Privacy Policy.
Bralkon Journal is an independent editorial publication covering men's nutrition, food supplement habits, and daily wellness routines for readers in Indonesia. This Privacy Policy explains, in practical terms, what information is collected when a reader visits the website or writes to the editorial desk, why that information is processed, how long it is kept, who may see it, and how a reader can ask questions or request changes. The policy is written to be read without legal training, and where a technical term is used it is explained in the surrounding sentence. Reading this policy in full is the best way to understand how correspondence and browsing activity are handled by this publication.
1. Scope of this policy
This policy applies to the pages published under the Bralkon Journal domain, to the contact form on the Contact page, and to direct correspondence sent to the editorial desk at Jalan Thamrin No. 12, 10350 Jakarta Pusat, DKI Jakarta, Indonesia. It does not apply to third-party websites that a reader may reach by following a link from an article, nor to services operated by other publishers, even where those services are mentioned in editorial content. Where an embedded feature such as an interactive map is loaded from a third-party provider, that provider's own privacy notice governs the data processed within that embedded element, and this policy only describes our own handling of information collected directly through our pages. Any reader who is uncertain whether a specific page or feature falls within this policy is welcome to write to [email protected] and ask before submitting information.
2. Information we collect
The categories of information collected by Bralkon Journal are deliberately limited to what is needed to run an editorial website and respond to correspondence. When a reader submits the contact form, we receive the name, email address, and message text that the reader chooses to type into the form fields. When a reader simply browses the website without submitting a form, our hosting infrastructure automatically records standard server information, including the requesting IP address, the browser and operating system reported by the browser, the page requested, the referring page where available, and the date and time of the request. We do not ask readers to create an account, we do not request government identification numbers, financial account details, or precise geolocation, and we do not knowingly collect information from children. If a reader includes sensitive personal details inside a free-text message that were not requested, those details are handled with the same confidentiality as the rest of the correspondence and are not used for any purpose beyond answering the message.
3. Legal basis for processing
Where a reader voluntarily submits the contact form, the legal basis for processing the submitted name, email address, and message is the reader's consent, given by the act of completing and sending the form. Where server logs are generated automatically as part of delivering the website, the legal basis is our legitimate interest in operating a secure and reliable publication, including detecting abuse, diagnosing technical faults, and maintaining uptime. Where a legal obligation requires retention or disclosure of specific records, for example in response to a lawful request from a competent authority in Indonesia, the legal basis is compliance with that obligation. A reader who has submitted a form based on consent may withdraw that consent at any time by writing to [email protected], after which we will stop using the submitted content for any purpose other than what is necessary to close out an existing conversation.
4. How the information is used
Information submitted through the contact form is used to read, understand, and reply to the message, to keep an internal record of editorial correspondence for quality and continuity purposes, and, where relevant, to flag messages that appear to require follow-up from a specific member of the editorial team. Server log information is used in aggregate to understand which pages are visited, to identify technical errors, and to detect unusual traffic patterns that might indicate abuse of the contact form or attempted unauthorised access. We do not sell personal information to third parties, we do not use message content to build individual advertising profiles, and we do not share correspondence with unrelated commercial partners. Any internal review of correspondence is carried out by editorial or technical staff who need access to perform their role, and access outside that group is not granted as a matter of course.
5. Retention periods
Editorial correspondence, including the content of contact form submissions and any reply sent by the desk, is kept for twenty-four months from the date of the last message in a given conversation, after which it is deleted from active systems unless a longer period is required to resolve an open matter, such as a pending correction request or an unresolved complaint. Raw server access logs, which record IP addresses and requested pages without any form content, are kept for ninety days and are then automatically purged from the logging system. Where analytics reporting is enabled on the website, aggregated and de-identified traffic statistics may be retained for up to twenty-six months, since these records are used only to understand broad readership trends and do not, on their own, identify an individual reader. Backup copies of the website's technical infrastructure may persist for a further thirty days after deletion from the live system, purely as a consequence of standard backup rotation, and are not separately accessed for any other purpose.
6. Cookies and similar technologies
The website uses a small number of cookies, described in full in the separate Cookie Policy, which forms part of the overall approach to privacy described here. In summary, a session-related cookie may be used to support basic navigation and expires when the browser is closed, a consent preference cookie named ej_cookie_consent may be stored for up to one hundred and eighty days to remember a reader's cookie choice, and, where enabled, an analytics cookie such as one issued under the _ga naming convention may be stored for up to thirteen months to help understand aggregate visit patterns. No cookie used on this website is configured to build an individualised advertising profile for use on other websites. A reader can review, change, or withdraw cookie preferences at any time using the Cookie Settings link available in the site footer, and can also manage or delete cookies directly through their browser settings.
7. Third-party processors and recipients
A small number of external providers process limited technical data on our behalf as part of delivering the website. Web fonts used in the site design are served by Google LLC through the Google Fonts service, which may receive the requesting IP address as a normal part of delivering a font file over the internet. The interactive location map shown on the Contact page is provided by the Google Maps Platform, operated by Google LLC, and loading that map may cause the visitor's browser to communicate directly with Google's servers under Google's own privacy terms. Our website hosting and content delivery infrastructure is operated by a commercial hosting provider that stores server logs and website files on our behalf under a data processing arrangement that limits its use of that information to providing the hosting service itself. None of these providers is authorised to use information obtained through our website for their own independent marketing purposes.
8. International data transfers
Because our hosting and font and mapping providers operate data centres outside Indonesia, including in jurisdictions such as the United States and Singapore, routine technical information described in this policy may be transferred to and processed in those countries. Where such a transfer occurs, we rely on the relevant provider's published data protection commitments and standard contractual safeguards to ensure that information continues to receive an appropriate level of protection after the transfer. We do not transfer editorial correspondence to any third country for a purpose unrelated to operating the website, and we do not permit an overseas processor to use transferred information for a purpose beyond the service it has been engaged to provide. A reader who would like more detail on a specific transfer relevant to their own correspondence may request this by writing to [email protected].
9. Data security measures
We apply reasonable technical and organisational measures appropriate to the modest scale of this publication, including transport encryption for form submissions, access restrictions on the systems that store correspondence, and routine software updates on the servers and content management tooling used to run the website. Access to the contact form inbox and to server logs is limited to the small number of editorial and technical staff who need it to perform their role, and access is reviewed periodically as part of normal operational practice. While these measures are designed to reduce the likelihood of unauthorised access, loss, or disclosure, no online system can be operated with an absolute assurance against every possible technical failure, and a reader who suspects that their information has been affected by a security incident is encouraged to contact us immediately using the details in section 11.
10. User rights and how to exercise them
A reader may ask us, at any time, to confirm whether we hold information about them, to receive a copy of that information in a readable format, to correct information that is inaccurate or incomplete, to request deletion of information that is no longer needed for the purpose it was collected, and to object to a specific use of their information where that use is based on our legitimate interest rather than a legal obligation. Where processing is based on consent, as described in section 3, a reader may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, a reader should write to [email protected] with a description of the request and enough detail, such as the email address used in a prior message, for us to locate the relevant correspondence. We aim to acknowledge a rights request within five business days and to provide a substantive response within thirty calendar days, and we will explain the reason for any delay if a request requires additional time to resolve.
11. Complaints and contact procedure
Any question, concern, or complaint about how this publication handles personal information can be sent to [email protected], or by post to Bralkon Journal, Jalan Thamrin No. 12, 10350 Jakarta Pusat, DKI Jakarta, Indonesia, or by telephone at +62 21 2184 7202 during office hours, Monday to Friday, 09:00 to 17:00 WIB. We aim to acknowledge receipt of a complaint within five business days and to provide a full response within thirty calendar days, and where a complaint requires investigation across multiple systems we will provide an interim update if the full response cannot be completed within that period. If a reader remains unsatisfied after receiving our response, they retain the right to raise the matter with the relevant Indonesian personal data protection authority responsible for supervising compliance with applicable data protection law. We keep an internal log of complaints received under this policy, including the date raised and the date resolved, so that repeated issues can be identified and addressed.
12. Changes to this policy and revision log
We may update this Privacy Policy from time to time to reflect changes in how the website operates, changes in the providers listed in section 7, or changes in applicable law. Where a change is significant, such as a new category of information being collected or a new third-party recipient being introduced, we will update the effective date shown at the top of this page and, where practical, note the change in the revision log below. Continued use of the website after an updated policy has been published constitutes acceptance of the updated terms for future browsing, though it does not retroactively change how information already collected was processed at the time. The current and past revisions of this policy are summarised here: version 1.0 was published on 12 January 2026 and established the original scope, categories of information, and retention periods; version 1.1 was published on 4 April 2026 to add the description of the Google Maps Platform integration on the Contact page following the launch of that feature; version 1.2 was published on 22 June 2026 to extend the description of user rights and to set out the specific response times referenced in sections 10 and 11; version 1.3, the version currently in effect, was published on 18 August 2026 to expand the sections on retention periods, third-party processors, and international transfers with more concrete detail.