Last Updated: July 21, 2025

At RUMREN ID, we take the security of your data very seriously. This Security Policy outlines the measures we take to protect your information when you use our website, https://rumren.id/, and our services, including subdomain services, website design, and features for buying and selling physical and digital goods (collectively, the “Services”).

Our commitment is to ensure the integrity, confidentiality, and availability of your data.

1. Our Data Security Principles

• Confidentiality: Ensuring that information is accessible only to authorized parties.

• Integrity: Maintaining the accuracy and completeness of information and its processing methods.

• Availability: Ensuring that information and related systems are accessible and usable by authorized parties when needed.

2. Technical Security Measures

We implement various technical security measures to protect your data:

• Data Encryption:

  • Data in Transit: All communications between your browser and our servers are encrypted using the latest Transport Layer Security (TLS/SSL). This ensures that transmitted data (such as login credentials, personal information, and transaction details) is protected from interception.

  • Data at Rest: Sensitive data stored on our servers is encrypted to prevent unauthorized access.

• Access Controls:

  • Access to sensitive systems and data is restricted to authorized personnel who have a legitimate business need to access such information.

  • We employ the principle of least privilege, ensuring that employees only have access to the data and systems absolutely necessary to perform their duties.

  • Multi-factor authentication (MFA) is implemented for access to internal systems and sensitive user accounts.

• Network Security:

  • We utilize firewalls and intrusion detection/prevention systems to monitor and block suspicious traffic.

  • Our networks are segmented to limit lateral movement in the event of a breach.

• Secure Software Development:

  • We follow best practices in secure software development, including code review and security testing.

  • Security vulnerabilities are identified and addressed through regular vulnerability scanning and penetration testing.

• Data Backup and Disaster Recovery:

  • Data is regularly backed up to prevent data loss.

  • We have a disaster recovery plan in place to ensure service continuity in the event of a major incident.

3. Administrative and Physical Security Measures

• Employee Training: All our employees receive regular data security training to ensure they understand their responsibilities in protecting information.

• Policies and Procedures: We have clear security policies and procedures governing data handling, access control, and incident response.

• Physical Security: Our servers and infrastructure are hosted in secure data centers with strict physical access controls, 24/7 surveillance, and other security measures.

• Vendor Management: We conduct due diligence on third-party vendors to ensure they adhere to adequate security standards.

4. Marketplace Security

While RUMREN ID implements robust security measures for our platform, it is important to note that within the buying and selling features:

• User Responsibility: Users are responsible for exercising caution when interacting with other users on the marketplace. This includes verifying information, being wary of scams, and reporting suspicious activity.

• Payment Information: We do not store credit card details directly. All payment processing is handled by secure, industry-standard compliant third-party payment providers (e.g., PCI DSS).

5. User Responsibilities

Security is a shared effort. You also have a vital role in maintaining the security of your information:

• Account Credentials: Keep your passwords confidential and do not share them with anyone. Use strong and unique passwords.

• Multi-Factor Authentication (MFA): Enable MFA if available for your account for an additional layer of security.

• Beware of Phishing: Be cautious of suspicious emails, messages, or websites attempting to obtain your login or personal information.

• Updated Software: Ensure your operating system, web browser, and antivirus software are always up-to-date.

• Report Incidents: If you suspect a security breach or unauthorized activity on your account, contact us immediately.

6. Security Incident Response

We have a security incident response plan to handle potential data breaches or other security incidents. In the event of an incident, we will take the following steps:

• Identify and address the root cause of the incident.

• Mitigate the impact of the incident.

• Notify affected users in accordance with legal requirements.

• Conduct a post-mortem analysis to prevent similar incidents in the future.

7. Changes to This Security Policy

We may update our Security Policy from time to time. We will notify you of any changes by posting the new Security Policy on this page and updating the “Last Updated” date at the top of this Security Policy.

You are advised to review this Security Policy periodically for any changes. Changes to this Security Policy are effective when they are posted on this page.

8. Contact Us

If you have any questions about this Security Policy, please contact us:

• Via our contact form: https://rumren.id/contact

• Via Telegram: t.me/halorumren

• Address: East Java, Indonesia