Privacy policy

Nenova respects the privacy of readers, contributors, subscribers, and people who contact the editorial desk. This policy explains what information may be received through nenova pages, why it is used, how long it is retained, and how a person in Indonesia or another jurisdiction can ask questions about it. The responsible publisher is Nenova, Jl. Merdeka Raya No. 45, Gondangdia, Central Jakarta, Jakarta 10350, Indonesia, phone +62 21 5289 7416.

1. Scope

This document applies to the public website, newsletter sign-up, contact form, correction requests, advertising enquiries, and ordinary correspondence. It does not govern a third-party website linked from an article. Those services publish their own notices. We encourage readers to inspect a destination before submitting personal information.

2. Information received

We may receive an email address and first name when a person requests the newsletter. A contact message may contain a name, email, topic, and the details the sender chooses to write. Server logs can include an IP address, browser type, requested page, approximate time, and referral information. We do not ask readers to submit medical records, identity documents, passwords, or detailed diagnoses through the public form.

3. Purpose

Information is used to reply to a message, deliver a requested newsletter, prevent repeated unwanted mail, maintain security, understand broad readership patterns when optional analytics are enabled, and keep an accurate record of editorial corrections. We do not use a reader's message to make an automated eligibility decision. We do not sell personal information or use health questions to target advertising.

4. Legal basis

For Indonesian readers, processing is carried out with consent where consent is requested, to respond to a person's request, to perform a requested newsletter service, or for legitimate operational interests such as security and correction management. A person may withdraw consent for optional processing at any time. Withdrawal does not make earlier lawful processing unlawful, and some basic records may need to remain for compliance or dispute handling.

5. Newsletter

Newsletter subscriptions are used only to send Nenova editorial messages and manage unsubscribe requests. Each message includes an unsubscribe mechanism. If an address repeatedly bounces or a recipient unsubscribes, it is suppressed from future sends. Subscription records are normally deleted or anonymised within 30 days after a confirmed unsubscribe, except for a suppression marker retained for up to 24 months to prevent accidental re-addition.

6. Contact records

Editorial correspondence is retained for up to 24 months after the last meaningful exchange so we can understand a correction, answer a follow-up, or demonstrate how a complaint was handled. Messages involving a legal dispute may be retained until the matter is closed and for a further 36 months where a limitation period or professional advice makes that reasonable. We periodically review old correspondence and delete material that no longer has a purpose.

7. Cookies

The site uses a browser storage choice named cookieChoice to remember whether a visitor accepted or rejected optional cookies. It is not designed to identify a person and normally remains until the visitor clears site data. Optional analytics cookies, if enabled, are listed by name, purpose, provider, and lifespan in the cookies policy. Essential server controls may last for a session or up to 30 days depending on the hosting configuration.

8. Providers

We may use hosting, email delivery, form protection, analytics, and technical support providers. Named processors may include Vercel Inc. for hosting and delivery infrastructure, an email delivery provider such as Resend, and an analytics service configured for aggregate measurement such as Plausible Analytics. The final provider list and any material change are recorded in the site's operational privacy register. Processing is also considered under Indonesia's Personal Data Protection Law No. 27 of 2022 (UU PDP), alongside applicable electronic-system and consumer rules. They may process limited information only to provide the contracted service and must apply suitable confidentiality and security measures. We do not authorise providers to sell reader data. A current provider question can be sent to the editorial desk, and we will explain the relevant category without exposing another person's confidential information.

9. International transfers

Some technical providers may process data outside Indonesia. Before using such a provider, Nenova considers the provider's security practices, contractual commitments, access controls, and applicable transfer requirements. A transfer may involve Indonesia, Singapore, Australia, the European Economic Area, or another country where a selected infrastructure provider operates. Readers may ask for more information about the safeguards used for a particular interaction.

10. Security

We use access controls, limited administrative permissions, encrypted connections where supported, routine updates, and data minimisation. No internet transmission is guaranteed to be completely secure. If we become aware of an incident affecting personal information, we will assess its scope, take containment steps, and make notifications required by applicable law. Readers should avoid including sensitive health details in ordinary email.

11. Rights

Subject to applicable law and reasonable identity checks, a person may ask to access, correct, delete, restrict, or receive information they supplied; object to certain processing; withdraw consent; or ask how an automated process is used. Send a request to the contact details below. We aim to acknowledge within seven days and provide a substantive response within 30 days, or explain why more time is needed.

12. Complaints

First contact the Nenova editorial desk so we can understand and resolve the concern. A complaint should identify the channel involved, the approximate date, and the outcome requested. If the response is unsatisfactory, a person may contact the relevant Indonesian privacy or consumer authority, or another authority with jurisdiction over their residence. Nothing in this policy removes a legal right to complain.

13. Children

Nenova is intended for adults and does not knowingly request personal information from children. If a parent or guardian believes a child has submitted information, contact us. We will review the request and delete the information when appropriate, subject to a narrow legal or security reason to retain a record.

14. Changes

We may update this policy when the service, law, or data practice changes. The current version is dated 12 October 2026. The previous review was 1 April 2026, when the newsletter retention wording and international transfer explanation were clarified. Material changes will be highlighted on this page for a reasonable period. Continued use after an effective date does not replace consent where consent is legally required.

15. Contact

Privacy questions and rights requests can be sent through contact.php or by post to Jl. Merdeka Raya No. 45, Gondangdia, Central Jakarta, Jakarta 10350, Indonesia. You may also call +62 21 5289 7416. Please do not send passwords, identity numbers, medical records, or payment details. We will use the details in a request only to verify, answer, and document the request.

For practical purposes, ordinary contact records are retained for up to 24 months after the last meaningful exchange, unless a longer period is needed to document a correction, resolve a complaint, meet a legal obligation, or protect the site from abuse. Newsletter subscription records are retained while the subscription remains active and for up to 90 days after an unsubscribe request so suppression can be respected. Security logs are generally rotated within 30 days, while aggregated readership measurements may be kept for up to 25 months because they help compare seasonal publication patterns without identifying a named reader.

Service providers may process limited information on our behalf, including the hosting provider, email delivery provider, form and spam-protection service, and privacy-respecting analytics provider if enabled. Each provider is expected to use the information only for the agreed service, apply access controls, and assist with deletion or export requests. We do not permit providers to use Nenova contact content for their own advertising audiences.

Some providers may process data outside Indonesia. Where that occurs, Nenova will consider contractual safeguards, access restrictions, transfer necessity, and the information available to readers about the destination. A transfer may also occur when a reader chooses to follow an external link or sends email through an internet service outside Indonesia. We cannot control the privacy practices of a third-party destination after the reader leaves Nenova.

A person may ask what personal information we hold, request correction of inaccurate details, withdraw consent where consent is the basis, request deletion where no overriding retention reason applies, or object to a particular use. Send a clear request to the editorial desk using the address or phone number published on this site. We may ask for enough information to verify the requester without requesting a copy of an identity document by default.

We aim to acknowledge a privacy request within five business days and provide a substantive response within 30 days. A complex request may require an additional 30 days, in which case we will explain the reason. A person who is dissatisfied may raise the matter with the relevant Indonesian data-protection or consumer authority, or with the authority in the place where they live.

This policy was reviewed on 12 October 2026. Earlier versions may be retained in an internal change record so that the basis for a material update can be understood. A future revision will show its effective date, describe the practical change, and will not silently apply a materially different use to information already collected without an appropriate notice.