Integrated Management System (UMAMA IMS)
Indonesia

Email & Inquiries

Email: cs@umama.co.id
Website: https://umama.co.id

© 2026 PT Umama Karya Nusantara. All rights reserved.
enid