Last Updated 14 September 2026
PRIVACY POLICY
We value your privacy and are committed to protecting your personal data. This outlines how we collect, use, and safeguard your information.
Our Commitment
This Privacy Notice for PT BIGHOT RESTAURANT INDONESIA (we, us, or our) describes how and why we might access, collect, store, use, and/or share (process) your personal information when you use our services (Services), including when you:
Visit our website REDDOG
Visit our website at https://reddog.co.id, or any website of ours that links to this Privacy Notice
Download or use REDDOG mobile application
Download and use our mobile application REDDOG or any other application of ours that links to this Privacy Notice
Use REDDOG services
Visit or order at any outlet, or use the REDDOG app to order.
Engage with REDDOG
Engage with us in other related ways, including any sales, marketing, or events that involve our services or products.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@reddog.co.id.
1. What Information Do We Collect?
Data Collection & Processing
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, place an order, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services (such as our loyalty program), or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
-
Names: Full name provided during registration or profile setup.
-
Phone numbers: Used for account creation, one-time-password (OTP) verification, sign-in, and communication.
-
Email addresses: Optionally provided, and used for notifications and support.
-
Date of birth: Provided during registration, used to personalize offers and confirm eligibility.
-
Account credentials: A PIN you set to authenticate access to your account.
-
Order information: The items you order, order history, and any notes or preferences you provide.
-
Delivery/location details: Saved addresses and, where you allow it, your device location, used to find the nearest outlet and process orders.
-
Loyalty data: Points earned and redeemed, and rewards or promotions you participate in.
Sensitive Information. We do not process sensitive personal information.
Payment Data. If you make a purchase, your payment is processed by Midtrans (PT Midtrans), our third-party payment gateway. Your payment details — including any card, e-wallet, or bank account information — are collected and processed directly by Midtrans and are subject to their privacy policy; we do not collect or store your full payment card or account details ourselves. You can review Midtrans's privacy policy at https://midtrans.com/privacy-policy.
Application Data. If you grant us permission, we may collect:
-
Geolocation Information: Location data from your device to provide location-based features such as finding nearby outlets and delivery. You can enable or disable this anytime in your device settings.
-
Push Notifications: Notifications about your account, orders, or promotions, delivered via Firebase Cloud Messaging. You may opt out at any time in your device settings.
-
Mobile Device Data: Device information such as device ID, model, operating system version, system configuration, IP address, mobile network, and app usage details.
This information helps us maintain the security and proper operation of the Services, troubleshoot issues, and perform analytics and reporting.
All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
In Short: Some information — such as your IP address and device characteristics — is collected automatically when you use our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, device and application characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:
-
Log and Usage Data: Diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, such as your IP address, device information, browser type, and settings; timestamps of your activity; and the features and pages you view.
-
Device Data: Information about the device you use to access the Services, such as device model, operating system, unique device identifiers, and mobile network information.
-
Location Data: Precise or approximate location data from your device, depending on the permissions you have granted. You can opt out by disabling location access in your device settings.
2. How Do We Process Your Information?
Data Collection & Processing
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
-
To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account (including phone-number verification via one-time password and PIN sign-in), as well as keep your account in working order.
-
To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service, such as showing our menu, locating the nearest outlet, and placing and tracking your orders.
-
To respond to user inquiries and offer support. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
-
To send administrative information. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
-
To fulfill and manage orders. We may process your information to fulfill and manage your orders, payments, and refunds made through the Services, including through our payment gateway, Midtrans.
-
To manage our loyalty program and rewards. We may process your information to award, track, and let you redeem loyalty points, rewards, and promotions.
-
To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
-
To send marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, in accordance with your preferences. You can opt out of our marketing communications at any time.
-
To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention (for example, limiting repeated verification attempts).
-
To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
-
To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide campaigns that are most relevant to you.
-
To personalize your experience. We may process your information to tailor content, offers, and recommendations based on your order history, location, and preferences.
-
To comply with our legal obligations. We may process your information to comply with applicable laws, respond to legal requests, and exercise or defend our legal rights.
-
To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital interest, such as to prevent harm.
3. What Legal Bases Do We Rely On to
Process Your Information?
Data Collection & Processing
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., a lawful basis) to do so under applicable law — such as with your consent, to comply with laws, to provide you with services or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
We process your personal information in accordance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP) and other applicable laws. We rely on one or more of the following lawful bases:
-
Consent. We may process your personal information if you have given us your consent to use it for a specific purpose. You can withdraw your consent at any time. However, withdrawing consent may affect our ability to provide certain services.
-
Performance of a Contract. We may process your personal information when necessary to perform a contract with you — such as processing and delivering your order — or to take steps at your request before entering into a contract.
-
Legal Obligations. We may process your information when required to comply with applicable laws and regulations, including lawful requests and legal processes from government authorities or courts.
-
Vital Interests. We may process your information when necessary to protect your vital interests or those of another individual, such as in emergency situations or to prevent harm.
-
Legitimate Interests. We may process your information when it is reasonably necessary to achieve our legitimate business interests — such as securing our Services and preventing fraud, improving our products and Services, and marketing to you — provided those interests do not override your rights and freedoms.
If we ever process your personal information for a purpose other than those set out above, we will notify you and, where required by law, seek your consent.
3. What Legal Bases Do We Rely On to
Process Your Information?
Data Collection & Processing
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., a lawful basis) to do so under applicable law — such as with your consent, to comply with laws, to provide you with services or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
We process your personal information in accordance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP) and other applicable laws. We rely on one or more of the following lawful bases:
-
Consent. We may process your personal information if you have given us your consent to use it for a specific purpose. You can withdraw your consent at any time. However, withdrawing consent may affect our ability to provide certain services.
-
Performance of a Contract. We may process your personal information when necessary to perform a contract with you — such as processing and delivering your order — or to take steps at your request before entering into a contract.
-
Legal Obligations. We may process your information when required to comply with applicable laws and regulations, including lawful requests and legal processes from government authorities or courts.
-
Vital Interests. We may process your information when necessary to protect your vital interests or those of another individual, such as in emergency situations or to prevent harm.
-
Legitimate Interests. We may process your information when it is reasonably necessary to achieve our legitimate business interests — such as securing our Services and preventing fraud, improving our products and Services, and marketing to you — provided those interests do not override your rights and freedoms.
If we ever process your personal information for a purpose other than those set out above, we will notify you and, where required by law, seek your consent.
4. When and With Whom Do We
Share Your Personal Information?
Data Collection & Processing
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., a lawful basis) to do so under applicable law — such as with your consent, to comply with laws, to provide you with services or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
We process your personal information in accordance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP) and other applicable laws. We rely on one or more of the following lawful bases:
-
Consent. We may process your personal information if you have given us your consent to use it for a specific purpose. You can withdraw your consent at any time. However, withdrawing consent may affect our ability to provide certain services.
-
Performance of a Contract. We may process your personal information when necessary to perform a contract with you — such as processing and delivering your order — or to take steps at your request before entering into a contract.
-
Legal Obligations. We may process your information when required to comply with applicable laws and regulations, including lawful requests and legal processes from government authorities or courts.
-
Vital Interests. We may process your information when necessary to protect your vital interests or those of another individual, such as in emergency situations or to prevent harm.
-
Legitimate Interests. We may process your information when it is reasonably necessary to achieve our legitimate business interests — such as securing our Services and preventing fraud, improving our products and Services, and marketing to you — provided those interests do not override your rights and freedoms.
If we ever process your personal information for a purpose other than those set out above, we will notify you and, where required by law, seek your consent.
5. Do We Use Cookies and
Other Tracking Technologies?
Data Collection & Processing
In Short: Our web app and websites may use cookies and similar technologies; our mobile apps may use comparable device identifiers for the same purposes.
We use cookies, local storage, and similar technologies to:
1. keep you logged in and remember preferences,
2. secure the Services and prevent abuse,
3. understand how the Services are used (analytics), so we can improve them.
​
We may use tools such as Google Analytics and Firebase Analytics for this purpose. Where required by applicable law, you can manage cookie preferences through your browser or device settings. Details of any analytics providers in use should be listed here as they are added.
6. Is Your Information
Transferred Internationally?
Data Collection & Processing
In Short: Our web app and websites may use cookies and similar technologies; our mobile apps may use comparable device identifiers for the same purposes.
We use cookies, local storage, and similar technologies to:
-
Keep you logged in and remember preferences,
-
Secure the Services and prevent abuse,
-
Understand how the Services are used (analytics), so we can improve them.
​
We may use tools such as Google Analytics and Firebase Analytics for this purpose. Where required by applicable law, you can manage cookie preferences through your browser or device settings. Details of any analytics providers in use should be listed here as they are added.
7. How Long Do We Keep Your Information?
Data Collection & Processing
In Short: We keep your information only as long as necessary for the purposes in this notice, or as required by law (e.g., tax/accounting record-keeping), and no longer than 12 months after account closure unless a longer period is legally required.
When we no longer have a legitimate business need to process your information, we will delete or anonymize it, or, where immediate deletion is not possible (e.g., backups), securely isolate it until deletion is possible.
8. How Do We Keep Your Information Safe?
Data Collection & Processing
In Short: We use technical and organizational measures designed to protect your information.
We implement safeguards such as encryption in transit, access controls, and monitoring. However, no transmission over the internet or method of electronic storage can be guaranteed completely secure. Use of the Services is at your own risk; please use them within a secure environment.
9. Do We Collect Information
From Minors?
Data Collection & Processing
In Short: The Services are not directed to children under 18 (or the age of digital consent in your jurisdiction), and we do not knowingly collect data from minors.
If we learn that we have collected personal information from a minor without appropriate consent, we will take steps to delete that information. If you believe a minor has provided us data, contact us at privacy@reddog.co.id.
11. Controls for Do-Not-Track Features
Data Collection & Processing
Some browsers include a "Do Not Track" (DNT) signal. Because no uniform standard for recognizing DNT signals currently exists, our Services do not currently respond to DNT signals.
12. Do We Make Updates to This Notice?
Data Collection & Processing
In Short: Yes — we will update this notice as needed to stay compliant with applicable law and to reflect changes to the Services.
The "Last Updated" date at the top of this notice indicates the latest revision. Material changes will be communicated by prominent notice within the Services or by direct notification.
13. How Can You Contact Us About This Notice?
Data Collection & Processing
If you have questions or comments about this notice, contact us:
-
Email: privacy@reddog.co.id
-
Entity: PT BIGHOT RESTAURANT INDONESIA
-
Address: Kantor Shapire, Grand ITC Permata Hijau, Ruko No.22, RT.11/RW.10, Grogol Utara, Kec. Kebayoran Lama, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12210
14. How Can You Review, Update,
or Delete Your Data?
Data Collection & Processing
You may review, update, or request deletion of your personal information by:
-
Updating your details directly in the Client or Outlet app account settings, or
-
Contacting us at privacy@reddog.co.id with your request.