Report a Disclosure

Data Protection & Privacy Notice

Data protection regulations require that any person making a report containing personal data be informed about the practices of collecting and storing data related to the information provided, and must consent to the terms and conditions of using this service.

You are required to read and agree to the terms described below. If you do not agree, we cannot accept information through this system.

  1. What personal data and information are collected and processed?
    This service collects the personal data and information you provide when making a report, including:
    1. Your name and contact details (unless the report is made completely anonymously), as well as your employment status in the organization.
    2. The name and other personal data of the individuals you mention in the report (e.g., job description and contact details).
    3. A description of the alleged misconduct and details about the circumstances or situation of the incident.
    Note: Laws in some countries do not allow anonymous reports. However, your personal information will be treated confidentially and only disclosed as described in this notice.
  2. Purpose of Processing and Legal Basis
    We process the personal data you provide in the report for the following purposes:
    1. To maintain organizational integrity by detecting, preventing, and following up on alleged misconduct, fraud, or violations of policies and laws.
    2. To facilitate investigations and take necessary corrective or disciplinary actions.
    3. To comply with legal and regulatory obligations related to whistleblowing and data protection.
    4. To enable further communication with you for clarification or to obtain additional information related to the report.
    The legal bases for processing this personal data are:
    1. Your consent given at the time of submitting the report.
    2. Legal obligations under applicable regulations, including the Personal Data Protection Act and whistleblowing provisions.
    3. Legitimate interest in ensuring a safe, ethical, and law-abiding work environment.
  3. How is personal data processed, and who can access it?
    Integrity has partners/affiliates in several countries (Indonesia, Malaysia, and Thailand), headquartered in Indonesia, enabling cross-team collaboration. Your personal data and information will be stored in databases on servers located in Indonesia and operated by Integrity Indonesia. Integrity Indonesia is committed to applying strict privacy and security practices, including notice, choice, data transfer, security, data integrity, access, and enforcement.
    If you are outside Indonesia, by submitting a report, you consent to the cross-border transfer of your personal data to Indonesia for the purposes described above.
  4. Data Subject Rights
    You may have the right to:
    1. Access a copy of the report and the personal data we store.
    2. Request correction of inaccurate or incomplete personal data.
    3. Withdraw consent and request deletion of personal data, subject to legal provisions and investigative needs.
    You may exercise the above rights by contacting the channels available on this page. Certain rights may be restricted during the course of an investigation in order to maintain the integrity of the inquiry.
  5. Data Retention
    Personal data will be retained as long as necessary to fulfill the purposes stated in this notice, comply with legal obligations, or resolve disputes. After that period, personal data will be securely deleted or anonymized.
  6. Security Measures
    Appropriate technical and organizational measures have been implemented to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure.
  7. Data Disclosure
    Personal data will only be accessed by:
    1. Authorized personnel in your organization who are responsible for handling whistleblowing reports.
    2. Integrity Indonesia personnel providing technical and administrative support for the WBS (Operator).
    3. Regulatory authorities or law enforcement, if required by law.
The field is required
The field is required
(Outlet name and location details)
The field is required
(Example: dirty/contaminated liquid, extremely cheap price, broken seal)
The field is required
Maximum upload file size: 500 MB - (Please capture the product details from the front, side, and back.)
The field is required

This password will be used together with the Disclosure ID provided later to login to follow up on disclosure report.
Must contain at least 8 or more characters, one number, one uppercase letter, one lowercase letter, and one special character
The field is required