RUBBER — Jiu Jitsu Studio, South Jakarta
Privacy Policy
Last updated: 14 October 2026
This policy explains what personal data RUBBER Jiu Jitsu Studio ("RUBBER", "we", "us") collects, why we collect it, who we share it with, and the rights you have over it. We handle personal data in line with Indonesia's Law No. 27 of 2022 on Personal Data Protection (the "PDP Law").
Who we are
RUBBER Jiu Jitsu Studio is operated by CV Bumi Sportiva Arena, Jl. Dempo VI No. 7, RT.5/RW.3, Gunung, Kebayoran Baru, South Jakarta 12120, Indonesia. We are the data controller for the personal data described in this policy.
Questions about this policy or your data: info@rubberjiujitsu.com or WhatsApp +62 852 8454 8339.
What we collect
When you request a free trial or contact us
- First and last name, email address, WhatsApp or phone number
- What you're interested in, your message, and how you'd like us to contact you
- Conversations with us by WhatsApp, email or Instagram direct message
When you train with us
- Account and membership details, class bookings, check-ins and attendance
- Belt rank, stripes and promotion history
- Purchase and billing history
- An emergency contact
When you submit to RUBBER RADIO
- Your name, whether you're a member or a friend, the playlist or mix title, its link, and any note you add
- A scrambled (hashed) form of your IP address, which we use only to limit spam and normally clear within a day
We review every submission before it goes on air. If we approve it, your name, member or friend status, title, link and note are published on our RUBBER RADIO page. If we don't, we delete it.
Health and safety information
Before you train, we may ask about injuries or medical conditions that affect your safety on the mat. Health data is specific personal data under the PDP Law. We only collect it with your explicit consent, keep access to it limited to coaches and staff who need it, and use it only to keep you safe and respond in an emergency.
Payments
Payments are processed by our payment partners. We receive confirmation of the payment, the amount and the payment method type. We do not store full card numbers or e-wallet login details.
Photos and video
We sometimes photograph or film classes and events. We will ask before featuring you in a way that clearly identifies you in our marketing, and you can tell us at any time that you'd prefer not to appear.
When you visit our website
Our hosting provider and the services embedded on our site, such as Google Maps, may automatically collect technical data such as your IP address, browser type and the pages you view. We do not use analytics, advertising or tracking tools on our website.
Our RUBBER RADIO page plays music through players from Spotify, Apple Music, YouTube, SoundCloud and Mixcloud, and shows album art from Last.fm. When those players and images load, these services receive the same kind of technical data and may set their own cookies, under their own privacy policies.
Our free trial form doesn't store your details on our website. When you submit it, it opens a pre-filled WhatsApp message to us, an email in your own email app, or both, depending on how you'd like us to contact you. Your details reach us only when you send that message. WhatsApp is run by Meta, which handles your message under its own privacy policy. We keep your request in our WhatsApp and email accounts, which only authorised staff can access.
Children
We run kids classes. Personal data about anyone under 18 is provided by, and processed with the consent of, their parent or legal guardian, as the PDP Law requires. Parents and guardians can exercise all the rights below on their child's behalf.
How we use your data
| Purpose | Legal basis under the PDP Law |
|---|---|
| Respond to enquiries and arrange your free trial | Your consent |
| Manage your membership, bookings, check-ins and billing | Performing our agreement with you |
| Keep you safe while training and act in an emergency | Your explicit consent, and protecting your vital interests |
| Tell you about schedule changes and gym updates | Performing our agreement with you |
| Record your belt promotions with Hardianism | Performing our agreement with you |
| Review and publish your RUBBER RADIO submissions | Your consent |
| Send you news, offers and event invitations | Your consent, which you can withdraw at any time |
| Keep financial and tax records | Complying with our legal obligations |
| Run, secure and improve the gym and our website | Our legitimate interests |
We do not sell your personal data.
Who we share it with
- Booking and membership platform: the provider that hosts your account, bookings and attendance records.
- Payment processors: to process your payments.
- Hardianism: our affiliated academy, which manages belt promotions. We share your name, current rank and training history as needed to assess and record your promotions.
- Communication tools: WhatsApp (Meta), our email provider and Instagram, when you message us through them, including when you use our free trial form.
- Website hosting: Hostinger, which hosts our website and stores RUBBER RADIO submissions.
- ClassPass: if you book a class through ClassPass, ClassPass shares your booking with us and its own privacy policy applies to the data it holds.
- Authorities: when Indonesian law requires us to.
These providers may only use your data to provide their services to us.
Transfers outside Indonesia
Some of our providers store data outside Indonesia, for example in Singapore. When your data is transferred abroad, we take the steps the PDP Law requires to make sure it stays protected to an equivalent standard.
How long we keep it
- Trial requests and enquiries that don't lead to a membership: 12 months after our last contact.
- RUBBER RADIO submissions: deleted straight away if we don't approve them. Published submissions stay on the page until we remove them or you ask us to.
- Member records: for as long as you're a member, then 2 years.
- Health and safety information: deleted 12 months after your membership ends, unless we need it to deal with an incident or claim.
- Financial records: for as long as Indonesian tax and accounting law requires.
After that, we delete or anonymise your data.
Your rights
Under the PDP Law, you have the right to:
- Know who is processing your data, why, and on what basis
- Access and get a copy of your data
- Correct data that's inaccurate or incomplete
- Have your data deleted or destroyed
- Withdraw consent you've given us
- Object to decisions made solely by automated processing
- Restrict or pause how we process your data
- Receive your data in a commonly used format, or have it sent to another provider
- Complain, and seek compensation if your data is mishandled
To use any of these rights, email info@rubberjiujitsu.com or message us on WhatsApp. We may need to confirm your identity first. We will respond within the time limits set by the PDP Law. Withdrawing consent doesn't affect processing we've already done, and may mean we can't continue some services, such as your membership.
How we protect it
We limit access to personal data to the people who need it, use reputable providers, and protect our accounts and computers with strong passwords and access controls. If a personal data breach occurs, we will notify you and the relevant authority in writing within 3 x 24 hours of becoming aware of it, as the PDP Law requires.
Other websites
Our site links to services we don't control, including our merchandise shop at quietundernone.com, Instagram and Hardianism. Their own privacy policies apply when you use them.
Changes to this policy
We'll update this page when our practices change and revise the date at the top. If a change materially affects how we use your data, we'll tell you directly before it takes effect.
Contact
CV Bumi Sportiva Arena
Jl. Dempo VI No. 7, RT.5/RW.3, Gunung, Kebayoran Baru
South Jakarta 12120, Indonesia
Email: info@rubberjiujitsu.com
WhatsApp: +62 852 8454 8339