GOJEK PRIVACY POLICY
PRIVACY NOTICE
Effective Date: 25 June 2026
INTRODUCTION
The following Privacy Notice will become effective on 25 June 2025.
This Privacy Notice describes how we, PT GoTo Gojek Tokopedia Tbk and/or its affiliates (“Gojek”, “We, “Our”, or “Us”) obtain, collect, store, control, use, process, analyse, correct, update, display, publish, transfer, disclose, and protect ("Processing” or “Process” or “Processed”) your personal data ("Personal Data"). This Privacy Notice applies to all users and/or service providers (“User”, “Your” or “You”) in Our mobile applications (including the Gojek, Gojek Driver, GoFood Merchant, GoAgent), websites (including www.gojek.com and its derivative sites), features, services, and products (collectively referred as the “Applications”), unless covered by a separate privacy notice.
Please read this Privacy Notice thoroughly to ensure that You understand Our personal data protection practices. For Your ease of understanding, We have provided a Summary that highlights all the important points. All capitalised terms used in this Privacy Notice shall have the same meaning ascribed to them in the applicable Terms of Use between You and Gojek.
ACKNOWLEDGEMENT AND CONSENT
By agreeing to the Privacy Notice, You acknowledge that You have read, understood, and consent for Us to Process Your Personal Data in accordance with this Privacy Notice.
If You provide Us with Personal Data of other individuals (such as Personal Data of Your spouse, family members, friends, or other parties), You warrant that You have obtained their consent for Us to Process it. We may request evidence of such consent from You at any time.
If You receive other Users' Personal Data (including our partners' Personal Data) while using our Applications, You agree to use it solely for the purpose of using the service. You are fully responsible for any misuse of such Personal Data, and to the extent permitted by applicable laws, You release us from any liability arising from Your misuse.
You may withdraw consent to any or all Processing of Your Personal Data by providing reasonable written notice via Our contact details. For marketing communications, You can use the "opt-out" facility, "unsubscribe" button, or use the options available on each communication medium We use to contact You. Please note that withdrawing consent may result in Us being unable to provide services, deletion of Your account or termination of Your contractual relationship with Us, with all rights and obligations that arise remaining fully fulfilled. Upon receiving Your request We will inform You of the specific consequences so You can decide whether to proceed.
SUMMARY
Changes from the Previous Version
In this Privacy Notice, We are making updates to elaborations on The Types of Personal Data We Collect About You, How We Collect Your Personal Data, How We Use Your Personal Data, Disclosures of Your Personal Data, Data Retention, Data Security, Your Legal Rights, and Other Websites and Services
What data do We collect about You?
We collect Personal Data when You use Our Applications, including Identity Data, Contact Data, Eligibility Data, Transaction Data, Financial Data, Payment Data, Log Data, Location Data, and/or Installed-App Data. We also collect device and technical data from You, and other data that You may submit or transmit when You use Our Applications. You may choose not to provide such data, but We may not be able to provide services and Applications to You optimally.
How will We use the data about You?
We use Your Personal Data to set up and manage Your account with Us, communicate with You, and to provide various features, services, and functions for You on Our Applications.
If You are a service provider, We use Your information to verify that You are able to provide service on Our Applications, set up and manage Your account in Our Applications, communicate with You, and otherwise provide You with various services and functions available on Our Applications.
We also use Your data to maintain Our Applications, and to tailor Our products and services to Your preferences. In addition, We use Your information to market Our products and services to You, as well as products and services from Our affiliates companies, partners and/or agents.
With whom do We share Your data?
We share Your Personal Data with Our third party partners to facilitate the performance of services for or by You, to the extent necessary for them to provide their services, including but not limited to, payment processing, logistic services, provide products, insurance claims and verification.
We use these third parties’ services solely to process or store Your data for the purposes described in this Privacy Notice. We also share Your data with Our affiliates for the purposes described in this Privacy Notice and with government and regulatory bodies as required by Applicable Laws.
We may also provide access by displaying Your Personal Data to other Users to facilitate communication and/or implementation of service fulfilment on Our Applications.
Where do We process Your data?
We Process Your Personal Data in Indonesia and outside Indonesia by Our personnel who work for Us in other countries, or by Our third party service providers, vendors, suppliers, partners, contractors or affiliates, to the extent permitted by Applicable Laws. In doing so, We comply with the relevant requirements that apply to Us.
How long do We process Your data?
We Process Your Personal Data in Indonesia and outside Indonesia by Our personnel who work for Us in other countries, or by Our third party service providers, vendors, suppliers, partners, contractors or affiliates, to the extent permitted by Applicable Laws. In doing so, We comply with the relevant requirements that apply to Us.
How can You exercise Your rights over Your Personal Data?
You have various rights with respect to Your Personal Data under the Applicable Laws.
If You wish to exercise Your rights, You can submit a data subject rights request to Us by contacting Us at the provided contact in this Privacy Notice. In particular, for requests to delete Your account, You can do so through the website provided in this Privacy Notice.
Contact Us
In the event that You have questions, comments, complaints, or claims regarding this Privacy Notice, or that You wish to gain access, make corrections, and/or exercise Your other rights related to Your Personal Data, please contact Us through the following email:
Kindly include the appropriate subject in Your email based on the right You wish to exercise and/or Your needs.
How will We notify You about changes to this Privacy Notice?
We will amend this Privacy Notice from time to time and notify You of the updated versions through relevant channels, including Our Applications or Your registered email with Us. Please check back regularly to see any updates or changes to this Privacy Notice.
More elaboration on the above can be read in the below sections.
1. THE TYPES OF PERSONAL DATA WE COLLECT ABOUT YOU
“Personal Data” means any data, whether accurate or not, pertaining to any identified or identifiable individual, both individually or collectively with other information, directly or indirectly through electronic or non-electronic systems, in accordance with applicable laws. For the avoidance of doubt, applicable laws means any laws and policies that regulate the protection of Personal Data, applicable to Us, and in force from time to time during the term of this Privacy Notice (“Applicable Laws”). In addition, when other data, including personal profiles and/or unique identifiers, are associated or combined with Personal Data, then that data is also considered as Personal Data.
The types of Personal Data that We collect depends on the circumstances of collection and on the nature of the service requested or transaction undertaken.
To the extent permitted by Applicable Laws, We may Process different kinds of Personal Data, consist of general and specific/sensitive Personal Data about You which We have grouped together as follows:
We may create, use, license or disclose Aggregated Data such as statistical or demographic data for any purpose. This data is not considered Personal Data as this data will not directly or indirectly reveal Your identity. We achieve this by removing all personal identifiers and combining your information into large datasets so that your individual identity is never revealed.
2. IF YOU PROVIDE INCOMPLETE PERSONAL DATA
Where We need to collect Personal Data by law, or under the terms of a contract We have with You, and You either choose not to provide that Personal Data or provide Us with incomplete Personal Data when requested, We may not be able to provide services and perform the existing agreement or those We are in the process of engaging with You.
3. HOW WE COLLECT YOUR PERSONAL DATA
The Personal Data which We collect may be provided by You directly or by third parties (e.g. when You register for or use the Applications, when You contact Our customer services, or You otherwise provide Personal Data to Us). We may collect data in various forms and for various purposes (including purposes permitted under Applicable Laws).
a. Data obtained from You directly
You may give Us Your Identity Data, Contact Data, Eligibility Data, Financial Data, and Payment Data, including in situations where requested by Us or where required by Applicable Laws, when interacting with Us directly or by corresponding with Us by mail, email or otherwise. This includes Personal Data You provide when You:
b. Data collected whenever You use the Applications
You may provide Us with Technical Data, Device Data, Log Data, and/or Location Data, each time You use and/or visit the Applications. We may also periodically collect, process, share and store Installed Apps Data. Whenever You access the Applications through Your mobile device, We will track and collect Your geo-location data in real-time. In some cases, You will be prompted or required to activate the Global Positioning System (GPS) on Your mobile device to enable Us to provide You a better experience in using the Applications (for example, to provide You with data as to how close a service provider is to You). You can always choose to temporarily disable the geo-location tracking data on Your mobile device. However, this can affect the functionalities available on the Applications.
If You use and/or when a payment or transfer is made through the electronic money and/or electronic wallet facility available on Our Application (whether as payer or recipient), We may collect certain Financial Data and Payment Data related to such payments and transfers.
In addition, whenever You use and/or visit the Applications, certain data may also be collected automatically using cookies, small application files stored on Your computer or mobile device, to track activity to enhance interface and experience. While You may adjust the settings on Your mobile device or internet browser to reject certain types cookies or specific cookies, doing so may affect the functionalities available on the Applications.
We may also use third-party tools to improve Our services and content, including to provide personalized offers based on your interests. You can opt-out of these customized offers by adjusting your browser settings.
c. Data collected from third parties
We may also collect Your Personal Data from third parties (including Our agents, vendors, suppliers, contractors, partners and any others who provide services to Us, who collect Your Personal Data and/or perform functions on Our behalf, or whom We collaborate with). In such conditions, We will only collect Your Personal Data for or in connection with the purposes for which such third parties are engaged or the purposes of Our collaboration with such third parties (as the case may be). Specifically if You register for a payment card or account through the Applications and/or access, add and/or link a payment card or account to the Applications (as applicable in Your country), We may collect certain financial information and financial history of Yours (including but not limited to payment card or account transaction history, payment card or account details and mapping and/or payment card or account status and states) from the issuer of such payment credential or any other third parties.
d. Data about third parties You provide to Us
You may provide Us with Personal Data relating to other third-party individuals (including Personal Data relating to Your spouse, family members, friends, or other individuals). In such cases, You will, of course, need their consent to do so, see “Acknowledgement and Consent”, above, for further information.
If you use features requiring phonebook access, such as messages, calls, payments and other relevant features. We will process Your phonebook based on your consent. To protect Your privacy, We only use Your phonebook for real-time matching to see which contacts are already using the Applications. We do not store Your phonebook on Our servers. If needed, Your phonebook details may be uploaded temporarily and will be immediately deleted once the matching process is complete.
e. In-vehicle recording
We do not mandate or endorse, nor prohibit, the installation or use of in-vehicle recording devices in any vehicles. Where such devices are installed and used in any vehicles, We do not collect any Personal Data from any in-vehicle recordings by such devices, and any collection of Personal Data from such in-vehicle recordings is not being done on Our behalf. The collection of Personal Data from such in-vehicle recordings is solely at the discretion of the service provider. We have no control over such collection of Personal Data by the service provider and any subsequent use or disclosure by the service provider of the Personal Data so collected. Where You are a service provider and choose to install and use such in-vehicle recording devices in Your vehicle, it is Your sole responsibility to notify the user. Where You are a user and You have any objection to the use of in-vehicle recording devices within the Vehicle of any service provider, You must inform the service provider directly and it will be Your personal responsibility to do so.
4. HOW WE USE YOUR PERSONAL DATA
We may use Personal Data collected for any of the following purposes as well as for such other purposes as are permitted by Applicable Laws (“Purposes”):
a. Where You are a user, We may use Your Personal Data:
b. Where You are a service provider, We may use Your Personal Data:
c. We may also use the Personal Data You provided to Us more generally for the following purposes (although in certain cases, We will act reasonably and not use Your Personal Data more than necessary for that purpose):
5. DISCLOSURES OF YOUR PERSONAL DATA
We may disclose to, allow access to, or share with affiliates and other parties Your Personal Data for any of the following purposes as well as for such other purposes as are permitted by Applicable Laws:
Where it is not necessary for the Personal Data to be associated with You, We will use reasonable endeavours to remove the means by which the Personal Data can be associated with You as an individual before disclosing or sharing such data.
We will not sell or lease Your Personal Data.
Other than as provided for in this Privacy Notice, We may disclose or share Your Personal Data if We notify You or We have obtained Your consent for the disclosure or sharing.
6. DATA RETENTION
Your Personal Data will only be held for as long as it is necessary to fulfil the Purposes for which it was collected and/or as long as such retention is required or authorised under the Applicable Laws. We will delete or anonymize your Personal Data as soon as its retention is deemed no longer in accordance with the provisions governed herein.
Please note that some of your Personal Data may still be retained by other parties, including by the government institutions in some manner. In the event that We share Your Personal Data to the authorised government institutions and/or other institutions that may be appointed by the government authorities or cooperating with Us, You agree and acknowledge that the retention of Your Personal Data by the relevant institutions will follow their respective policy on data retention.
Data that is submitted through communications between user and service provider that are carried out other than through the use of the Applications (such as via telephone calls, SMS, mobile messages or other means of communication and collection of Your Personal Data by Our agents) can also be stored in several ways. If You choose to communicate or share Personal Data out of the Applications. User and service provider are fully responsible for the Processing of Personal Data.
To the fullest extent permitted by Applicable Laws, You agree to indemnify, defend and release Us from and against any and all claims, losses, liabilities, expenses, damages and costs (including but not limited to legal costs and expenses on a full indemnity basis) resulting directly or indirectly from any activities conducted outside of our Application.
7. INTERNATIONAL TRANSFERS
When You are using Our Applications and services in other countries where Our Applications are also accessible (“Designated Country”), We may transfer Your Personal Data from the origin country (“Origin Country”) to the Designated Country in order to enable and ensure smooth customer experience when You are using Our Applications abroad.
Your Personal Data may also be stored or processed outside of Your country by Our personnel who work for Us in other countries, or by Our third-party service providers, vendors, suppliers, partners, contractors or affiliates.
We will comply with the Applicable Laws and make every effort to ensure that Our affiliates and all third-party service providers within or outside the country provide a level of protection that is equivalent to Our commitments under this Privacy Notice and as determined by the laws in Your country.
You understand and consent to the transfer of Your Personal Data out of Your home country and/or the Origin Country as described in this Privacy Notice.
8. DATA SECURITY
The confidentiality of Your Personal Data is of utmost importance to Us. While We use all reasonable efforts to protect and secure Your Personal Data against unauthorized access, accidental loss, damage or similar risks, no internet transmission is entirely secure. We cannot fully guarantee that Personal Data will not be intercepted, accessed, disclosed, altered or destroyed by unauthorized third parties, due to factors beyond our control. You are responsible for the security of Your device and must keep Your account details confidential, including not to share Your password and One Time Password (OTP) with anyone.
9. ANONYMOUS DATA
We may create, use, license or disclose Personal Data, where available, provided that, (i) all identifiers have been removed so that the data, either alone or in combination with other available data, cannot be linked to or associated with or identify an individual, and (ii) similar data has been aggregated so that the original data forms part of a larger data set.
10. YOUR LEGAL RIGHTS
You have certain rights under Applicable Laws to access, correct or delete Your Personal Data in Our possession and control. To exercise these rights, please contact Us using the details provided in this Privacy Notice.
We may refuse Your requests if permitted or required under any Applicable Laws. Reasons for refusal include request that involve other individuals' data, are deemed irrelevant or frivolous, or related to legal violations or breaches of the terms of use.
In accordance with Applicable Laws, We reserve the right to charge an administrative fee for each access and/or correction request.
11. HOW TO REQUEST DELETION OF YOUR ACCOUNT
You may exercise Your right to delete Your account through Our Applications. Should You encounter any difficulties during this process, including losing access to the Applications, You may submit Your account deletion request:
We may deny Your request based on reasons permitted under the Applicable Laws. This encompasses situations where we consider the request irrelevant, frivolous, or far-fetched, or if it relates to violations of the terms of use or any unlawful activity.
12. OTHER WEBSITES AND SERVICES
Our Applications and Marketing Materials (as defined below) may contain links to third-party websites or advertisements. We do not control and are not responsible for the data processing on these external sites. By clicking these links, You are subject to their specific terms and privacy notices and We recommend You read them to understand how Your data is used.
When You enable the fingerprints and/or facial recognition features in Your mobile device for authentication We do not store such biometric data. Unless otherwise notified to You, such data is stored in Your mobile device and may also be stored by third parties, such as the manufacturer of Your mobile device. You agree and acknowledge that We are not responsible for any unauthorised access or loss of any biometric data stored in Your mobile device.
13. MARKETING AND PROMOTIONAL MATERIAL
We and Our partners (including vendors, suppliers, merchants and/or other third-parties that engaged with Us for commercial and/or non-commercial activities) may send You direct marketing, advertisement, and promotional communications via Applications’ push-notification, in-Applications message, post, chat platform, social media, and email (“Marketing Materials”) if You have agreed to subscribe to Our mailing list, and/or consented to receive Marketing Materials from Us. You may opt-out from receiving such Marketing Materials at any time by clicking on the “unsubscribe” option embedded in the relevant message, other methods available on the promotional media, or otherwise contacting Us using the contact details provided in this Privacy Notice.
Please note that if You choose to opt-out, We may still send You non-promotional messages, such as ride receipts or information about Your account.
14. UPDATES TO THE PRIVACY NOTICE
We may review and amend this Privacy Notice at Our sole discretion from time to time, to ensure that it is consistent with Our future developments, and/or changes in legal or regulatory requirements. If We decide to amend this Privacy Notice, We will notify You of any such amendments by means of a general notice published on the Applications and/or website, or otherwise to Your email address set out in Your account. You agree that it is Your responsibility to review this Privacy Notice regularly for the latest information on Our data processing and data protection practices, and that Your continued use of the Applications, communications with Us, or access to and use of the services following any amendments to this Privacy Notice will constitute Your acceptance to this Privacy Notice and all of its amendments.
15. HOW TO CONTACT US
In the event that You have questions, comments, complaints, or claims regarding this Privacy Notice, or that You wish to gain access, make corrections, and/or exercise Your other rights related to Your Personal Data, please contact Us through the following email:
Kindly include the appropriate subject in your email based on the right You wish to exercise and/or Your needs.
16. LANGUAGE
This Privacy Notice may be translated into one or more other languages. If there is any inconsistency between the Indonesian version of this Privacy Notice and other language versions, the Indonesian version shall prevail, and the other language versions will be adjusted accordingly to have the same meaning as the Indonesian version.
17. IF YOU ARE LOCATED IN SINGAPORE
This section applies if You are located in Singapore.
The following Privacy Notice also explains that the Processing of Your data located in Singapore is carried out by Velox Digital Singapore Pte Ltd.
a. How We collect Your Personal Data
i. In-vehicle recording
Where You are a service provider and choose to install and use in-vehicle recording devices (IVRDs) in Your vehicle, it is Your sole responsibility to comply with all Applicable Laws (including but not limited to any directions and guidelines issued by the Land Transport Authority (“LTA”) and the Personal Data Protection Commission) in respect of the same. Without limitation, You must:
Where You are a user, We will notify You via the User Applications if a service provider has installed an authorised inward-facing IVRD in his or her vehicle, where such inward-facing IVRD has been notified to Us. If You have any objection to the use of an inward-facing IVRD within the vehicle of any service provider, it is Your responsibility to cancel Your order immediately. If You become aware of the use of an inward-facing IVRD in any vehicle that was not notified to You via the User Applications, please inform Us via the User Applications so that We can investigate accordingly.
ii. National Identification Numbers
Where You are a user, We do not collect, use or disclose Your National Registration Identity Card (“NRIC”) or other national identification numbers for the purposes of Your use of the Applications. Where You are a Transportation Provider, please note that We are entitled to collect, use, and disclose Your NRIC number or Foreign Identification Number (“FIN”) to comply with Our obligations under Applicable Law and to prevent, detect and investigate any fraudulent activity over the Applications.
b. Miscellaneous
For avoidance of doubt, service provider shall also include the reference of Transportation Provider as provided in the Terms of Use applicable in Singapore.