Privacy Policy

This Privacy Policy explains, in plain language, how Elaron Journal ("Elaron", "we", "us") collects, uses, stores, and shares information gathered through elaron.info and related correspondence. It is intended for readers based in Indonesia and elsewhere who visit the site, subscribe to updates, or write to the editorial desk. Please read it together with our Cookie Policy and Terms of Service, which cover related but distinct topics.

1. Scope of this document

This policy applies to the public pages of elaron.info, the contact form found on the Contact page, and any email or postal correspondence a reader sends to the addresses listed in this document. It covers information collected automatically through standard web server logging as well as information a reader chooses to submit voluntarily. It does not extend to third-party websites that a reader may reach by following an outbound link from an article, nor to social media platforms where Elaron may maintain a presence, since those services operate under their own privacy terms. Where an integration with a third-party tool is used on the site, such as an analytics or mapping service, that tool's own privacy documentation supplements, but does not replace, this policy.

2. Who is responsible for your information

Elaron Journal is edited from Jalan Sudirman No. 45, 12930 Jakarta Selatan, DKI Jakarta, Indonesia, and this office acts as the data controller for the purposes described here. Correspondence about privacy matters can be sent by post to that address, by telephone to +62 21 2184 7201 during listed office hours, or by email to [email protected]. We have designated a privacy contact point within the editorial team who reviews incoming requests and coordinates any necessary follow-up with hosting or analytics partners. If a reader is uncertain whether a request belongs with Elaron or with an unrelated organisation of a similar name, the safest approach is to write to [email protected] and ask before sending sensitive details.

3. Information we collect

When a page loads, the hosting infrastructure automatically records technical details similar to those logged by most websites: an IP address, browser and operating system type, device category, the page requested, the referring page where available, and the date and time of the request. These entries are generated by standard server software and are not manually reviewed unless troubleshooting is required. Separately, if a reader completes the contact form on the Contact page, we receive the name, email address, and message text that the reader chooses to type. No account system, password, government identification number, or payment detail is collected anywhere on the site, because Elaron does not operate logins, subscriptions requiring payment, or an online store.

Readers who opt into optional cookies, as described in the Cookie Policy, may also generate a randomly assigned analytics identifier used only to group visits for aggregate reporting. This identifier is not linked to a name or email address by Elaron and is only ever associated with browsing behaviour on this site, such as which article sections were viewed and for how long. We do not purchase supplementary data about readers from external data brokers, and we do not combine server logs with any offline records.

4. Legal basis for processing

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, commonly referred to as the UU PDP), processing of personal data must rest on a recognised legal basis. For server logs and basic security monitoring, our basis is legitimate interest in operating a functioning, secure website; the interest is limited to what is reasonably necessary and is balanced against the minimal privacy impact of routine log data. For the contact form, the basis is the performance of steps requested by the reader before a response is given, since submitting the form is a direct request for correspondence. For any non-essential cookie, including analytics, the basis is the reader's freely given consent obtained through the cookie banner described in the Cookie Policy, and that consent can be withdrawn at any time without affecting the underlying service the reader receives from the site.

5. How your information is used

Server log data is used to deliver requested pages, detect and mitigate abusive traffic patterns such as automated scraping, and produce basic uptime and performance statistics for the editorial team. Contact form submissions are used solely to read, evaluate, and respond to the message sent, including, where relevant, to correct a factual point in a published article or to answer a general question about the publication. Aggregated analytics, where a reader has consented, help the editorial team understand which topics attract sustained reading interest so that future coverage can be planned more usefully. We do not use any of this information to build individual profiles for advertising targeting, and the site does not display third-party behavioural advertising.

6. Retention periods

Different categories of information are kept for different lengths of time, matched to the purpose for which they were collected. Standard web server logs are retained for 90 days and then automatically deleted or irreversibly aggregated into non-identifying statistics. Contact form messages, along with any reply sent by the editorial team, are retained for 24 months from the date of the last exchange, which allows us to refer back to a previous conversation if a reader writes again about the same topic; if a message documents a factual correction to a published article, the relevant excerpt may be kept for as long as that correction remains editorially relevant. Analytics identifiers are retained for up to 13 months from the most recent visit, after which they expire automatically and a new identifier is issued on the next visit. Backup copies of the website's database, which may incidentally contain a copy of the categories above, are rotated on a 30-day cycle and are not kept beyond that window.

7. Your rights and how to exercise them

Readers in Indonesia have rights under the UU PDP to request confirmation of whether we hold information about them, to request a copy of that information, to request correction of inaccurate details, to request deletion where retention is no longer necessary, and to object to processing based on legitimate interest. Readers located in other jurisdictions may have comparable rights under their local law, and we aim to honour reasonable requests regardless of where the request originates. To exercise any of these rights, send a written request to [email protected] with enough detail to identify the correspondence in question, such as the approximate date of a previous message or the email address used to send it. We aim to acknowledge a rights request within 5 business days and to provide a substantive response within 30 calendar days; if a request is unusually complex, we will explain the delay and provide a revised timeline rather than leave the reader without an update.

8. Third-party processors and service providers

A small number of external providers process information on Elaron's behalf under written instructions limited to the services described here. Website hosting and content delivery are provided through cloud infrastructure operated in the Asia Pacific region, including facilities in Singapore, which host the files that make up elaron.info. Where analytics is enabled by reader consent, aggregate measurement is provided through a widely used web analytics service configured to minimise the precision of stored identifiers. Outgoing email replies from the editorial desk may be routed through a transactional email delivery provider rather than sent directly from a personal mailbox, purely to improve delivery reliability. Each provider is contractually restricted from using information collected through this site for its own independent purposes, and none of these providers is authorised to sell reader information to further parties.

9. Cookies and similar technologies

This site uses a limited set of cookies, summarised in full in the separate Cookie Policy, which readers should consult for exact names, categories, and lifespans. In short, a session cookie supports basic navigation and is deleted automatically when the browser closes, a preference cookie remembers the reader's cookie banner choice for approximately 12 months, and an optional analytics cookie, active only after consent, is retained for up to 13 months. No cookie on this site is used to build cross-site advertising profiles, and no cookie stores the content of a contact form submission. Readers can change or withdraw cookie consent at any time using the cookie settings link available in the footer of every page.

10. International data transfers

Because hosting and certain support services are located outside Indonesia, some information described in this policy may be transferred to and processed in Singapore or other jurisdictions where our infrastructure or service providers operate. Where such a transfer occurs, we select providers that maintain recognised organisational and technical safeguards, including encryption of data in transit and restricted administrative access, and we enter into data processing terms that require the receiving party to protect the information to a standard consistent with the UU PDP. We do not transfer contact form content to any jurisdiction solely for the purpose of avoiding applicable protections, and the underlying purpose of any transfer remains limited to operating the website and responding to correspondence.

11. Security measures

We apply layered technical and organisational measures appropriate to the modest amount of personal data collected through an editorial website. These include transport encryption (HTTPS) for all pages, restricted administrative access limited to a small number of editorial staff, routine software updates on the hosting platform, and periodic review of who retains access to the contact form inbox. While these measures are designed to reduce risk substantially, no website can eliminate every possible security incident, and we encourage readers not to include highly sensitive personal information, such as national identification numbers or financial account details, in a contact form message, since the form is intended for general editorial correspondence rather than secure data exchange.

12. Children's information

Elaron Journal is an editorial publication aimed at adult readers interested in daily nutrition and supplement habits, and the site is not directed at children. We do not knowingly collect personal data from a person under the age of 18 through the contact form or otherwise, and if we become aware that such information has been submitted, we will delete the relevant message promptly. A parent or guardian who believes a child has submitted information through the site is welcome to contact [email protected] so that the matter can be reviewed and resolved.

13. Complaints procedure and contact

If a reader believes their information has been handled inconsistently with this policy, the first step is to write to [email protected], or by post to Jalan Sudirman No. 45, 12930 Jakarta Selatan, DKI Jakarta, Indonesia, describing the concern in as much detail as possible. We aim to acknowledge any complaint within 5 business days and to provide a written response, including any corrective steps taken, within 30 calendar days of acknowledgement. If a reader remains dissatisfied after our internal review, they retain the right to raise the matter with Indonesia's competent personal data protection supervisory authority under the UU PDP, or with the relevant authority in their own country of residence if that country provides an equivalent mechanism. We treat every complaint as an opportunity to review our internal practices, and repeated categories of concern are discussed at editorial planning meetings.

14. Changes to this policy and revision log

We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When a change is more than a minor clarification, we will update the "Updated" date at the top of this page and, where appropriate, mention the change on the homepage. Readers are encouraged to revisit this page periodically, particularly before submitting the contact form, to stay informed of the version currently in effect.

• Version 1.0 — 3 January 2026: Initial publication of the Privacy Policy alongside the site launch.
• Version 1.1 — 22 March 2026: Added detail on analytics retention periods and clarified the distinction between session and preference cookies.
• Version 1.2 — 18 August 2026: Expanded the sections on international data transfers, named third-party processors, and complaint response times; clarified rights-request acknowledgement timelines.

This document is provided for general information and does not constitute legal advice. Readers with specific legal questions about their personal data should consult an independent professional or the relevant supervisory authority.