Kalvin editorial desk · 2026

How Kalvin handles information and respects reader privacy.

1. Scope

This policy applies to Kalvin pages, forms, analytics, and editorial communications available from this website in 2026. It explains what information may be received, why it is used, and how a reader can ask questions. Kalvin is operated as an informational publication from Indonesia. It does not create a clinical relationship.

2. Information received

We may receive a name, email address, message contents, and technical information such as browser type, approximate location, device category, referring page, and interaction time. We do not ask for health records through the contact form. Please avoid sending sensitive medical details.

3. Legal basis

We use information to respond to a requested message, maintain site security, understand aggregate readership, and meet legal obligations. Where optional analytics or preference cookies are used, the basis is consent. Essential processing is based on providing the requested website experience and legitimate operational interests.

4. Retention

Contact correspondence is normally retained for 24 months after the last meaningful exchange, then deleted or anonymised. Security logs may be retained for up to 90 days. Consent records are retained for 24 months so that choices can be respected. Aggregated statistics may be retained without direct identifiers.

5. Cookies

The cookieChoice preference may remain for 12 months. Session cookies may expire when a browser closes. Analytics cookies, if enabled, may have lifespans of up to 13 months and are used in aggregate. See the separate cookie policy for names, purposes, and controls.

6. Processors

Hosting, security, email delivery, and analytics providers may process limited information on our instructions. Providers are expected to apply access controls, confidentiality commitments, and deletion procedures. Kalvin does not sell reader information or permit advertising partners to use contact messages for their own marketing.

7. International transfers

Some infrastructure providers may process data outside Indonesia. Where this occurs, Kalvin seeks contractual confidentiality, security safeguards, and a lawful transfer mechanism appropriate to the service. Readers may ask where a particular message was processed.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, or a copy of information you provided. You may withdraw optional cookie consent at any time by clearing the preference in your browser. Requests should identify the relevant email address and be sent through our contact page.

9. Security

We use reasonable administrative and technical measures, including limited access, transport encryption where supported, and review of third-party settings. No online transmission is risk-free. If you believe a message was sent to Kalvin accidentally, contact us promptly so we can assess deletion.

10. Complaints

First contact Kalvin at Jalan Melati 15, Menteng, Central Jakarta, Jakarta 10310, Indonesia, or +62 21 7890 1234. We aim to acknowledge a privacy request within 10 business days and respond within 30 days when practical. You may also contact the relevant Indonesian authority or legal adviser.

11. Children

Kalvin is written for adults and is not directed to children. We do not knowingly request personal information from children. If a guardian believes a child has submitted information, please contact us with enough detail to locate and remove it.

12. Changes

This policy was reviewed on 12 October 2026. Material changes will be dated on this page and described in plain language. The current version governs information handled after publication of the change, while earlier records remain subject to the version applicable at the time.

For practical purposes, information is collected only when a reader chooses to provide it or when ordinary technical delivery requires it. A contact message may include the sender’s name, email address, page reference, and the substance of the question. Server records can also contain an IP address, request time, browser family, operating-system category, and referring URL. These details help investigate errors, protect forms, and understand broad readership patterns.

Kalvin is not intended to receive medical histories, prescription details, identity documents, payment credentials, or information about another person. If such material is sent, it is restricted to the people who need it for handling the message and is removed or securely redacted when it is no longer necessary. We do not make decisions about readers based on health characteristics or create a health profile from ordinary browsing.

Requests about access, correction, deletion, objection, or withdrawal of optional consent may be sent through contact.php or to the postal address already stated on this page. Please identify the relevant email address and describe the request without sending additional sensitive information. Kalvin normally acknowledges a privacy request within 10 business days and aims to provide a substantive response within 30 calendar days, subject to verification and any lawful extension.

Hosting, transactional email, security monitoring, and measurement services may operate in Indonesia or another country where their infrastructure is located. Where information crosses a national border, Kalvin expects contractual confidentiality, access controls, and processing limited to the stated service. A provider may be required to disclose information under the law applicable to its location, and readers may ask for a general description of the relevant safeguards.

Privacy questions can be sent to Jalan Melati 15, Menteng, Central Jakarta, Jakarta 10310, Indonesia, or by phone at +62 21 7890 1234. If a concern is not resolved, a reader may seek guidance from the Indonesian Personal Data Protection authority or another competent supervisory body. This policy was reviewed on 12 October 2026; future changes will identify the review date and the nature of the update.

For clarity, the scope includes ordinary page requests, contact messages, consent choices, and technical records created when the website is delivered. It does not extend to services operated by a linked third party, whose own privacy notice applies. Kalvin does not intentionally request identity documents, payment credentials, precise location, or detailed medical histories through the site. If a reader sends such information unintentionally, it is restricted to the people handling the message and removed or redacted when the purpose is complete.

A contact request is used to answer the question, investigate a correction, handle an accessibility report, or administer the publication. A practical example is retaining the page URL and correspondence long enough to verify whether an editorial change is needed. Contact records are normally removed 24 months after the last meaningful exchange, while a legal hold or unresolved complaint may require a longer period. The reason for an extended period is recorded where appropriate.

Readers may request access, correction, deletion, restriction, objection, or withdrawal of optional consent. Send the request through contact.php or to Jalan Melati 15, Menteng, Central Jakarta, Jakarta 10310, Indonesia, and include the email address used for correspondence. Kalvin normally acknowledges a request within 10 business days and aims to respond within 30 calendar days, after proportionate identity verification. A request may be limited where disclosure would affect another person’s privacy or a legal obligation.

Hosting, security, email delivery, and analytics may involve providers such as a cloud hosting operator, a transactional email service, a security monitoring provider, or an aggregate measurement platform. Providers receive only the information needed for their stated function and are expected to apply access controls and confidentiality obligations. Some infrastructure may be located outside Indonesia, so contractual safeguards and applicable transfer rules are considered. Readers can request a general description of current processor categories without being given confidential security details.

Essential logs are normally retained for up to 90 days, consent records for up to 24 months, and optional analytics identifiers for the period described in the cookie policy. Aggregated reports may be kept longer because they no longer directly identify a reader. This policy was reviewed on 12 October 2026; a later change log will record the date, affected subject, and practical consequence of a material revision. Privacy questions may also be directed to +62 21 7890 1234.