Skip to content
Coco Reina

Privacy Policy

Effective

There is no account and no login here, and one form: the enquiry form on the contact page, which you only fill in if you choose to. Four things are worth knowing, and all four are set out below: Google Analytics runs on every page and sets cookies, that form is delivered by a third party, anything you send us on WhatsApp or by email is correspondence we hold, and a click on an Ask-AI link or on the WhatsApp or email button is counted, never tied to you.

What the website itself does

Every page is static HTML generated before publication. No code of ours runs when you open one, and there is no database behind it. Apart from Google Analytics and ordinary server logs, both described below, nothing is taken from you by opening a page. The contact form, and the click counts on the Ask-AI links and the WhatsApp and email buttons, also described below, are the only other things on the site that collect anything, and only when you submit the form or click one of those links:

Like any website, the server that delivers these pages may write ordinary technical logs — the requesting IP address, the file requested, the time. We do not build profiles from them and we do not combine them with anything else.

Ask-AI links and contact buttons: counted, never tied to you

A click on an Ask-AI link, or on the WhatsApp or email button in the corner of every page, is counted by our own server: which link, which page it was on, and the country your connection came from as Cloudflare reports it — never your IP address, browser details or a cookie, and nothing in the count identifies who clicked. Some browsers, Firefox among them, don't send that count, and the button works the same either way.

Most guide pages carry a row of links that open an AI assistant (ChatGPT, Perplexity, Google AI Mode, Claude or Grok) in a new tab, with a question about that page already typed in. When you click one, the link passes through our own server for a moment first. At that moment we count the click: which assistant, which page it was on, and the country your connection came from, as our host, Cloudflare, reports it. We store no IP address, no browser details and no cookie, and nothing that could tell us who clicked. The counts sit in our Cloudflare account; we use them to see which pages buyers take further. Once the assistant opens, what you type there goes to that company under its own privacy policy, not to us.

Google Analytics — the one script on this site, and it uses cookies

This site loads Google Analytics 4 on every page. It is the only third-party script here, and the only thing on the site that observes your visit. It sets cookies in your browser and sends Google a record of the pages you open, along with the usual technical details a browser reveals: device and browser type, the page you arrived from, and an approximate location worked out from your IP address.

We use it for one thing — seeing which pages buyers actually read, so we know what to write next. What we see are aggregate reports. We do not attempt to identify a visitor from them, and we do not connect them to a WhatsApp chat, an email or an order. The data itself is processed by Google under Google's own privacy policy and terms, on Google's infrastructure and retention settings, which we do not control.

There is no cookie banner on this site today, so nothing here asks your permission first — you should know that rather than discover it. If you would rather not be counted, block the script: any tracker-blocking extension, browser tracking protection, or Google's own opt-out tools will do it. Nothing on this site breaks if you do. Every page is plain server-rendered HTML, and analytics is the only script on it — block it and the site works exactly as it does now.

What we hold when you contact us

There are three ways to reach us. We hold what you send, and nothing you did not send.

We use it to answer you, to quote, and to arrange a sample or a shipment. That is the whole purpose. We do not sell it, rent it, trade it, or add you to a mailing list, and we do not use it to advertise to you anywhere.

The form is delivered by Web3Forms, not by us

A static site has nothing of its own to receive a form with, so the enquiry form posts to Web3Forms, which passes the submission on to our inbox as an email. What you typed therefore travels through their service, under their own privacy policy and terms, which we neither control nor can change. No script from them runs on this page — the form is ordinary HTML, and nothing is sent anywhere until you press the button. If you would rather not use the form, WhatsApp and email reach exactly the same desk; each travels through its own service, listed under "Who else sees it".

WhatsApp is a Meta service, not ours

The chat button on this site opens WhatsApp, which is operated by Meta. Your message travels through Meta's service under Meta's own privacy policy and terms, which we neither control nor can change. It then reaches Kommo, the CRM our export desk uses for WhatsApp enquiries, where it is kept so we can answer you and follow up. Read Meta's privacy policy before sending anything you would not want handled by Meta or Kommo. Email reaches the same desk without passing through Kommo, if you would rather not use WhatsApp.

How long we keep it

For as long as we are in contact with you about a possible or an active shipment. Ask us to delete your correspondence and we will delete it — write to export@coconutcharcoal.org . Where a message is part of the record of a shipment that actually moved, the shipping and accounting file for that shipment stays intact.

Who else sees it

Google receives the analytics data described above. Cloudflare, which hosts this site, stores the click counts from the Ask-AI links and the WhatsApp and email buttons on our account. A WhatsApp message you send us travels through WhatsApp (Meta) and is kept in Kommo, the CRM our export desk uses to answer and track WhatsApp enquiries; Kommo may send the first reply automatically. An email reaches us through our email provider and stays in our mailbox. Apart from these services, which handle your messages for us, nobody else receives anything, and every enquiry is read by our export desk.

A shipment is different, and you should expect it to be. Once you order, the details needed to move the cargo — company name, consignee, address, contact — are written onto transport and customs paperwork, and reach the freight forwarder, the carrier, any appointed surveyor, and the customs authorities at both ends. That is how goods cross a border; it is not marketing, and it goes no further than the shipment requires.

If you are in the EU or the UK

Many of our buyers are, so the GDPR position stated plainly. We are based in Indonesia, outside the EEA and the UK: your message is read by our export desk there, and it is stored by the services listed under "Who else sees it" — our email provider for email, Kommo for WhatsApp — which may hold it in other countries, and what we do with it is limited to answering you and taking the steps you asked for before any contract. The analytics described above sits with Google and travels wherever Google processes it. We make no automated decisions about you with legal or similarly significant effect. Kommo's automatic first reply is a message, not a decision: a person at our export desk reads every enquiry and decides what happens next. Kommo keeps a record of your WhatsApp conversation and the details you give us so we can follow up, and we never join analytics data to a person who writes to us.

Be aware of the gap while it is open: analytics cookies load on this site without asking you first, which is not what an EU or UK visitor is entitled to expect. Blocking the script, as described above, is the reliable way to opt out today.

You can ask us what correspondence we hold from you, ask for a copy of it, ask us to correct something in it, or ask us to erase it. One email is enough — no form, no fee, no account to create. If you believe we have handled your data badly, you are also free to complain to the data protection authority in your own country.

If your procurement or legal team needs a signed data-processing agreement or a supplier privacy questionnaire completed before you send us anything, ask by email and we will handle it directly.

Changes to this policy

This page describes what the site actually does today, and it carries the date it was last true. If we add a contact form, a consent banner, another script, or drop analytics altogether, this page changes with it.

Who to contact

PT Coco Reina Global Charcoal, KP. Wahiya RT.002 RW.004, Desa Gunung Sindur, Kec. Gunung Sindur, Bogor, Jawa Barat 16340, Indonesia.

This is a plain description of how a static website and an export desk handle correspondence, not a legal opinion on your own compliance obligations. See also our website terms of use.