1. Information We Collect

We may collect two types of information from visitors: information collected automatically when you browse our website, and information you voluntarily provide to us.

Automatically collected information may include:

• IP address — used to identify the approximate geographic location of visitors and to help diagnose server problems
• Browser type and version — to ensure our website displays correctly across different browsers
• Device type and operating system — to optimize the website layout and performance for your device
• Pages visited and navigation paths — to understand how visitors move through our site and which content is most useful
• Date and time of visits — to identify traffic peaks and plan content updates accordingly
• Referring website or URL — to understand how visitors discover our website
• Time spent on each page — to measure content engagement and identify areas for improvement
• Search queries used to find our website — to optimize our content for relevant searches

Information you voluntarily provide may include:

• Full name — to identify who is reaching out to us and to personalize our response
• Email address — to send replies and relevant information
• Phone number — for direct communication when needed
• Message content — including the topic and details of your inquiry
• Student registration data — such as date of birth, previous school, and parent or guardian information, submitted during enrollment

We collect only what is necessary for the stated purposes. We do not collect sensitive categories of personal data such as health information, financial details, or government-issued identification numbers, unless explicitly required and consented to by the user.

2. How We Use the Information

We use the information we collect strictly to operate and improve our services. Specifically, the collected data may be used to:

• Improve overall website performance, speed, and reliability
• Analyze visitor traffic patterns to understand audience behavior and preferences
• Enhance the user experience by refining layout, navigation, and content presentation
• Respond promptly and accurately to messages, questions, and requests submitted through contact forms
• Process new student registrations and manage related administrative procedures
• Send updates about programs, events, announcements, and activities of Pondok Pesantren Al-Falah
• Conduct internal analytics to support decision-making and content planning
• Detect, investigate, and address technical issues, errors, or security threats
• Comply with applicable laws, regulations, and legal obligations

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects. We do not sell, rent, or trade your information to third parties for commercial purposes. All use of your data is limited to the purposes described in this policy.

3. Cookies and Tracking Technologies

This website may use cookies and similar technologies such as web beacons and pixel tags to improve your browsing experience and collect usage information. Cookies are small text files placed on your device by a web server when you visit a website.

We may use the following categories of cookies:

• Strictly necessary cookies — required for core website functions to operate. Without these, certain features cannot work.
• Analytics and performance cookies — help us understand how visitors interact with our website by collecting anonymous usage data such as page views, session duration, and bounce rate.
• Preference cookies — allow the website to remember your choices, such as language settings or display preferences, to provide a more personalized experience.
• Third-party cookies — may be set by external services embedded in our website, such as video players or social media buttons, each governed by their respective privacy policies.

You have the right to accept or decline non-essential cookies. You can control and manage cookies through your browser settings. Instructions for managing cookies vary by browser. Please refer to your browser's help documentation for guidance. Note that disabling certain cookies may limit the functionality of parts of this website.

4. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or loss. Our security practices include:

• Using HTTPS (SSL/TLS) encryption for all data transmitted between your browser and our web server
• Restricting access to personal information to authorized staff or service providers only, on a need-to-know basis
• Regularly reviewing and updating our data handling and storage practices
• Using reputable, secure hosting infrastructure with appropriate server-level protections
• Monitoring our systems for potential vulnerabilities and security incidents

Despite our efforts, no system or method of data transmission over the internet is completely secure or error-free. We cannot guarantee the absolute security of information you transmit to or through our website. In the event of a data breach that poses a significant risk to your rights, we will notify affected users as required by applicable law.

5. Sharing Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their marketing or commercial purposes. We may share your information only in the following limited and specific circumstances:

• With your consent — when you have explicitly agreed to a specific sharing arrangement
• Service providers — with trusted third-party vendors who assist us in operating the website, such as web hosting, email delivery, or analytics services. These parties are contractually bound to maintain the confidentiality of your data and may not use it for their own purposes.
• Legal compliance — when required by law, court order, or governmental authority, or to protect our legal rights
• Safety and protection — to protect the safety, rights, or property of our organization, our users, or others when we believe disclosure is necessary
• Business transfers — in connection with any merger, acquisition, or restructuring, in which case affected users will be notified via a prominent notice on our website

All third parties with whom we share data are required to comply with applicable data protection laws and our internal data handling standards.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Once information is no longer needed, we will securely delete or anonymize it.

• Contact form messages are retained for up to 12 months from submission, unless a longer period is needed to resolve an ongoing matter
• Student registration data is retained for the duration of enrollment and for a defined period thereafter in compliance with educational record-keeping regulations
• Website analytics data is stored in aggregated, anonymized form and may be retained for up to 24 months
• Log files generated by our server may be retained for up to 90 days for security and diagnostic purposes

7. Your Rights Regarding Your Data

Subject to applicable law, you may have the following rights with respect to the personal data we hold about you:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may request correction of any inaccurate or incomplete personal data
• Right to erasure — you may request deletion of your personal data, subject to certain legal obligations that may require us to retain it
• Right to restrict processing — you may request that we temporarily limit how we process your data in certain circumstances
• Right to data portability — where applicable, you may request that we provide your data in a structured, commonly used, and machine-readable format
• Right to withdraw consent — where our processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal
• Right to lodge a complaint — you have the right to file a complaint with the appropriate data protection authority in your jurisdiction

To exercise any of these rights, please contact us through the contact page available on this website. We will acknowledge your request promptly and respond within a reasonable timeframe in accordance with applicable law.

8. External Links

Our website may contain links to external websites, including social media platforms, partner institutions, and other relevant resources. These links are provided for informational purposes and user convenience only.

• We have no control over the content, security, or privacy practices of external websites
• The inclusion of a link on our website does not constitute an endorsement of that site or its content
• Visiting external websites is entirely at your own discretion and risk
• We encourage you to read the privacy policies of any external websites before sharing your personal information

9. Children's Privacy

This website is not directed at children under the age of 13, and we do not knowingly collect personal data from minors without verifiable parental or guardian consent. If you believe that a child has provided us with personal information without appropriate consent, please contact us immediately so we can take prompt action to remove such data from our systems.

For the registration of santri who are minors, all data must be submitted by a parent or legal guardian, who accepts responsibility for the accuracy and appropriateness of the information provided on behalf of the minor.

10. Changes to This Privacy Policy

We reserve the right to update or revise this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational circumstances. When we make significant changes, we will update the "Last updated" date at the top of this page. For material changes, we may also provide a prominent notice on the homepage or send an email notification to registered users where applicable.

We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of this website following the posting of changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data rights, please do not hesitate to reach out. You can contact us through:

• The contact page available on this website
• WhatsApp: +62 858-3215-5052
• Physical address: Teluk Dalem Ilir, Rumbia, Lampung Tengah

We are committed to addressing your concerns in a timely, fair, and transparent manner.