Effective 12 October 2026
Privacy policy
This policy explains how Xylran handles information when you visit our English-language editorial website. It applies to readers, contributors, correction requests and contact messages. Xylran is based at Jalan Merdeka 54, Kelurahan Gondangdia, Menteng, Central Jakarta 10350, Indonesia. We aim to collect only what is proportionate to operating a useful publication.
1. Scope
This document covers the website, its contact routes and ordinary editorial correspondence. It does not govern services operated by a third party after you leave our links. We may publish links for context, but we cannot control another organisation's practices. Please read the privacy notice of any external service you choose to use.
2. Information collected
We may receive your name, email address and message when you contact us. Server logs may record an IP address, browser type, requested page, referring page and timestamp. We do not ask readers for diagnoses, medical records or financial information. Please do not send sensitive health details through a general contact form.
3. Legal basis and purpose
We use contact information to respond to a request, consider a correction, assess a contribution and protect the website from abuse. The ordinary basis is responding to your request and pursuing legitimate editorial administration. Where optional analytics are enabled, consent is requested through the cookie banner. We do not use health inferences for advertising decisions.
4. Retention
Routine contact messages are retained for up to 24 months after the last meaningful exchange. Correction records may be retained for five years so that published changes can be explained. Security logs are normally retained for 90 days, unless needed to investigate abuse. We securely delete or anonymise information when these periods end.
5. Sharing
Information may be shared with hosting, security, email delivery and analytics processors only when needed for their defined service. Processors must follow contractual confidentiality and security duties. We do not sell reader lists or rent contact details to advertisers. A disclosure may occur when required by Indonesian law or a valid legal process.
6. International transfers
Some infrastructure providers may process technical data outside Indonesia. We assess the provider's security commitments and use contractual safeguards appropriate to the service. Transfers are limited to necessary information and are not a reason to collect extra data. Contact us if you need more detail about a current processor.
7. Your choices
You may ask what personal information we hold, request correction, ask for deletion, object to a use or withdraw optional analytics consent. Requests should identify the email address used and describe the action requested. We may ask for reasonable verification to prevent disclosure to the wrong person. We aim to respond within 30 days.
8. Children and sensitive data
The publication is intended for adults and does not knowingly solicit information from children. Do not submit medical histories, identity documents or information about another person. If you believe such information was sent, contact us so we can assess and remove it. We do not build sensitive profiles from reading behaviour.
9. Security
We use access controls, encrypted transport where supported, limited staff access and routine maintenance. No internet transmission can be guaranteed perfectly secure. If we identify a material incident affecting personal information, we will assess notification duties and communicate through an appropriate channel. Please report suspicious messages using the contact page.
10. Complaints and contact
Privacy questions can be sent to the postal address or phone number in the footer. We will review the concern, check relevant records and explain the result. If you remain dissatisfied, you may contact the relevant Indonesian data-protection or consumer authority. Please keep a copy of your request and any response for your records.
11. Changes
We published this version on 12 October 2026. A minor wording update may be recorded with its publication date, while a material change will be highlighted on this page. We will not quietly expand collection beyond the purposes described here. The current version always governs future visits.
For clarity, the information described above is handled in proportion to the request that brought it to us. A correction request may include the page address, quoted passage and a preferred way to receive our reply. A contribution may also include a byline preference and a short biography, but we do not require unnecessary personal background. If a message contains sensitive information, we may ask that future correspondence use a safer channel and may delete the sensitive portion when it is no longer needed.
Our service providers may include the hosting provider that delivers pages and stores server logs, an email provider used for correspondence, and a privacy-respecting analytics provider if optional measurement is accepted. Providers act only for the purposes described in their contracts and are expected to apply access controls, encryption in transit and reasonable deletion procedures. We do not sell reader contact details or create advertising audiences from contact messages. International processing may occur where a provider operates infrastructure outside Indonesia; in that case we consider contractual safeguards, security measures and the provider's published transfer information.
You may ask what personal information we hold, request correction, ask for deletion where retention is not required, withdraw optional analytics consent, or object to processing based on legitimate interests. Send a request to the Xylran contact route or write to Jalan Merdeka 54, Kelurahan Gondangdia, Menteng, Central Jakarta 10350, Indonesia. Include enough detail for us to locate the record, but do not send passwords or sensitive health information. We normally acknowledge a request within 7 days and aim to provide a substantive response within 30 days, subject to identity checks and any lawful exception.
If you are dissatisfied, you may first contact us so we can review the concern and preserve a written record of the outcome. Indonesian privacy matters may also be raised with the competent authority or another regulator with jurisdiction over your circumstances. This notice was reviewed on 12 October 2026. We may update it when the site, providers or legal requirements change, and the effective date at the top will identify the current version.
Our records may include the page address, date received, correspondence history and review outcome so readers do not need to repeat a request. Contact records are not used to infer health status or create advertising audiences. Providers may include hosting, email and consent or aggregate analytics services; access is limited and safeguards are expected. Some infrastructure may operate outside Indonesia, with contractual transfer safeguards considered. You may request access, correction, deletion where lawful, restriction, objection or withdrawal of optional consent by writing to Jalan Merdeka 54, Kelurahan Gondangdia, Menteng, Central Jakarta 10350, Indonesia, or +62 813 6745 2891. We aim to acknowledge requests within 7 days and respond within 30 days. Privacy handling was reassessed on 12 October 2026 after documented reviews on 1 September 2026 and 15 June 2026.