How NITI Racing Merch collects, uses, and protects your personal data.
Last updated 12 Oct 2026
NITI Racing Merch respects your privacy. This policy explains what personal data we collect when you visit the store or place an order, how we use it, and the choices you have. It applies to all shoppers across every country and language version of the store.
Account data: name, username, email address and/or phone number, profile photo, preferred language and currency, and authentication identifiers (including your Google account ID if you sign in with Google).
Order data: items purchased, quantities, variant selections, delivery address, shipping method, payment status and channel reference, invoices, and return requests.
Support data: messages you send through chat or email, reviews and photos you publish, and your communication preferences.
Technical data: IP address, browser type, and basic usage events needed to keep the store secure and functioning.
Creating and securing your account, sending OTP verification codes by email or SMS.
Processing orders, arranging shipment with couriers, and sending status notifications (email, in-app, and WhatsApp updates where you have opted in).
Handling returns, refunds, and customer support conversations.
Personalizing the storefront, such as remembering your language and currency selection.
Payments are handled by licensed third-party gateways (including Xendit) and their partner channels such as virtual accounts and e-wallets. We never receive or store your full card number or wallet credentials — only a payment reference and settlement status needed to reconcile your order.
We share personal data only as needed to run the store:
Couriers and fulfillment partners: name, address, and phone number printed on shipping labels so your parcel arrives.
Payment providers: transaction details required to process and verify payments.
Authorities: where required by applicable Indonesian law or a valid legal request.
We do not sell your personal data.
The store uses browser storage (cookies and local storage) to keep you signed in, remember your cart and preferences, and protect forms against abuse. Details are described in our Cookie Policy.
Account and order records are kept for as long as your account exists and afterwards only as required for tax, accounting, and dispute-resolution purposes. Deleted customer records are removed from active systems following our retention schedule.
Passwords are stored only as salted hashes. Access to customer data is restricted to authorized staff, and traffic to the store is encrypted over HTTPS. No system is perfectly secure, so please also keep your own credentials safe.
Access and correct your personal data from your account settings page.
Request deletion of your account, subject to retention obligations for completed transactions.
Withdraw consent for optional communications such as WhatsApp broadcasts at any time.
To exercise these rights, contact us using the details below.
We serve customers in multiple countries. When you order from outside Indonesia, your data is transferred to and processed in Indonesia where our operations are based, with appropriate safeguards applied.
The store is not directed at children under 13. If you believe a child has created an account, contact us and we will remove it.
Email: nitimerch@gmail.com
WhatsApp: +62 812 1270 1144
Address: Jl. Pluit Timur Raya No.35A, Penjaringan, North Jakarta 14450, Indonesia
We may update this policy as the store evolves; the latest version is always published on this page.
Questions about this document? Contact us.