Privacy
Privacy policy
Overview
mjfird.com is run by FiRD Creative Studio, operated by Mohammad Jamaluddin Firdaus (M.J Fird) in Semarang, Indonesia. I collect only what I need to take, make and deliver your order, and I never sell your data. This policy follows Indonesia's Personal Data Protection Law (UU No. 27 of 2022).
What I collect and why
| What I collect | Why | Who else sees it |
|---|---|---|
| Name, email, social handles | Your account, order updates, crediting you | Nobody, unless you ask to be credited publicly |
| Order details, briefs, reference images | Making your artwork or design | Nobody; my studio assistant may see them to help with your order |
| Payment confirmations and invoices | Accounting and tax records | PayPal or my bank, which process the payment |
| Messages on email or Discord | Communication about your order | Discord or my email provider, under their own policies |
| Contact form: name, email, project type, budget range, message | Replying to your inquiry | Nobody |
| Basic site data (pages visited, device type) | Keeping the site working and improving it | My hosting and analytics providers (see below) |
Accounts and sign-in
You can create an account and sign in with an email and a password through Supabase Auth. When Google sign-in is switched on, you can also sign in with Google through Supabase Auth.
An email account asks for your name, email, and password. Supabase Auth stores the password; the site database does not keep a copy of it. Your name and email are saved on a client profile. A Google sign-in stores the email, the name shared for that account, and the profile image address when one is provided.
Commission requests keep the service, package and add-ons you chose, your brief, answers to that service's questions, and the reference files you upload (images or PDFs). Those files are stored in a private storage folder. Messages on a request and the files delivered for it are kept with the request.
Where data is stored and processed
- Supabase stores the database (client profiles, contact inquiries, commission requests and messages), sign-in, and uploaded commission files.
- Vercel hosts the site.
- Google Analytics may be loaded on public pages to measure visits. It is never loaded on admin pages.
- Resend sends email about your request when email sending is set up.
- PayPal processes USD payments; my bank processes IDR bank transfers.
Payments, retention and your rights
- Card details: I never see or store your card or bank account numbers. PayPal and banks handle them.
- Retention: account and order data are kept while your account is active. Invoices and payment records are kept as long as Indonesian tax law requires. Reference images are deleted 6 months after delivery.
- Your rights: you can ask to see, correct, or delete your data, or withdraw consent, by emailing info@mjfird.com. I reply within 14 days. Records I must keep for tax purposes cannot be deleted early.
- Security: data is stored with reputable providers and access is limited to me and my assistant.
Age and changes
- Age: the site is not meant for children under 13. Ordering requires being 18+ or having a guardian's consent (see the terms of service).
- Changes: updates are posted on this page with a new date.
Contact
Questions about this page, an order, or your data go to one place.
- Studio: FiRD Creative Studio, operated by Mohammad Jamaluddin Firdaus (M.J Fird), Semarang, Indonesia
- Email: info@mjfird.com
- Contact form: mjfird.com/contact
- Socials: Instagram @m.j.fird · X @MJFird · Behance /FiRD