Privacy Policy.

1. Scope of this document

This Privacy Policy explains how Oranel, an editorial publication based in Jakarta, collects, uses, stores, and discloses information connected with visits to this website, correspondence sent to the editorial desk, and ordinary technical administration of the service. It applies to readers located in Indonesia and to visitors elsewhere who access the same pages, since the site is published in English and is reachable from outside the country. The policy covers the public pages of oranel.info, the contact form, direct email correspondence with the editorial desk, and the cookie consent controls described in a separate Cookie Policy. It does not extend to third-party websites that a reader may reach by following a link inside an article, nor to services operated independently by advertisers, analytics vendors, or hosting infrastructure providers beyond the specific processing activities described below. Where a reader submits information through an embedded third-party feature, such as a map, that provider's own privacy notice will also apply.

Oranel publishes editorial content about men's dietary supplement habits, nutritional variety, and active lifestyle routines relevant to readers in Jakarta and across Indonesia. Because the publication is informational rather than transactional, the volume and sensitivity of personal data processed through the site is intentionally limited. This document is written to be read by a general audience without requiring legal training, and it is reviewed periodically by the editorial and administrative team to keep it aligned with how the site is actually operated. Readers who have questions after reading this policy are encouraged to use the contact details set out in Section 9.

2. Information we collect

When a reader submits the contact form on this site, the fields captured are a name, an email address, and the content of the message itself, together with the date and time of submission. When a reader instead writes directly to [email protected], the same categories of information are received through ordinary email headers and message content, plus any attachment the sender chooses to include. Oranel does not ask readers to submit identity documents, national identification numbers, payment card details, or financial account information through the publication, because no purchase or account registration takes place on the site.

Separately, the web server and its supporting infrastructure automatically record technical information whenever any page is requested. This typically includes the visiting device's IP address, browser type and version, operating system, the date and time of the request, the page that referred the visitor if any, and the specific page or file requested. These technical logs exist primarily for security monitoring, fraud prevention, and basic aggregate readership measurement, and they are not combined with a reader's name or email address unless that reader has separately written to the editorial desk. Where cookies are used to support these functions, the categories, names, and retention periods are described in Section 7 below and in the dedicated Cookie Policy.

3. Legal basis for processing

Oranel processes personal data on the following legal bases, consistent with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP) and generally accepted data protection principles. Consent is the basis for voluntary submissions through the contact form and for any non-essential cookie category that a reader actively enables through the cookie banner; a reader may withdraw such consent at any time without needing to give a reason. Legitimate interest is the basis for basic technical logging, security monitoring, and aggregate, non-identifying measurement of how articles are read, since these activities are necessary to keep the publication available and secure and do not override a reader's own privacy interests when handled proportionately.

Where correspondence needs to be retained to demonstrate that a correction was requested and made, or to respond to a legal request from a competent Indonesian authority, the applicable basis is compliance with a legal obligation. Oranel does not rely on automated decision-making or profiling that produces legal effects on a reader, and no personal data collected through this site is used to make decisions about a reader's eligibility for any product, service, or opportunity. If the legal basis for a specific processing activity changes, this policy will be updated and the revision will be recorded in the change log in Section 10.

4. Retention periods

Oranel keeps personal data only for as long as is reasonably necessary for the purpose it was collected for, after which it is deleted or irreversibly anonymised. Contact form submissions and related email correspondence are retained for up to 24 months from the date of the last relevant exchange, so that the editorial desk can refer back to a prior conversation if a reader writes again about the same topic; after that period the message content is deleted unless a shorter period is requested. Security and access logs generated by the hosting infrastructure are retained for 90 days as a default window for investigating misuse, unauthorised access attempts, or service disruptions, and are then purged automatically.

Records of a reader's cookie consent choice are kept for up to 12 months, matching the lifetime of the preference cookie described in Section 7, after which the choice expires and the banner is shown again. Where correspondence relates to a correction of published material, a summary record may be kept for up to 36 months for editorial accountability purposes, separate from the personal contact details of the person who raised the request, which continue to follow the 24-month period above. A reader may request earlier deletion of their information at any time, as described in Section 5, and Oranel will comply unless a longer retention period is required to meet a legal obligation.

5. Reader rights and how to exercise them

Consistent with the UU PDP, readers whose personal data is processed by Oranel may request access to the personal data held about them, request correction of inaccurate data, request deletion of data that is no longer necessary for the purpose it was collected for, object to processing based on legitimate interest, and withdraw consent previously given for a specific processing activity. A reader may also ask for a copy of their personal data in a structured, commonly used format where technically feasible, and may lodge a complaint with a competent supervisory authority as described in Section 9.

To exercise any of these rights, a reader should write to [email protected] with a clear description of the request and enough detail, such as the approximate date of a prior message, for the editorial desk to locate the relevant records. Oranel aims to acknowledge every rights request within 5 business days of receipt and to provide a substantive response within 30 calendar days; where a request is unusually complex, that period may be extended by up to a further 60 days, and the reader will be informed of the extension and the reason for it before the initial 30-day period ends. There is no charge for a first request in a calendar year; a reasonable administrative fee may apply to repeated or manifestly excessive requests.

6. Third-party processors and service providers

Oranel relies on a small number of external service providers to keep the website running, and each of them processes limited technical data strictly on Oranel's instructions. The website's hosting and content-delivery infrastructure is provided by established cloud hosting operators, which process server logs and connection metadata as described in Section 2 in order to serve pages reliably and to protect the site against abusive traffic. Typeface delivery for the site's headings and body text is provided by Google Fonts, which may receive a request for font files when a page loads; Oranel has configured this delivery to minimise unnecessary data exposure where the underlying platform allows it.

The interactive location map shown on the contact page is embedded from Google Maps, operated by Google LLC, and loading that embed may cause the visitor's browser to communicate directly with Google's servers under Google's own privacy terms. If Oranel enables an aggregate analytics service in the future to understand broad readership trends, that service will be named specifically in this section and in the Cookie Policy before it becomes active, together with the categories of data it processes and the retention period it applies. Oranel does not sell personal data to any third party, and does not share reader correspondence with advertisers.

7. Cookies and similar technologies

The site uses a small number of cookies, summarised here and described in full detail in the separate Cookie Policy. An essential session cookie supports temporary page state, such as menu behaviour, and basic security controls; it is not used for personalised advertising and typically expires within 24 hours or when the browser session ends. A preference cookie named oranel-cookie records a reader's consent choice from the cookie banner for up to 12 months, so the banner does not need to reappear on every visit once a choice has been made.

If an aggregate analytics option is switched on for the site, a measurement cookie with a lifespan of up to 13 months may be used to record broad, non-identifying page-view events; this category is optional and a reader may decline it while continuing to read every public page of the site without restriction. Cookies set by the embedded Google Maps feature on the contact page are controlled by Google rather than by Oranel and are described in that provider's own cookie documentation. A reader can review, change, or withdraw their cookie choices at any time using the "Cookie Settings" link available in the footer of every page.

8. International data transfers

Because website hosting and content-delivery infrastructure may be located outside Indonesia, some of the technical information described in Section 2 may be processed on servers situated in other countries, including jurisdictions in the Asia-Pacific region and North America where major cloud hosting providers commonly operate infrastructure. Where such a transfer occurs, Oranel selects providers that maintain recognised technical and organisational security measures, such as encryption of data in transit and access controls limiting who can view raw server logs, and Oranel remains responsible for ensuring these transfers are consistent with Indonesian data protection requirements.

Correspondence sent by a reader to [email protected] is stored on email infrastructure that may likewise be hosted outside Indonesia, depending on the email service provider used by the editorial desk. Oranel does not knowingly transfer reader personal data to any recipient in a manner that would circumvent the protections described in this policy, and it reviews its hosting and email arrangements periodically to confirm that appropriate safeguards remain in place as service providers or their infrastructure locations change.

9. Complaints and contact procedure

A reader who has a question, concern, or complaint about how their personal data has been handled should first write to [email protected], addressing the message to the editorial desk and describing the issue as specifically as possible. Oranel aims to acknowledge receipt of a privacy complaint within 5 business days and to provide a substantive written response within 30 calendar days of that acknowledgement, including an explanation of what was found and, where applicable, what action has been taken. If a reader considers that their concern has not been resolved satisfactorily through this process, they retain the right to raise the matter with the competent supervisory authority responsible for personal data protection in Indonesia under the UU PDP framework, which is being established progressively by the Indonesian government following the law's enactment.

Postal correspondence relating to privacy matters may also be sent to Oranel at Jalan Panglima Polim No. 56, 12160 Jakarta Selatan, DKI Jakarta, Indonesia, marked for the attention of the editorial desk, and telephone enquiries can be made to +62 21 2184 7209 during the published office hours of Monday to Friday, 09:00 to 17:00 WIB. Oranel does not operate a weekend or public holiday enquiry line, and messages received outside office hours are addressed on the next working day.

10. Revision history

This Privacy Policy is reviewed periodically so that it continues to describe accurately how the site is operated, and material changes are recorded below with the date they took effect. The version dated 18 August 2026 is the version currently in force and supersedes all earlier versions listed here for the purpose of describing current practice, though the history is kept for transparency.