Privacy Policy

The Data Controller

The operator of this website and the data controller for personal information submitted through it is Mendrix, a nutritional food-supplement studio incorporated and operating in Jakarta, Indonesia.

Correspondence address: Jl. Pondok Indah No. 95, 12310 Jakarta, Indonesia.
Email: [email protected]
Telephone: +62 21 6045 8392

Mendrix products are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories.

What Information We Collect

Mendrix collects personal information only when it is voluntarily provided by the individual concerned. The categories of information that may be collected include:

• Name and email address, submitted through the contact form on this website
• Telephone number, if provided voluntarily in correspondence
• Postal address, provided in the context of order fulfilment or batch record requests
• Order reference numbers and associated correspondence history
• Technical data collected automatically during website visits: IP address, browser type, pages visited, time and date of visit, referring URL
• Cookie data, as described in the Cookie Policy

Mendrix does not collect sensitive personal data categories including health status, financial account data, or identity document numbers through this website.

Purposes of Processing

Personal data collected by Mendrix is used for the following purposes:

• Responding to correspondence submitted through the contact form
• Processing and fulfilling orders for Mendrix products
• Providing batch verification records in response to written requests
• Maintaining records of wholesale and retail partnership discussions
• Analysing anonymous aggregate website traffic to improve the website's content and navigation
• Complying with applicable legal and regulatory obligations

Mendrix does not use personal data for automated decision-making or profiling. Personal data is not used to create targeted advertising profiles or to sell to third-party marketing organisations.

How Long Data Is Kept

Personal data submitted through this website is stored on servers located within the geographic regions served by Mendrix's hosting provider. Mendrix takes reasonable steps to ensure that hosting providers maintain appropriate security standards for the protection of stored data.

Correspondence records including contact form submissions are retained for a maximum of twenty-four months from the date of last interaction, unless a longer retention period is required to fulfil a contractual obligation or comply with applicable law.

Order-related data and batch verification records are retained for a minimum of five years for regulatory compliance purposes.

Anonymous aggregate analytics data (website traffic figures) may be retained indefinitely as it does not constitute personal data.

Sharing of Data

Mendrix does not sell or rent personal data to any third party. Data may be shared in the following limited circumstances:

• With logistics and fulfilment partners, to the extent necessary to deliver orders
• With independent laboratory services, where a batch verification record request requires reference to a named order
• With hosting and website service providers acting as data processors on Mendrix's behalf, under data processing agreements
• With Indonesian regulatory authorities, where legally required

Any third-party processors used by Mendrix are required to handle personal data in accordance with applicable data protection standards and to use it only for the purposes for which it was shared.

Rights Over Personal Data

Individuals whose personal data is held by Mendrix have the right to:

• Request confirmation of whether their data is held, and receive a copy of that data
• Request correction of inaccurate or incomplete data
• Request deletion of their data, subject to any applicable legal retention obligations
• Object to the use of their data for any purpose other than fulfilment of a contractual obligation
• Request that data processing be restricted while a correction or objection request is assessed

To exercise any of the above rights, write to [email protected] with the subject line "Data Rights Request". Mendrix will respond within thirty calendar days of receipt.

Cookie Use

This website uses cookies — small data files placed on your device — to enable core functionality and to collect anonymous usage analytics. A full description of the cookies used, their purposes, and how to manage your preferences is provided in the Cookie Policy.

Cookie preferences can be adjusted at any time using the Cookie Settings link in the website footer.

Questions About This Policy

Questions, requests, or complaints relating to the handling of personal data by Mendrix should be addressed in writing to:

Mendrix
Jl. Pondok Indah No. 95, 12310 Jakarta, Indonesia
[email protected]

This policy was last reviewed in January 2026. Mendrix reserves the right to update it at any time. Material changes will be noted at the top of this page with a revised date.