Privacy Policy – Last updated 28 August 2026  

PT BYD Motor Indonesia (hereinafter referred to as “BYD”, “we”, “our” or “us”) may collect, store, process and use your Personal Data to provide, maintain and improve the BYD AI Chatbot (powered by Sprinklr) (“Chatbot”) and related services. This Privacy Policy provides information on our Personal Data processing activities.

We highly value and respect our customers’ privacy. This Privacy Policy explains how we use your Personal Data and the rights available to you. Please read it carefully before using the Chatbot or accepting our services.

I.  Personal Data We Collect and Why

II.  How We Share Your Personal Data

III.  Rights in relation to Personal Data

IV.  How to Make Requests

V.  Retention Period

VI.  Purpose Limitation

VII.  Security

VIII.  International Transfer

IX.  Changes to This Privacy Policy

X.  Contact Us

This Privacy Policy does not apply to the independent processing of your Personal Data by our authorized BYD dealers or other third parties to whom you directly provide your information. These entities are responsible for their own collection and processing of Personal Data in accordance with their respective privacy policies. Please refer to those entities and their privacy policies for further information. For the avoidance of doubt, this Privacy Policy continues to apply to BYD’s collection, use and disclosure of your Personal Data to an authorized BYD dealer where necessary to provide the services you have requested.

I.- Personal Data We Collect and Why

“Personal Data” refers to any data or information from which an individual may be directly or indirectly identified. When we provide the Chatbot, products or related services, we may need to process Personal Data.

Interaction with the Chatbot
When you interact with our Chatbot through a supported communication platform (such as WhatsApp), the following data will be collected:

l Your name, phone number, email address, and other information you voluntarily share solely to respond to your enquiries, arrange requested services (including test drives), and connect you with the appropriate authorized BYD dealer for requested dealer follow-up;

l The content of your conversations with the Chatbot, including interaction history;

l Your explicit consent logs (including user ID, timestamp, and the specific policy name and version you agreed to).

This data will never be used for third-party profiling, behavioral advertising, or direct marketing without your explicit and separate opt-in consent. Internal lead categorization and tagging are conducted solely to process your requested services (such as arranging test drives).

II.- How We Share Your Personal Data

Personal Data may be accessed by or transferred to BYD’s affiliates, authorized BYD dealers, service providers (including Sprinklr), communication platform providers, and government or law enforcement authorities where permitted or required by applicable law.

We do not sell your Personal Data. We may also use or share Personal Data in a de-identified or aggregate form. The table below illustrates the categories of recipients with whom we may share your Personal Data:

Categories of Recipients	Description	Reason for Sharing
Affiliates and subsidiaries	Companies that are owned or controlled by BYD, or where we have a substantial ownership interest.	To assist, operate, enhance, and fulfil services on our behalf.
Authorized BYD dealers	Authorized dealers appointed to provide BYD sales and customer support services, including: PT Arista Elektrika Indonesia PT BUMI HIJAU MOBIL PT BIPOAUTO TEKNOLOGI NUSANTARA PT HARMONI MAKMUR INDONESIA PT ARISTA JAYA ELEKTRINDO	Where you request dealer assistance, BYD may share the relevant Personal Data with the appropriate authorized BYD dealer so that it can contact you and provide the requested services.
Sprinklr, Inc.	Service provider and data processor providing the Chatbot platform and related services.	To operate the Chatbot, process customer interactions, and transmit relevant lead information to BYD's CRM for requested dealer follow-up.
Communication platform providers	Providers of communication platforms through which the Chatbot is made available.	To transmit Chatbot messages and process related account, message and delivery data under their applicable terms and privacy policies.
Law enforcement and government authorities	Disclosure of information as required by law, or when otherwise appropriate.	To comply with applicable laws.

When third parties are given access to your Personal Data, we will take the required contractual, technical and organizational measures to ensure that your Personal Data is processed only to the extent necessary for the relevant purpose.

Where Personal Data is required, BYD will explain why the information is needed so that you can decide whether to provide it, unless its provision is required by applicable law or necessary for the requested service. BYD may disclose your Personal Data to the recipients identified in this Privacy Policy where necessary to fulfil your request, such as responding to an enquiry, arranging a test drive or connecting you with an authorized BYD dealer. BYD will not disclose your Personal Data for purposes inconsistent with this Privacy Policy unless otherwise required or permitted by applicable law.

III.- Rights in Relation to Personal Data

You generally have the right to ask us:

a) for access to and a copy of your personal data that we hold;

b) that some of your personal data is provided to you or sent to another data controller in a commonly used, machine readable format;

c) to update or correct your personal data in order to make it accurate;

d) to delete your personal data from our records in certain circumstances;

e) to restrict the processing of your personal data in certain circumstances;

f) to object to us processing your Personal Data in certain circumstances (e.g. where we process your Personal Data for direct marketing purposes).

You may submit a request to exercise these rights. Where we receive a valid request, we will respond and take the required action within the period prescribed by Applicable Data Protection Law. Where we cannot fulfil a request, we will explain the applicable reason, unless prohibited by law.

If you would like to stop receiving promotional messages, please follow the opt-out instructions provided in the Chatbot messages. Opting out of promotional messages will not affect service-related or transactional communications where those communications are necessary or otherwise lawfully permitted.

These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data or if making the information available to you would reveal personal data about another person or if we are legally prevented from disclosing such information. In some instances, this may mean that we are able to retain data even if you withdraw your consent.

We hope that we can address any questions you may have about the way we process your Personal Data. If you have any concerns, please contact us as described below in Section IV, “How to Make Requests”.

In the event you still have unresolved concerns, you also have the right to lodge a complaint with a supervisory authority, in particular the data protection authority in the jurisdiction of your habitual residence or place of work.

Finally, where we require Personal Data to comply with legal or contractual obligations, provision of that Personal Data is mandatory. If it is not provided, we may be unable to provide the requested service or comply with the relevant obligation. In all other cases, provision of the requested Personal Data is optional.

IV.- How to Make Requests  

If you would like to access, correct or delete any Personal Data we hold about you, or exercise any other rights available under applicable laws and regulations protecting Personal Data (“Applicable Data Protection Law”), you may submit a request by e-mail to customer.care1@byd.com.

 

We aim to respond to your request for access, correction, or deletion within the time required by Applicable Data Protection Law. If we need more time to respond to your request, we will let you know of the reason and the extension period in writing.

 

V.- Retention Period

BYD will not use or retain Personal Data longer than necessary to fulfil the purposes described in this Privacy Policy, comply with contractual or legal obligations, or as otherwise permitted or required by Applicable Data Protection Law.

Chatbot data are stored on Sprinklr’s servers in the United States. Sprinklr will delete Personal Data (i) upon termination or expiry of the relevant service contract; (ii) in accordance with the applicable retention package selected by BYD and configured under the applicable order form; and/or (iii) upon BYD’s reasonable request. Sprinklr may retain Personal Data to the extent and for such period as legally required, subject to the applicable confidentiality and processing requirements.

Where we obtain your Personal Data following a request for information, a test drive or another request relating to our products or services, we will retain the Personal Data only for as long as necessary to respond to the request and manage any resulting customer relationship, subject to applicable retention requirements.

VI.- Purpose Limitation

The Personal Data may only be processed to the extent necessary for the described purposes. Personal Data may in principle not be processed for other purposes other than that for which the Personal Data were collected. If there is a necessity or need to process Personal Data for other purposes, it shall be investigated by BYD whether the purposes of the intended data processing are compatible with the original purposes. BYD will provide you with information on that other purpose prior to that further processing.

VII.- Security

BYD implements appropriate technical and organizational measures designed to protect your Personal Data against loss, falsification and unauthorized access. However, internet transmission is not completely secure, and we cannot guarantee the security of information transmitted through the Chatbot. If a Personal Data security incident occurs, we will take remedial and notification measures in accordance with applicable law and regulatory requirements.

VIII.- International Transfer

We operate internationally. Your Personal Data may be transferred to and stored on Sprinklr’s servers in the United States and may be processed outside Indonesia by relevant service providers for the purposes described in this Privacy Policy. We will comply with Applicable Data Protection Law governing cross-border transfers.

We may rely on various legal grounds to collect, use and otherwise process your Personal Data, including your consent; the necessity to provide requested services or take steps at your request; compliance with a legal obligation; protection of your or another person’s vital interests; or a legitimate interest balanced against your rights and interests.

IX.- Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business functions or Personal Data protection practices. If we make changes, we will post the updated Privacy Policy and revise the “Last Updated” date. Where a change materially affects the nature of the processing or your rights, we will provide appropriate notice through the Chatbot, our website or another appropriate channel.

X.- Contact Us

If you have any questions or comments about this Privacy Policy, please do not hesitate to contact us at:

Phone: (+62) 800 1686868

E-mail: customer.care1@byd.com 

Postal Address: Autograph Tower, Level 50, Unit K-01 (Full Floor), Jalan M.H. Thamrin Kav. 10, Central Jakarta 10230, Indonesia.