Privacy policy

Effective 12 October 2026

This policy explains how Kemora, an editorial publication based at Jalan Merdeka 15, Menteng, Central Jakarta, Jakarta 10340, Indonesia, handles information connected with this website. This policy is read together with Indonesia’s Personal Data Protection Law No. 27 of 2022 (UU PDP) and other applicable Indonesian requirements. It applies to readers, contributors, correspondents, and people who contact the publication. It does not replace a notice supplied by an independent service linked from our pages. We aim to collect only what is needed to operate, protect, and improve the publication.

1. Scope and responsibility

Kemora is responsible for the editorial website and contact enquiries. The publication team reviews this policy and records material changes with a date. Our phone is +62 813 6789 2145. Questions may be sent through contact.php or by post to the listed address. The usual legal bases for these activities are responding to a request, operating and securing the publication, complying with applicable obligations, and pursuing a legitimate interest in maintaining a reliable editorial service. Contact correspondence is normally retained for up to 24 months after the matter is closed, unless a longer period is needed for an unresolved complaint, legal record, or accounting requirement. Readers may ask what personal information is held, request correction, ask for deletion where retention is not required, or object to a particular use by writing to the address or phone above. Kemora aims to acknowledge a privacy request within five working days and provide a substantive response within 30 days, subject to identity and scope checks.

2. Information collected

We may receive a name, email address, and message when a person contacts us. Server logs can include an IP address, browser type, requested page, referrer, and time. We do not ask readers to submit medical histories through ordinary forms. Contact forms should contain only the details needed to identify the enquiry, and readers should not include passwords, full identity documents, account credentials, or another person’s private information. Technical data may be supplied by the hosting environment and security service as a normal consequence of delivering a webpage, including approximate location derived from an IP address. We use this information to troubleshoot errors, detect abusive traffic, maintain availability, and understand broad readership patterns; we do not use ordinary editorial correspondence to build sensitive advertising profiles. A message may be shared internally with the person responsible for editorial corrections, accessibility, partnerships, or legal review when that is necessary to answer it. We may also disclose information to a service provider acting under instructions, a competent authority where legally required, or a successor involved in a genuine business reorganisation, subject to appropriate safeguards.

3. Purposes

Information is used to answer correspondence, investigate corrections, maintain security, understand aggregate page performance, and comply with lawful requests. Editorial messages are separated from advertising enquiries where practical.

4. Legal basis

Depending on context, processing is based on responding to a request, legitimate interest in operating a secure publication, consent for optional measurement cookies, or a legal obligation. Consent can be withdrawn for optional measurement without affecting access to reading pages.

5. Retention

Contact correspondence is normally retained for 24 months after the last meaningful exchange. Security logs are normally retained for 90 days. Records needed for a legal dispute may be held for the duration of that matter and then reviewed for deletion.

6. Cookies

The cookieChoice preference is stored locally when a reader accepts or rejects the banner and remains until removed by the reader. Session cookies, if used by hosting infrastructure, expire when the browser session ends. Optional analytics cookies, if enabled in a future release, will be named in the cookie policy and set for no longer than 13 months.

7. Processors

Hosting, security, email, and measurement providers may process limited information on our instructions. These categories may include Vercel for hosting and delivery, a transactional email provider for replies, and a privacy-respecting analytics provider only where measurement is enabled and permitted. Relevant categories may include Vercel for hosting and delivery, a transactional email provider for contact replies, and a privacy-respecting analytics provider only where measurement is enabled and permitted. These providers receive only information needed for their contracted function, must follow confidentiality and security obligations, and are not authorised to use Kemora correspondence for their own advertising profiles. Providers are selected for appropriate safeguards and may access data only for the service they supply. We do not sell personal information.

8. International transfers

Some infrastructure providers may process information outside Indonesia. Where this occurs, Kemora seeks contractual, technical, and organisational safeguards appropriate to the transfer and limits the data shared.

9. User rights

A person may ask for access, correction, deletion, restriction, or information about processing, subject to lawful exceptions. Send a clear request through the contact page and include enough detail for us to identify the correspondence. We may ask for reasonable verification.

10. Complaints

We encourage readers to contact us first so we can investigate. A person may also contact the relevant Indonesian data-protection or consumer authority where they believe a legal right has been infringed.

11. Security

We use access controls, limited retention, transport encryption where available, and careful handling of editorial correspondence. No internet transmission is risk-free, so readers should avoid sending sensitive medical or financial details through a general contact form.

12. Children

The publication is intended for adults and does not knowingly solicit personal information from children. If a guardian believes a child has sent information, contact us so it can be reviewed and removed where appropriate.

13. Changes

This policy was reviewed on 12 October 2026. The next scheduled review is October 2027, or sooner if the website, law, or processing changes. Prior versions may be requested from the editorial desk.