Who we are
This website is operated by Metanoia Advisory (“we”), Jakarta, Indonesia. We are the controller of personal data collected through this site. Contact: see the Contact page.
What we collect
When you write to us or book a session: name, company, role, work email, the situation you select, and any message or link you choose to share. We collect nothing more than the form asks for.
Your language choice: stored in your browser (local storage) so the site opens in your language next time. This is strictly necessary and needs no consent.
With your consent only: analytics data (pages visited, approximate location, device type) through Google Analytics 4 with IP anonymisation, and LinkedIn Insight Tag data for matched audiences. Neither loads until you accept the corresponding category in the cookie banner. You can change your choice at any time from the “Cookie settings” link in the footer.
Why we use it
To respond to your request, schedule and confirm a working session, send you material you asked for, and, with consent, understand how the site is used. We do not sell personal data and do not use it for automated decision-making.
Legal basis
Performance of a contract or steps at your request (your enquiry); legitimate interest in running a professional-services firm (security, records of correspondence); and consent (analytics, marketing tags, newsletter). Under Indonesia’s Law 27 of 2022 on Personal Data Protection and, for visitors in the EU, the GDPR.
Who processes it
Our hosting platform; HubSpot (contacts, forms and email); our calendar-booking tool; Google Analytics 4 (after consent); LinkedIn (after consent); and our newsletter tool (double opt-in). Each processes data on our instructions under its own data-processing terms. Some are located outside Indonesia; transfers rely on the processor’s standard contractual safeguards.
How long we keep it
Enquiry records for as long as we have a relationship with you and up to five years after the last contact, unless the law requires longer. Analytics data is retained for 14 months. Newsletter data until you unsubscribe.
Your rights
You may ask to access, correct, delete or restrict the use of your data, object to processing, withdraw consent, and request a copy in a portable format. Write to us at the address on the Contact page. We respond within the periods set by the applicable law. You may also complain to the relevant data-protection authority.
Security
Access to systems holding personal data is limited to named people with two-factor authentication. Client files are never processed in consumer AI tools.
Changes
We will post any change here with a new “last updated” date.