PT Hino Finance Indonesia Data Privacy Policy Notice

A. Introduction

The Data Privacy Policy Notice (“Privacy Notice”) aims to safeguard and maintain the privacy and security of your Personal Data (hereinafter referred to as “Personal Data”), in accordance with the principles of Personal Data Protection.

This Privacy Notice aims to help you understand how PT Hino Finance Indonesia (hereinafter referred to as “We/Us/Our” or “HFI”), as (insofar as We are) the Controller of Personal Data, obtains, collects, processes, analyzes, stores, corrects, updates, displays, announces, transfers, discloses, deletes, or destroys your Personal Data (“Data Processing”), in accordance with the principles of Personal Data Protection, as well as to inform you of your rights.

This Privacy Notice is addressed to you as the subject of Personal Data who are:

Individuals who are connected/associated with Us as recipients of Our Products/Services, whether they have received the Products/Services or are in the process of applying for the Products/Services (hereinafter referred to as "Product/Service Recipients"), including individuals who legally represent/act for and on behalf of Product/Service Recipients, guarantors, guardians, custodians, or any beneficiaries.
Individuals who are associated with Us in the context of debt payment obligation suspension, bankruptcy, liquidation, auction, or any person associated with a legal entity or individual in relation to Our Products/Services.
Individuals who are Our employees, prospective employees, or outsourced employees/prospective employees, or persons associated with them.
Individuals who are shareholders or former shareholders, or prospective shareholders, or persons associated with them. Individuals who are Our President Director, Directors, or Commissioners, including prospective President Director, Directors, or Commissioners, as well as those who have served as Our President Director, Directors, or Commissioners.
Individuals associated with Us, whether as consultants, business partners, or service/goods providers, or prospective consultants, business partners, or service/goods providers, or individuals who have served as Our consultants, business partners, or service/goods providers.

If you are bound by Our financing agreement, this Privacy Notice will remain in effect even if your financing agreement with Us has ended. This Privacy Notice should also be read in conjunction with the terms and conditions of the financing agreement, which includes sections relating to the use and disclosure of information.

If you are not a Personal Data subject, but you provide information and Personal Data belonging to a Personal Data subject associated with you to Us, then you have informed the Personal Data Subject of this Privacy Notice, and have obtained the consent of the Personal Data subject in accordance with applicable statutory laws and regulations to disclose, collect, use, process, transfer and store such information and Personal Data for the purposes as forth in this Privacy Notice.

We may modify, delete, and/or update this Privacy Notice from time to time as necessary. If, pursuant to applicable regulations, such modifications, deletions, and/or updates require notification to you, We will use reasonable efforts to notify you in advance through Our official channels.

B. Our Data Privacy Process

Please read the following carefully to understand Our terms regarding how We obtain, process, use, store and disclose your Personal Data and how We will process it.

1. What Information We Collect

We will only collect your Personal Data, with details and types of information as described in this Privacy Notice, to the extent permitted by applicable regulations. The collection of Personal Data may be necessary in connection with your application for Our Products or Services, which you currently have or have had in the past. We may also collect information about you when you interact with Us through our website, applications, or mobile/electronic channels, either directly or indirectly connected to Us, or when you visit one of Our branches.

From time to time, We may collect information and Personal Data about you to support the provision of Products/Services or to optimize cooperation, or to fulfil contractual obligations, or to maintain a working relationship, including but not limited to the following sources:

from you directly or by anyone authorized by you or by anyone lawfully representing/acting for and on your behalf/your attorney-in-fact.
from cookies, location services, IP addresses when you visit Our website/applications/electronic system or when you fill out Our contact form on Our website/applications/electronic system, with respect to each of your visits to our website/application/electronic system. When obtaining Personal Data through such website/applications/electronic system, We will inform you and obtain your consent to the collection of information or data about you in accordance with the relevant Privacy Notice contained in other websites/applications/electronic systems operated by Us; and/or
from other third parties authorized by you/who are legally authorized to represent you, and publicly available sources, including credit rating agencies or bureaus, or other third parties, including but not limited to third parties such as agents, vendors, suppliers, and other parties who provide services to Us or other partners who collaborate with Us.

The Personal Data that We collect may vary depending on the type of product, service, and/or form of cooperation you engage in and/or have. The Personal Data that We collect, to the extent permitted by Applicable Regulations, includes but is not limited to:

Any information or data about you that can identify you, including but not limited to your name, date of birth, address, email address, home, office and/or mobile telephone number, financial information, and other information pertaining to the use of Our Products/Services and/or websites/applications/ electronic systems, or pertaining to the submission or implementation of a cooperation/agreement, or a working relationship with Us;
Family members, friends, shareholders, beneficial owners, guarantors, attorneys-in-fact, persons under trusteeship, trustees, your guarantors, other security providers, and other individuals (collectively, all of the above are individuals, "Relevant Individuals");
Any information and data about you and/or such Relevant Individuals generated and/or provided to Us during the application process, data updates, access to and/or use of Our Products/Services or website/applications/electronic system;
Any information and data about you and such Relevant Individuals generated and/or provided to Us in the course of maintaining the relationship between Us and you, including account review reports and records of correspondence with you by telephone or email;
Information pertaining to finance and taxation that We obtain from institutions/companies in the financial services or financial information services sector, as well as from the public, such as, your salary/income and other income details, savings details, expenditure details, payment methods you use, defaults, loan/credit history (as relevant to the Product/Service), credit collectability, financial situation and history including details of your financial data and bankruptcy-related data. Such financial related information may also pertain to information about your assets and/or property (if relevant to the Product/Service), as well as property ownership status;
Information pertaining to criminal records or alleged violations of the law, including in cases of fraud, debt, theft, money laundering, terrorism financing, financing the proliferation of weapons of mass destruction, sanctions, alleged fraud or theft, and details of any devices used in the fraud;
Any information and data about you collected by Us when you participate in events that We organize, such as galas, seminars, contests, or awards programs, which include your photos, video and audio recordings of you; and/or
Any information and data about you that We receive from other third parties (including Our subsidiaries, affiliates, and/or group companies), where such third parties are responsible for obtaining the necessary consent from authorized parties for the collection and disclosure of Personal Data to Us and will process Personal Data in reliance on the consent obtained by such third parties. In such a case, We will use Personal Data for the purpose of collaborating with such third parties.

2. When and With Whom We May Share Your Information

We process your Personal Data that is necessary for Us to provide the products or services you request or to execute any agreements/contracts, or to maintain a working relationship or to comply with laws and statutory regulations. Consequently, we will not be able to provide you with the Products/Services, or fulfil our contractual/legal obligations if you do not provide certain Personal Data necessary for Us to provide the Products/Services or to fulfil such contractual/legal obligations to you.

We will maintain the confidentiality of your Personal Data. However, if you use Our Products/Services, have an agreement/cooperation/appointment with Us, or have a working relationship with Us, then you agree that We may process, analyze, transfer and/or disclose your Personal Data in whole or in part and for purposes that We deem important in relation to Our business activities, such as including but not limited to the following purposes:

Performing Our obligations arising from any contract entered into between you and Us, including but not limited to verifying the eligibility and/or suitability of required data before providing Products/Services or before agreeing to a cooperation or working relationship.
Providing you, or allowing selected third parties to provide you, with information about other Products/Services We offer that are similar to the Products/Services you have used or inquired, via email, electronic text messaging, or telephone, insofar as you do not withdraw your consent for this purpose;
Providing you with access to and facilitating your use of Our websites/applications/electronic systems and ensuring that the content of Our websites/applications/electronic systems, Products, Services, interactive services, third-party content, and third-party websites/applications/electronic systems (where relevant) are displayed in the most effective manner for you and your device;
Providing you with information about the Products and/or interactive services that you request from Us, well as access to third-party websites/applications/electronic systems and third-party content (where relevant);
Making decisions regarding the opening or continuation of user account(s) and the creation, provision, or continuation of Products/Services, cooperation, or working relationships, in addition to maintaining the accuracy of customer data (customer due diligence), employee data (employee due diligence), or partner data (partnership due diligence), and conducting anti-money laundering, counter-terrorism financing, and prevention of financing the proliferation of weapons of mass destruction, credit, and background checks;
Providing, operating, processing, and managing user account(s), Products/Services, or managing applications for user account(s), Products/Services, every transaction (including money transfer transactions), and maintaining service quality and training employees;
Carrying out activities pertaining to the provision of user account(s), Products/Services, including subscriptions or proposed subscriptions to Products/Services (whether offered or issued by HFI or others) and the provision of research reports or materials for analysis;
Providing services and support pertaining to the Products/Services, including but not limited to providing management or administrative support or acting as an intermediary/nominee/agent in connection with your participation in the Products/Services;
Providing or granting access to Product/Service-related materials such as offering documents, reports, research results, product profiles, fact sheets, term sheets, or other materials related to the Products/Services;
Complying with domestic and foreign legal, regulatory, and compliance requirements applicable to HFI under the prevailing laws (including anti-money laundering, counter-terrorism financing, and prevention of financing the proliferation of weapons of mass destruction, tax obligations applicable to HFI, and disclosure to any stock exchange, court, governmental authority, supervisory authority, or other regulatory authority in accordance with relevant guidelines, regulations, orders, instructions, or requests from such organizations) and complying with every applicable international treaty or agreement with or between foreign and domestic governments that are applicable to HFI;
Verifying the identities and/or authority of your attorneys-in-fact who contact HFI or can be contacted by HFI, and carrying out or responding to requests, inquiries or instructions from verified attorneys-in-fact or other parties in accordance with Our applicable security procedures;
Conducting risk assessments, statistical and trend analysis and planning, including conducting data processing, statistical analysis, credit analysis, risk analysis, anti-money laundering, counter-terrorism financing, and prevention of financing the proliferation of weapons of mass destruction, creating and managing credit scoring models, conducting credit and other background checks and reviews, and maintaining your credit history and that of your authorized representatives (regardless of whether or not there is a direct relationship between such authorized representatives and HFI) for current and future reference;
Detecting, preventing, investigating, and prosecuting crimes and fraud, including assisting in any criminal investigations by relevant authorities against you, Relevant Individuals, or other persons;
Exercising (including, but not limited to, collecting amounts owed to HFI) or defending HFI's rights, arising from contracts or otherwise;
Performing internal management to operate control and management information systems and conducting internal audits or permitting external audits;
Enabling the actual or proposed assignee of HFI, or participant or sub-participant of HFI's rights in relation to you, to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation;
Complying with contractual arrangements by or between autonomous industries, industry bodies, industry provider associations, or other institutions similar to HFI;
Managing HFI's relationship with you, which may include providing information to you or Relevant Individuals, regarding HFI's products and services, obligations, or cooperation with HFI, if specifically agreed upon or permitted under statutory laws and regulations prevailing in the Republic of Indonesia;
To market the Products/Services through various communication media, including mail, telephone, SMS, facsimile, email, the internet, market research, social media, and to design or screen similar Products/Services, including by conducting market research, data analysis, and surveys;
Complying with any obligations, requirements, policies, procedures, assessments, or regulations for sharing data and information within HFI and the use of data and other information in accordance with any HFI program for compliance with sanctions or the prevention or detection of money laundering, terrorist financing, or other unlawful activities;
Providing technical assistance or resolving technical obstacles and operational issues that occur with Our applications; and/or
Facilitating business asset transactions (which may include mergers, acquisitions, spinoffs/separations or asset sales) involving HFI and/or HFI affiliates.

We may disclose the Disclosure Data of your Personal Data to other parties, including but not limited to:

Our group companies and parent companies, both within and outside the country;
Business partners, suppliers, and subcontractors for the performance of any contracts We enter into with them or you;
Advertisers and advertising networks that require data to select and provide relevant advertisements to you and others, insofar as you do not withdraw your consent for this purpose.
Supporting services partners and providers for HFI's business activities, including channelling partners, billing service providers, credit insurance service providers, payment gateway providers, psychometric analysis system providers, banks, consultants or providers of business feasibility and credit assessment services, third-party service providers providing administration, postal delivery, telemarketing, direct sales telecommunications, call centres, business processes, travel, visas, knowledge management, human resources, data processing, information technology, computers, payments, debt collection, credit reference or other background checks, or other services to HFI in connection with HFI's business operations, legal consultants, financial consultants, technical consultants, IT consultants, and tax consultants appointed by HFI to provide relevant support services;
Analytics and search engine providers who assist Us in improving and optimizing Our websites/applications/electronic systems;
Any such organization or person, if We or our partners are obligated to disclose or share your Personal Data to comply with any legal obligation, or to enforce or apply Our Terms of Use and other agreements, or to protect the rights, assets, or safety of HFI, Our customers, users, or other parties. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction purposes;
Persons or entities that are part of HFI, although only to the extent necessary to fulfil the relevant permitted purposes; and
Persons or entities or Our partners to whom HFI is obligated or required to make disclosures in accordance with legal processes or pursuant to the provisions of laws, regulations, court orders, both domestic and foreign, or agreements entered into, which are binding or applicable to HFI and any government authority, domestic or foreign, or between two or more domestic or foreign government authorities, or any disclosure based on and for the purpose of guidelines or instructions given or issued by law enforcement agencies, regulatory authorities, government agencies, tax authorities, law enforcement agencies or other authorities, or autonomous regulations from industry bodies or associations of financial service providers or stock exchanges that are required or expected to be fulfilled by HFI, or any disclosure in accordance with any contract or other commitment of HFI with legal institutions, regulatory authorities, government agencies, taxation, law enforcement agencies or other authorities, all of which may be in or outside Indonesia including disclosures to court hearings, tribunals, and/or legal institutions, regulatory authorities, taxation and government agencies, regardless of whether such legal processes, obligations, requests, requirements, agreements or guidelines currently exist or are created in the future.

C. How We Administer and Manage Your Personal Data

You are required to provide accurate, non-misleading, and reliable Personal Data. We will make reasonable efforts to ensure that your Personal Data is accurate and complete, if your Personal Data is likely to be used by HFI to make decisions affecting you, or disclosed to other relevant organizations. This means that you are required to immediately notify us of any changes to your Personal Data. We are not responsible for inaccurate or incomplete Personal Data resulting from your failure to notify or delay in notifying Us of any changes to your Personal Data.
We will also put in place reasonable and appropriate security measures to ensure that your Personal Data is adequately protected and secure. Appropriate security measures will be implemented to prevent unauthorized access, collection, use, disclosure, copying, alteration, leakage, loss, damage, and/or modification of your Personal Data. However, we are not responsible for any unauthorized use of your Personal Data by third parties that is entirely caused by factors beyond Our control.
We retain your information in accordance with Our data retention policy. This allows Us to comply with legal and regulatory requirements or use it as necessary for legitimate purposes and to address any disputes or issues that may arise.
We will also take steps to ensure that your Personal Data in Our possession or under Our control is destroyed and/or anonymized as soon as reasonably practicable when it is reasonable to assume that (i) the purpose for which the Personal Data was collected is no longer met by the retention of such Personal Data; and (ii) retention is no longer necessary for any other legal or business purposes.
We may process your Personal Data in a country other than your country of residence. To the extent that We transfer your Personal Data, We will ensure to our best efforts that the country to which your Personal Data is transferred has a level of Personal Data protection equivalent to or higher than the standard of Personal Data protection in Indonesia. However, if the country where the third party is located has a lower level of Personal Data protection, We will use adequate and binding Personal Data protection measures, such as written contracts and/or provisions and/or instruments.

D. Your Rights as A Personal Data Subject

If any Personal Data is found to fall under the category of children pursuant to Prevailing Regulations, the parent or guardian of the minor child may request that HFI delete the child's Personal Data by submitting a request to Us along with valid supporting documents.
You have the right to access and obtain copies of your Personal Data stored by HFI. Any such request may be subject to a reasonable fee to fulfil such request.
You have the right to submit a request to complete, update, and/or correct any errors and/or inaccuracies in the Personal Data you have provided to Us. However, We cannot accommodate requests to change Personal Data if We do not receive the necessary supporting documents or if We believe that such changes would violate the provisions of any statutory laws and regulations or legal requirements or cause the information to become inaccurate.
You have the right to submit a written request to Us to terminate the processing, to delete, and/or destroy your Personal Data if your Personal Data is no longer required for the purposes set out in Section B, or if there is no other legal basis for processing, or if this is not restricted by the provisions. Upon receiving such a request for termination, deletion, and/or destruction, We will respond to your request as stipulated in Our internal policies and applicable regulations.
You have the right to withdraw your consent to the processing of your Personal Data, either in whole or in part, that you have provided to Us. Upon receiving your request to withdraw consent, We will confirm receipt of such request. Insofar as you have considered and accepted the consequences that may arise in respect of the provision of the Products/Services (if any), the cooperation, the working relationship, or the fulfilment of Our obligations, We will proceed with terminating the processing of your Personal Data in accordance with our internal policies and applicable regulations.
You have the right to object to decisions based solely on automated processing, including profiling, which produce legal consequences or significantly impacts you.
If you wish to exercise your rights, or seek clarification regarding these rights, please refer to the Contact Us section below.
Notwithstanding the above provisions, your rights may be waived in the interests of national defense and security, law enforcement, public interest in the context of state administration, or the oversight of the financial services sector, monetary sector, payment systems, and financial system stability carried out in the context of state administration.

E. Credit Reference Checks

If you apply for a new product or service, We may conduct a credit and identity check on you with one or more credit reference agencies, including the Financial Information Service System (SLIK). For such purpose, We will give your information to SLIK and they will provide Us with details about you. We may use this information to:

Assess whether We are able to offer you the Products/Services and evaluate your financial capability.
Verify the accuracy of the data you have provided to Us.
Prevent criminal activities, fraud, and money laundering.
Track and collect loans/financing.
Ensure that any offer made to you is appropriate to your circumstances.

We will continue to exchange information about you with SLIK for as long as you maintain a relationship with Us. In the event of default, We may give your information to debt collection agencies for the purpose of collecting overdue or defaulted Product/Service facilities.

F. Changes to Our Privacy Notice

This Privacy Notice may be updated from time to time. The latest version of this Privacy Notice can be found at www.hinofinance.co.id or through Our official channels, which We will inform you of later. Please check back periodically for updates or changes to our Privacy Notice.

G. Contact Us

If you have further questions about the Privacy Notice and the security of your information, please contact us via email at customer_service@hinofinance.co.id

Updated September 2025