Ralome Journal+62 21 2184 7208

LEGAL INFORMATION · UPDATED 18 AUGUST 2026

Privacy Policy.

This Privacy Policy explains, in plain and specific terms, how Ralome Journal collects, uses, retains, and safeguards information connected with this website. It is written to be read alongside the Cookie Policy and the Terms of Service, and it applies to every visitor, correspondent, and reader of the publication regardless of the device or location used to access the site.

1. Scope of this document

This policy covers information gathered through ralome.info, including the homepage, article pages, the contact form, and any editorial correspondence sent to the addresses published in the site footer. It applies to visitors located in Indonesia and to readers accessing the publication from other countries, since an editorial website of this kind may be read internationally. The policy describes our role and responsibilities as a small independent publisher rather than as a commercial platform, marketplace, or financial service. It does not extend to third-party websites that a reader may reach by following an outbound link from an article, and we encourage readers to review the privacy notice of any external site they visit separately.

Where this document refers to "Ralome Journal", "the publication", "we", or "us", it means the editorial desk operating this website from Jakarta, Indonesia, at Jalan Wolter Monginsidi No. 11, 12180 Jakarta Selatan, DKI Jakarta, Indonesia. Where it refers to "you" or "reader", it means any natural person who visits, browses, or corresponds with the publication. This scope section is intended to be read narrowly: it governs data practices connected with this specific website and does not describe practices of any affiliated, sponsoring, or advertising entity that we do not directly operate.

2. Who is responsible for your information

Ralome Journal acts as the data controller for information collected through this website, meaning that editorial staff based at the Jakarta address above determine why and how information is processed. There is no separate holding company, advertising network, or data broker involved in operating the core editorial pages of this site. Any processing carried out by a named third party described in section 7 below is carried out under instruction from Ralome Journal and only for the limited purposes described in this document. If a reader is uncertain who is responsible for a specific piece of information, the contact procedure in section 12 provides a route to ask a direct question and receive a specific answer.

3. Information we collect

When a reader submits the contact form described on the Contact page, we receive the name, email address, and message content that the reader chooses to type into the form fields. We do not ask for financial account numbers, government identification numbers, or health records through this form, and readers are asked not to include such sensitive details in general correspondence, since a public editorial desk is not an appropriate channel for sensitive personal data. If a reader nonetheless includes such information voluntarily, it is handled with the same confidentiality as other correspondence but is not retained for longer than necessary to answer the specific message.

Separately, our hosting infrastructure automatically records limited technical information for every visit, including the IP address of the requesting device, the browser type and version, the operating system, the page requested, the date and time of the request, and the referring page where applicable. This information is standard server log data generated by the underlying web server software and is not something a reader actively submits. Where optional analytics cookies are accepted through the cookie banner, an anonymised or pseudonymised identifier may also be recorded, as described further in the Cookie Policy referenced in section 6.

4. How information is used and the legal basis for processing

Information submitted through the contact form is used only to read, understand, and respond to the specific message sent, and to keep a short record of the correspondence in case of a follow-up question. Technical log data is used to detect and prevent abuse of the website, to assess delivery problems, and to produce aggregate, non-identifying statistics about how many people read a given article. We do not use any information collected here to build individualised advertising profiles, and we do not sell or rent personal information to third parties for marketing purposes.

Where Indonesian data protection law applies, in particular Law No. 27 of 2022 on Personal Data Protection, the legal basis for processing contact-form submissions is the reader's consent, given by voluntarily completing and submitting the form. The legal basis for processing basic server log data is our legitimate interest in operating a secure and reliable website, an interest that is balanced against the limited and non-sensitive nature of the data involved. Where optional cookies are used, the legal basis is consent obtained through the cookie banner described in the Cookie Policy, and that consent can be withdrawn at any time using the same banner controls.

5. Retention periods

Contact-form correspondence, including the name, email address, and message content, is retained for twenty-four months from the date of the last exchange, after which it is deleted from active systems unless a longer period is required to resolve an outstanding matter or to comply with a legal obligation. Server log data containing IP addresses is retained for ninety days for security and diagnostic purposes and is then either deleted or aggregated into a form that no longer identifies an individual visitor. Where an analytics cookie identifier is recorded, it is retained for a maximum of thirteen months from the date it was last updated, consistent with common analytics retention practice, after which it expires automatically and is not renewed without a fresh consent action.

Backup copies of the website's technical infrastructure may persist for a further thirty days after the primary retention period ends, purely as a byproduct of standard backup rotation used to protect against data loss; these backups are not actively queried for individual records and are overwritten on a rolling schedule. When a reader exercises a deletion right as described in section 10, we remove the corresponding record from active systems promptly and allow any residual backup copy to expire naturally within this same thirty-day rotation window.

6. Cookies and similar technologies

This website uses a small number of cookies, described in full, by name and lifespan, in the separate Cookie Policy linked in the footer of every page. In summary, a session cookie supports basic navigation and expires when the browser session ends, a preference cookie remembers a reader's cookie banner choice for up to one hundred eighty days, and an optional analytics cookie, used only if accepted, is retained for up to thirteen months. No cookie used on this site is designed to build an advertising profile or to track a reader across unrelated websites. Readers can review, accept, partially accept, or decline these categories at any time using the cookie banner, and can further adjust cookie behaviour through their browser settings, as described in section 9 of the Cookie Policy.

7. Third-party processors and recipients

A limited number of named third parties support the technical operation of this website and act as data processors under instruction from Ralome Journal. Our hosting and content-delivery infrastructure is provided by Vercel Inc., which stores and serves the website files and processes server log data as part of standard hosting operations. Where Google Fonts are loaded for typography, Google LLC may process a visitor's IP address as part of delivering the font files, a technical step common to most modern websites. Where analytics are enabled through the cookie banner, an analytics service provider processes the pseudonymised identifier described in section 5 to produce aggregate readership reports; no individually identifying report is generated for or shared with editorial staff.

We do not share contact-form content with any advertising network, data broker, or unrelated commercial entity. Any future addition of a new processor will be reflected in an updated version of this policy, with the revision recorded in the change log in section 13, so that returning readers can identify what has changed since their last visit.

8. International data transfers

Because our hosting and content-delivery infrastructure operates across a distributed international network, information collected through this website may be processed on servers located outside Indonesia, including in jurisdictions such as Singapore or the United States, depending on the nearest available data centre at the time of a given request. Where information is transferred outside Indonesia, we rely on the contractual and technical safeguards offered by our named processors, including encryption in transit, to keep the transfer consistent with the requirements of Indonesian data protection law. We do not transfer contact-form content to any processor located in a jurisdiction that has not implemented reasonable technical and organisational security measures.

9. Data security measures

Access to the website's hosting console and correspondence inbox is restricted to a small number of named editorial staff and is protected by individual account credentials and, where supported, multi-factor authentication. All traffic to and from this website is encrypted in transit using standard transport-layer security. We periodically review the list of people with administrative access and remove access promptly when a contributor's role on the publication ends. While no online system can eliminate every risk, these measures reflect a proportionate approach for a small editorial website that does not process financial or health records at scale.

10. Your rights and how to exercise them

Subject to the conditions set out in applicable law, a reader may ask us to confirm whether we hold information about them, to receive a copy of that information, to correct information that is inaccurate or incomplete, to delete information that is no longer necessary for the purpose it was collected, to restrict certain processing, and to withdraw consent previously given for optional cookies or for contact-form correspondence. A reader may also ask a question about the basis on which we process a specific category of information, and we will provide a clear, specific answer rather than a generic reference to this policy.

To exercise any of these rights, a reader can write to the postal address in the footer of this website or send a message through the Contact page, describing the specific request and providing enough detail, such as an approximate date of correspondence, for us to locate the relevant record. We aim to acknowledge a rights request within ten business days and to provide a substantive response within thirty calendar days, extendable by a further thirty days for a complex request, in which case we will explain the reason for the extension in writing. There is no charge for a first, reasonable request; a manifestly excessive or repetitive request may incur a modest administrative fee or be declined, with reasons given.

11. Children's information

Ralome Journal is an editorial publication intended for an adult general readership and is not directed at children. We do not knowingly collect personal information from a person we understand to be a minor through the contact form. If a parent or guardian becomes aware that a minor has submitted information to us, they may contact us using the procedure in section 12, and we will remove the relevant submission promptly upon verification of the request.

12. Complaints procedure and contact

If a reader believes that this policy has not been followed, or has any question about how their information has been handled, the first step is to contact the editorial desk directly using the details in the footer of every page: by telephone at +62 21 2184 7208, by email at [email protected], or by post at Jalan Wolter Monginsidi No. 11, 12180 Jakarta Selatan, DKI Jakarta, Indonesia. We acknowledge complaints within ten business days and aim to provide a full written response within thirty calendar days. If a reader remains unsatisfied after receiving our response, they retain the right to raise the matter with the relevant Indonesian personal data protection supervisory authority once such a body is formally designated under Law No. 27 of 2022, or with another competent authority in their own country of residence.

13. Changes to this policy

We review this policy periodically and update it when our data practices change, when a new processor is added, or when applicable law is amended. Material changes are announced through a short editorial note on the homepage and are reflected in the dated entries below, so that a returning reader can identify exactly what has changed since a previous visit without needing to compare the full text line by line.