Privacy Policy

Effective date: 5 October 2026. Meliora, at 28 Jalan Raya Kemang, South Jakarta 12730, DKI Jakarta, Indonesia, respects the privacy of visitors. This policy explains how information is collected, used, retained and protected when you read our editorial website or contact the publication.

The policy is written with reference to Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) and the Electronic Information and Transactions Law, and it should be read together with the Cookies Policy and the Terms of Use. For the information described here, Meliora acts as the party that decides why and how personal data is handled. We have tried to use plain language so that a reader can understand each practice without legal training. If a sentence is unclear, write to the editorial desk and we will explain it in simpler terms.

1. Scope

This policy applies to Meliora pages, contact messages, newsletter requests if offered, and ordinary technical access. It does not govern external websites linked from our articles. Those services publish their own notices. We encourage readers to review them before submitting information.

In practice, the policy covers three situations: reading pages without sending anything, writing to the editorial desk through the contact form or by email, and telephone calls to the number listed on the site. It does not cover information you share on social platforms, in a search engine or in a research database that one of our articles points to. If an article links to a registry, a journal or a public institution, that organisation decides how your visit is recorded. Printed correspondence sent to our postal address is handled under the same rules as email.

2. Information collected

We may receive a name, email address, message content and contact details when you voluntarily write to us. Servers may also record an IP address, browser type, device information, requested page and approximate time. We do not request medical records or sensitive health histories through the contact form.

The information falls into two groups, and each is handled differently.

(a) Information you provide. This includes the name you type, the email address you want a reply sent to, the subject you choose and the text of your message. If you mention a telephone number or a job title, that detail is stored with the message. Please keep messages free of diagnoses, test results or details about other people, because the editorial desk does not need them to answer a question about an article.

(b) Information recorded automatically. Web server logs normally contain the visitor’s IP address, the page requested, the referring page, the response status, the browser and operating system reported by the device, and a timestamp. These entries are used for security monitoring, fault diagnosis and aggregate counts of page views. We do not combine log entries with contact messages in order to build a profile of an individual reader.

3. Purpose

Information is used to respond to correspondence, investigate corrections, protect the website, understand aggregate readership and maintain editorial records. We do not use contact messages to make automated decisions about individuals. We do not sell personal information.

Each purpose is limited in scope. Correspondence data is read only by members of the editorial desk who need it to reply. Correction requests are logged so that a later reader can see what was reported and what changed. Security logs are examined when unusual traffic, repeated failed requests or suspected scraping appear. Aggregate readership figures, such as which topics attract the most visits, help the editors decide which subjects to cover next, and they are reviewed as totals rather than as individual reading histories. We do not use personal information for advertising profiles or for sending marketing messages that you did not ask for.

4. Legal basis

Where Indonesian law applies, processing is based on consent when you choose to contact us, legitimate interests in security and publication operations, and legal obligations where applicable. You may withdraw consent for future processing, although we may retain a necessary record of a completed correspondence.

The three bases apply to different activities. Consent covers the message you send and the optional cookies described in the Cookies Policy. Legitimate interests cover server security, fault diagnosis and the preservation of correction history, and we weigh these interests against the effect on readers before relying on them. Legal obligations cover situations where Indonesian authorities, a court order or a statutory duty requires us to keep or disclose a record. To withdraw consent, email [email protected] with the subject line “Withdraw consent”. Withdrawal does not affect processing that took place before the request, and it does not remove records we must lawfully retain.

5. Retention

Routine contact correspondence is retained for up to 24 months after the last meaningful exchange. Security logs are generally retained for up to 90 days. Records needed for a legal claim, correction history or compliance obligation may be kept for the relevant period and then securely deleted or anonymized.

The list below describes the working periods used by the editorial desk.

(a) Contact messages and replies: up to 24 months after the last meaningful exchange, then deleted or reduced to an anonymous count.

(b) Server and security logs: generally up to 90 days, with a shorter period where the hosting provider rotates logs sooner.

(c) Cookie choice records: stored in your browser for up to 180 days, as set out in the Cookies Policy.

(d) Correction history: the dated correction note stays with the article for as long as the article is published, but it does not need to name the person who reported the error.

When a retention period ends, deletion is carried out on a regular review cycle, so a record may remain for a few weeks beyond the stated period before it is removed. Backups are overwritten on the provider’s normal schedule.

6. Service providers

Hosting, email delivery, security and analytics providers may process limited information on our behalf. They are expected to use information only for the instructed service and to maintain appropriate safeguards. We do not authorize processors to use Meliora contact data for their own marketing.

The categories of provider currently involved are a web hosting and content delivery provider, a business email service that receives and stores messages sent to [email protected], a security service that filters abusive traffic, and, where enabled and permitted by your choice, an analytics service configured for aggregate reporting. Each provider is engaged under written terms that restrict use to the service requested and require confidentiality. We review the list of provider categories at least once a year and whenever infrastructure changes. A reader who wants to know which specific provider handles a particular category on a given date can ask the editorial desk, and we will answer within 30 days.

As of 5 October 2026 the providers engaged for these categories are:

(a) Web hosting and content delivery: PT Nusa Hosting Teknologi, Jl. H.R. Rasuna Said Kav. C-22, Kuningan, South Jakarta 12940, Indonesia. Servers are located in Jakarta.

(b) Business email: PT Surel Bisnis Nusantara, Menara Sentraya, Jl. Iskandarsyah Raya No. 1A, Kebayoran Baru, South Jakarta 12160, Indonesia.

(c) Traffic security filtering: PT Perisai Jaringan Digital, Jl. Gatot Subroto Kav. 27, Kuningan Barat, South Jakarta 12950, Indonesia.

(d) Aggregate analytics, only with your consent: Ruang Analitik Indonesia, Jl. Wolter Monginsidi No. 88, Kebayoran Baru, South Jakarta 12170, Indonesia.

If this list changes, the new provider is named here and the revision date in section 13 is updated.

7. Cookies and analytics

The site may use a session cookie needed for basic operation and an analytics cookie only where consent and configuration permit it. Cookie names and lifespans are described in Cookies Policy. You can reject optional cookies through the banner or browser controls without losing access to editorial pages.

In summary, the session cookie is called meliora_session and normally ends when the browser closes, the choice cookie is called cookieChoice and lasts up to 180 days, and the optional analytics cookie, if enabled, lasts up to 13 months. Analytics figures are used as totals, such as the number of visits to a guide in a month, and are not used to follow a named person. If you reject optional cookies, no analytics cookie is set, and you can still read every article, glossary entry and policy page.

8. International transfers

Some providers may process data outside Indonesia. When that occurs, Meliora seeks contractual and technical safeguards appropriate to the service, limits the information shared and considers applicable transfer requirements. We do not intentionally send health records because the site is not designed to collect them.

Hosting and email infrastructure for publications in the region is often located in Singapore or elsewhere in Southeast Asia, and some global services operate data centres on other continents. Where personal data leaves Indonesia, we look for confirmation that the receiving country or provider offers a level of protection comparable to Indonesian requirements, or that contractual terms impose equivalent duties. We limit the content of what is transferred to what the service needs, for example an email address and message text rather than a full reader profile. You may ask which countries currently host your correspondence by writing to [email protected].

9. Your rights

You may ask for access, correction, deletion, restriction or clarification about personal information we hold, subject to lawful exceptions. Email [email protected] with the request and enough detail to identify the correspondence. We may ask for reasonable verification before acting, and we aim to respond within 30 days.

To make a request easier to handle, include the email address you used, the approximate date of your message and a short description of what you want done. The rights are applied as follows.

(a) Access: we can confirm whether we hold correspondence from you and provide a copy of the message and our replies.

(b) Correction: if a detail such as a name or email address was recorded incorrectly, we will amend it.

(c) Deletion or restriction: we will remove or stop using the record unless a lawful reason requires us to keep it, in which case we will explain the reason and the period involved.

Verification is proportionate: usually we only need you to write from the same email address. We will not charge a fee for an ordinary request, and we will tell you if a request cannot be completed in full and why.

10. Complaints

If you believe processing is improper, contact us first at [email protected] or +62 813 5271 9408. You may also contact the relevant Indonesian data protection or consumer authority. We will record the complaint, investigate the concern and provide a response or explanation within a reasonable period.

We acknowledge a privacy complaint within 10 business days and aim to send a substantive response within 30 days of receiving it. If an investigation needs longer, for example because a provider must retrieve logs, we will say so and give a revised date. The complaint record notes what was reported, what was checked and what was decided, and it is kept for 24 months. Contacting us first does not remove your right to approach the Ministry of Communication and Digital Affairs, the authority responsible for personal data matters, or a consumer protection body.

11. Security

We use access controls, limited retention and reasonable technical measures to protect information. No online transmission is guaranteed to be completely secure. If we identify a material incident affecting personal information, we will assess notification duties and communicate through an appropriate channel.

Measures include restricting mailbox access to named editorial staff, using encrypted connections for the website, keeping software and hosting configuration up to date, and removing accounts when a contributor leaves. Where Indonesian law requires notification of an affected person and the authority within a stated period after a failure of personal data protection, we follow that period. A notice would describe what happened, what categories of information were involved, what steps were taken and how to reach us. Readers can also help by using a unique password for their own email account and by not sending sensitive documents through an ordinary contact form.

12. Children

Meliora is written for adults and does not knowingly seek personal information from children. If a parent or guardian believes a child has contacted us, they may write to the editorial desk. We will review the request and remove information when there is no lawful reason to retain it.

We do not run age checks, because the site does not require accounts and does not collect more than a contact message. If we realise that a message was sent by someone who appears to be under the age of majority in Indonesia, we will not use it for anything beyond a reply and will delete it on request. A parent or guardian should include the date of the message and the email address used so the record can be found. Deletion requests from guardians are handled within 30 days.

13. Changes

We may revise this policy when services, law or editorial operations change. The current version is dated 5 October 2026. A later material revision will show its effective date and a short change note. Continuing to use the site after a change means only that you have read the updated notice, not that consent is assumed for optional processing.

Change log for this policy:

(a) 5 October 2026: expanded the descriptions of information collected, retention periods, provider categories, international transfers, rights requests and complaint handling. No new category of processing was introduced.

(b) Earlier 2026 edition: first publication of the policy for the Meliora editorial website.

Minor wording fixes that do not change meaning may be made without a new entry, but any change to purposes, retention periods or provider categories will be listed here with its date.

14. Contact

Privacy questions can be sent to [email protected] or +62 813 5271 9408. Written correspondence may be addressed to 28 Jalan Raya Kemang, South Jakarta 12730, DKI Jakarta, Indonesia.

Data Protection Officer: Meliora has designated Laras Permatasari as its Data Protection Officer. She can be reached at [email protected], on +62 813 5271 9408 (weekdays, Western Indonesia Time), or by post marked “Data Protection Officer” at the address above. Requests sent to this contact are acknowledged within 10 business days and answered within 30 days. The data controller is PT Meliora Media Nusantara, NIB 8120307841526, NPWP 09.528.173.6-071.000.

Telephone enquiries are answered during ordinary Jakarta business hours, Monday to Friday, and a written follow-up by email helps us keep an accurate record of what was asked. Letters are logged on the day they arrive and answered within the same 30-day period that applies to email. Please write “Privacy” in the subject line or at the top of a letter so that it reaches the right person without delay.