Hazkia Privacy Policy

Last updated: 22 August 2025
Who we are: Hazkia is an HRIS application developed by Waizly Technology (“Hazkia”, “we”, “us”). This Policy explains how we collect, use, store, share, and protect personal data when you use Hazkia (web and mobile).

Scope & Legal Basis

We process personal data in accordance with Indonesia’s Personal Data Protection Law (UU No. 27/2022) and other applicable regulations. This Policy applies to end-users, employees whose data is processed by their employer through Hazkia, and admin users of our clients.

Data We Collect

Depending on the features you use, we may process:

  • Identity & contact: name, email, phone number.
  • Employment data: position, department, schedules/shifts, attendance history, leave/OT records.
  • Payroll & compliance: NPWP, salary information, BPJS/PPh21 deductions, digital payslips.
  • Device & logs: IP address, device identifiers, usage activity, diagnostics.
  • (Optional) Special categories: biometric data (e.g., face recognition for attendance). We only process this with explicit consent and where enabled by your organization.

Legal Grounds for Processing

We rely on one or more of the following: 

  • Explicit consent (especially for biometrics).
  • Performance of a contract (providing the HRIS service).
  • Legal obligations (e.g., tax/employment).
  • Vital interests and legitimate interests balanced with your rights (security, fraud prevention, product integrity).

Purposes of Use

  • Deliver HR features (attendance, shift & leave management, overtime, payroll, and digital payslips).
  • Provide dashboards, analytics, and reports for HR operations.
  • Identity verification (including biometrics where enabled and consented).
  • Security, auditing, troubleshooting, and customer support.
  • Compliance with applicable laws and requests from authorities.

Sharing of Data

We do not sell your data. We may share data with:

  • Processors (e.g., cloud hosting, email/SMS, analytics) under written data processing terms and our instructions.
  • Your employer/organization (our client) for internal HR purposes.
  • Authorities when legally required or to protect rights, safety, and compliance.

International Data Transfers

If data is transferred outside Indonesia, we will ensure adequate protection measures (e.g., contractual safeguards, equivalent protection, or explicit consent where needed).

Retention & Deletion

We retain personal data only as long as necessary for the stated purposes or as required by law. When retention ends—or upon a valid request, we delete or anonymize data in a secure manner.

Your Rights

Subject to law, you may request: access/copy, rectification, erasure/destruction, withdrawal of consent, restriction/objection (including to automated processing/profiling where applicable), and data portability (where technically feasible and secure).
Submit requests through our contact details below. We aim to respond promptly and within statutory timeframes (generally within 72 hours for incident notices and within legally prescribed periods for rights requests).

Security

We implement appropriate technical and organizational measures (e.g., encryption in transit/at rest where applicable, role-based access control, logging/monitoring, employee training) to protect data against unauthorized access, disclosure, alteration, or loss.

Data Breach Notification

In the event of a personal data breach, we will notify affected data subjects and relevant authorities no later than 72 hours (3×24 hours) after becoming aware, including the nature of the breach, affected data, timing, and remediation steps.

Cookies & Similar Technologies

We use cookies/SDKs for core functions, performance analytics, and experience improvements. You can manage preferences via your browser/device settings; certain features may be impacted.

Children

Hazkia is not intended for independent use by children. Where an organization processes children’s data, the organization (as data controller) must ensure valid legal grounds and obtain any required consents.

Changes to This Policy

We may update this Policy from time to time. For material changes, we will provide advance notice via the app and/or email.

Contact Us

Email: support@hazkia.id
Address: Jl. Pulo Mawar No.55, RT.2/RW.4, Grogol Utara, Kec. Kby. Lama, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12210