PRIVACY
Privacy Policy
Last reviewed 14 October 2026.
1. Scope
This policy explains how Onward handles information when visitors read pages, contact the editorial desk, or interact with optional cookies. It applies to the website and its ordinary editorial operations. It does not replace notices supplied by external services. We aim to collect only what is reasonably needed for those purposes.
2. Information received
Contact messages may include a name, email address, message content, and details a visitor chooses to provide. Technical logs may include browser type, approximate location, page address, and time of access. We do not intentionally request sensitive personal information through ordinary forms.
3. Purpose and basis
We use information to respond to enquiries, maintain security, understand aggregate use, and improve accessibility. The basis may be consent for optional analytics, legitimate interest for security and service operation, or steps requested by a visitor before a response. We do not use contact messages for unrelated marketing.
4. Retention
Editorial enquiries are normally retained for 24 months after the last meaningful exchange. Security logs are generally retained for up to 90 days. Cookie preference records remain in the browser until removed or replaced. We may retain a correction record longer when needed to document editorial history.
5. Sharing
Information may be handled by hosting, security, analytics, email, and technical support providers acting under instructions. We do not sell personal information. Providers receive only the access reasonably required for their service and are expected to protect it.
6. International transfers
Some providers may process information outside Indonesia. Where this occurs, we seek contractual, technical, or organizational safeguards appropriate to the service and the information involved. Visitors may contact us to ask for more general information about relevant provider locations.
7. Rights
Depending on applicable law, a visitor may ask for access, correction, deletion, restriction, or an explanation of processing. Requests should identify the relevant email address and describe the request. We may need to verify identity before acting and generally respond within 30 days.
8. Children
Onward is intended for adults and does not knowingly collect information from children. If a guardian believes a child has submitted personal information, contact us so we can review and remove it where appropriate. We do not create child profiles or behavioral segments.
9. Security
We use access controls, limited retention, encrypted connections where available, and provider review appropriate to a small editorial site. No online transmission is guaranteed to be risk-free. If we identify a material incident, we will assess notification duties under applicable law.
10. Complaints
Questions can be sent to Jalan Thamrin No. 10, Menteng, Central Jakarta, DKI Jakarta 10310, Indonesia, or by phone at +62 813 7489 2560. We will review complaints in good faith. Visitors may also contact the relevant Indonesian data protection authority or another competent regulator.
11. Changes
This policy was reviewed on 14 October 2026. Earlier 2026 editorial updates clarified retention and cookie language. Future changes will be posted on this page with a new date and will not silently expand collection for previously gathered information.
Practical details for visitors
Onward is operated from Jalan Thamrin No. 10, Menteng, Central Jakarta, DKI Jakarta 10310, Indonesia. A visitor may contact the editorial desk at +62 813 7489 2560 or through the contact page to ask what information is held about them, request correction, or raise a concern about handling. Requests should include enough context to locate the relevant exchange, but should not include unnecessary sensitive information.
We normally acknowledge privacy requests within five business days and provide a substantive response within 30 calendar days. Where a request is unusually complex, we may explain the reason for an extension and provide a progress update. We may ask for reasonable verification before disclosing information, particularly where a request could affect another person’s privacy.
Named service categories can include Vercel for hosting and deployment, a transactional email provider for contact replies, an analytics provider only where optional measurement has been enabled, and security or abuse-prevention services. Provider access is limited by operational need, and international processing may occur under contractual, technical, or organizational safeguards appropriate to the service.
Visitors may ask for access, correction, deletion, restriction, or withdrawal of consent where applicable. Deletion may not remove information that must be retained for security, legal compliance, dispute handling, or a documented editorial correction. Onward does not use contact messages for automated decisions with legal or similarly significant effects.
Change history: this policy was reviewed on 14 October 2026. Earlier operational records may be retained for 24 months, security records for up to 90 days, and request correspondence for up to 24 months after closure. Material changes will be dated and described on this page.
Further information for visitors
This policy covers the public Onward website, ordinary contact exchanges, consent choices, editorial correction requests, and technical information needed to keep pages available. It does not control independent websites linked from Onward, and those services provide their own notices. Onward is operated from Jalan Thamrin No. 10, Menteng, Central Jakarta, DKI Jakarta 10310, Indonesia.
Depending on how a visitor uses the site, information may include a name and email address supplied in a message, the contents of that message, page and referrer details, browser and device information, approximate region, timestamps, cookie choices, and security events. We do not intentionally ask ordinary visitors to submit sensitive personal details. A visitor should redact information that is not necessary for the question.
Operational processing may rely on consent for optional measurement, legitimate interest for security and service reliability, and steps requested by a visitor when they ask for a reply. Consent can be withdrawn for optional processing without affecting earlier lawful use. Withdrawal does not require a visitor to explain their reasons.
Hosting and deployment may be provided by Vercel, email delivery by a transactional mail provider, measurement by an analytics provider only when enabled, and security functions by infrastructure or abuse-prevention providers. These providers receive limited access under contractual or technical controls. Some processing may occur outside Indonesia, with access safeguards and provider terms applying to the transfer.
Visitors may request access, correction, deletion, restriction, portability where applicable, or an explanation of processing. Requests can be sent through the contact page or to +62 813 7489 2560. We normally acknowledge a request within five business days and respond within 30 calendar days; complex requests may require a documented extension. We may verify identity before releasing information or acting on a request involving another person.
Editorial enquiries are normally retained for 24 months after the last meaningful exchange, security logs for up to 90 days, cookie preference records for the browser period described in the cookie policy, and correction records for as long as needed to explain publication history. Legal, accounting, fraud-prevention, or dispute records may be kept longer where reasonably required. This policy was reviewed on 14 October 2026 and future material changes will be dated.