Privacy policy

Effective 13 October 2026 · Kilter Hub, Jalan Cendrawasih No. 25, Kebayoran Baru, Jakarta Selatan, 12180, Indonesia, explains how this editorial website handles information.

This notice covers information collected through ordinary browsing, voluntary contact, accessibility feedback, and any future reader features introduced on this domain. It applies to visitors in Indonesia and to visitors accessing the site from other countries. It does not create a relationship beyond the operation of the website and does not replace a separate notice shown at the point of collection. We use plain-language descriptions so that a reader can understand the practical effect of each data practice.

1. Scope

This policy applies to pages, contact messages, and ordinary browsing of Kilter Hub. It does not govern third-party websites linked from our pages. We process information fairly, transparently, and only for described purposes.

It also applies when a reader sends a correction request, asks an accessibility question, or contacts the editorial desk by telephone or post. Links to another domain begin a separate privacy relationship, and that operator may use different retention periods or legal bases. We recommend reviewing the notice displayed by any external service before sharing information. Kilter Hub does not knowingly invite children to submit personal information.

2. Information collected

When you contact us, we may receive your name, email address, telephone details if supplied, and the contents of your message. Server logs may record an IP address, browser type, time, and requested page for security and reliability.

Fields that are not needed for a response should be left blank. Technical records may include a referring page, language preference, device category, and an error code, but they are used to maintain service quality rather than to build a personal profile. We do not request account passwords, identity documents, precise location, or sensitive personal history through ordinary forms. If a message contains information that is not needed, we may limit access to it or remove it earlier.

3. Legal basis

We rely on consent for optional cookies and correspondence, legitimate interests for security and basic site operation, and legal obligations where a record must be retained. You may withdraw optional consent at any time.

Consent is recorded through the preference control and is not inferred merely from continued reading. Our legitimate interest assessment considers whether the processing is expected by a visitor, proportionate to site security, and balanced against privacy. Withdrawal does not invalidate processing that took place before withdrawal. For Indonesian visitors, handling is intended to follow applicable obligations under Law No. 27 of 2022 on Personal Data Protection, alongside any other applicable privacy requirement.

4. Retention

Editorial enquiries are retained for 24 months after the last meaningful exchange. Security logs are normally kept for 90 days. Records needed for legal correspondence may be held for seven years, then securely deleted or anonymised.

A request may remain in a restricted mailbox during the response period and any reasonable follow-up. Backups can take up to 35 days to cycle out after deletion, except where a legal hold or security investigation requires preservation. Aggregated statistics that no longer identify a person may be retained for historical reporting. At the end of each period, access is removed and the record is deleted, securely overwritten where practicable, or de-identified.

5. Your rights

You may request access, correction, deletion, restriction, or a copy of personal information. Write to the address below with enough detail to locate your request; we aim to respond within 30 days.

We may ask for proportionate confirmation that the requester is the relevant person, especially where disclosure could affect another individual. A request should identify the approximate date, contact channel, and action sought, but should not include unnecessary identity documents. We will explain any lawful reason for declining or narrowing a request and will offer a practical route to clarify it. Requests can be submitted to the Jakarta address or by telephone at +62 813 5792 4680; initial acknowledgement is normally sent within 10 business days.

6. Processors

Hosting, email delivery, analytics, and security vendors may process limited information under contractual instructions. They may not use submitted correspondence for unrelated purposes.

Typical categories include a hosting provider that stores page and log data, an email provider that delivers messages, and a security service that filters abusive traffic. We select providers with appropriate technical safeguards and limit the information made available to each provider. Provider personnel access is controlled, logged, and limited to operational need. A current vendor name may change as infrastructure changes, and material changes will be reflected in this notice.

7. Cookies

Essential session cookies support navigation. The preference cookieChoice records a banner choice for up to 12 months. Optional analytics cookies, if enabled, last only as described in the cookie policy and are set after consent.

Session identifiers normally expire when the browser closes, while cookieChoice has a maximum lifespan of 12 months. An optional analytics identifier, if introduced, will be configured with a maximum 13-month lifespan and reduced event detail. Browser settings can remove stored values, although essential functions may then need to be selected again. We do not use cookies to infer sensitive interests from ordinary reading.

8. International transfers

Some infrastructure providers may process information in a country outside Indonesia. Where this occurs, Kilter Hub considers contractual safeguards, access controls, and applicable transfer requirements before use.

Cross-border processing may be necessary for resilient hosting or message delivery. The categories transferred are limited to the information described in section 2, and providers are instructed not to sell it or use it for unrelated advertising. A visitor may ask where a particular message was routed and we will provide a useful answer unless security or confidentiality prevents disclosure. We review material provider changes before adoption.

9. Security

We use access controls, encrypted connections where supported, limited administrator permissions, and routine review of technical logs. No internet transmission is completely free from risk, so please avoid sending confidential information through a general enquiry.

Suspected incidents are recorded, assessed, contained, and escalated according to their nature. If a breach creates a legally relevant risk, we will consider notifications required by applicable law. Staff and contractors receive instructions on handling messages, and inactive access is removed. Readers should also keep browsers and devices updated and avoid using shared devices for private correspondence.

10. Contact and changes

Privacy questions may be sent to Kilter Hub, Jalan Cendrawasih No. 25, Kebayoran Baru, Jakarta Selatan, 12180, Indonesia, or +62 813 5792 4680. We aim to acknowledge a privacy enquiry within 10 business days and provide a substantive response within 30 days where practicable.

This policy was issued on 13 October 2026. A revision dated 13 October 2026 clarified retention periods, processor categories, and cross-border handling without changing the stated purposes. Future material changes will show a new date and a short summary near the top of this page.