Legal / Updated 14 October 2026
Privacy policy
This policy explains how Derive handles information when you read, contact, or otherwise use this publication.
1. Scope and responsibility
This policy applies to derive.example pages, forms, newsletters, and editorial correspondence operated by Derive at 120 Cihampelas Street, Bandung, West Java 40131, Indonesia. It covers visitors in Indonesia and readers who access the publication from elsewhere. Derive is responsible for deciding why and how ordinary publication data is used. We do not present this site as a substitute for an individual professional relationship.
2. Information collected
We may receive a name, email address, message contents, and technical information such as browser type, approximate region, referrer, and pages viewed. Technical data is collected in grouped form where possible. We do not ask readers to submit sensitive personal histories through the editorial form.
3. Legal basis
We use information to answer a message, maintain site security, understand aggregated readership, and meet legal obligations. Depending on context, the basis is consent, performance of a requested communication, legitimate interest in operating a safe publication, or compliance with law. You may withdraw optional measurement consent through the cookie controls.
4. Retention periods
Editorial correspondence is normally retained for 24 months after the last exchange. Security logs are retained for up to 90 days. Aggregated audience reports may be retained for 36 months because they do not identify an individual. If a legal matter requires longer retention, access is restricted and the reason is recorded.
5. Your rights
You may ask for access, correction, deletion, restriction, or a copy of personal information that Derive holds about you. You may object to processing based on legitimate interest and withdraw consent for optional cookies. Send a request to the editorial desk using contact.php or the postal address above; we aim to respond within 30 days.
6. Processors and service providers
We may use hosting, email delivery, security, and aggregated measurement providers. Providers receive only the information needed for their service and must protect it under written or equivalent obligations. Derive does not sell contact details or provide them to advertisers for independent targeting.
7. Cookies
The site uses an essential preference named cookieChoice to remember whether you accepted or rejected optional cookies. It lasts for 180 days. Optional measurement cookies, where enabled, may use a short-lived session identifier and an analytics preference lasting up to 13 months. Cookie details and controls are described in cookies.php.
8. International transfers
Some hosting or communication providers may process information in another country. Where that occurs, Derive seeks contractual safeguards, access controls, and a documented transfer basis. Readers may request a summary of the relevant safeguard by contacting us. We do not intentionally collect more information simply because a reader is abroad.
9. Security
We use encrypted transport, restricted administrative access, updates, and limited retention. No internet transmission can be promised completely secure. If we identify a material incident affecting personal information, we will assess notification duties under Indonesian law and communicate through an appropriate channel.
10. Children
The publication is intended for adults and general readers. We do not knowingly request information from children. If a parent or guardian believes a child has sent information, contact us with enough detail to locate the message, and we will review deletion where appropriate.
11. Complaints
Please contact Derive first so we can investigate the concern. Include the relevant page, approximate date, and the remedy you seek, while avoiding unnecessary sensitive information. You may also contact the appropriate Indonesian data protection or consumer authority if you believe the matter remains unresolved.
12. Changes and dated record
This version was published on 14 October 2026. Earlier material was reviewed during September 2026 to clarify retention and cookie language. Future changes will be posted on this page with a new effective date. A substantial change will be signposted on the home page for a reasonable period.
13. Contact
Privacy questions may be sent through contact.php, by phone at +62 22 731 8975, or by post to 120 Cihampelas Street, Bandung, West Java 40131, Indonesia. We may verify identity before disclosing or deleting information. That step protects readers from requests made by someone else.
For operational clarity, contact details are used only to identify the conversation and provide a reply. A message may be visible to the editor assigned to the inbox and to a contracted hosting or email provider acting under instructions from Derive. We do not request account passwords, payment details, government identifiers, or detailed personal records through ordinary correspondence. If a reader includes information that is not needed, it will be handled with the same safeguards and removed when the correspondence is closed, subject to any applicable record-keeping duty.
Our hosting provider stores site files and access logs in the ordinary course of operating a web service. Email delivery providers may process a sender address, delivery status, timestamp, and message headers so that a response can be delivered and service abuse can be investigated. These providers are expected to use the information only for the contracted service, apply access controls, and maintain security procedures. Where a provider processes information outside Indonesia, Derive considers contractual safeguards and the receiving location before using that provider.
A request to exercise a right should include the email address used to contact us, the page or interaction concerned, and the action requested. We may ask for reasonable information to confirm identity before disclosing or deleting data, particularly where a request could affect another person's correspondence. Requests are logged for up to 24 months so that Derive can demonstrate how they were handled. If we cannot complete a request, we will explain the reason and identify any available review or complaint route.
Questions may be sent through contact.php or to 120 Cihampelas Street, Bandung, West Java 40131, Indonesia, using +62 22 731 8975 for general contact. The editorial desk aims to acknowledge a privacy request within 10 working days and provide a substantive response within 30 calendar days, unless the request is unusually complex or law requires a different period. This policy was reviewed on 14 October 2026; the next routine review is planned for October 2027, with material changes recorded by updating the date at the top of the page.
Derive applies data minimization to ordinary publication activity. For example, a contact message normally needs a reply address and the content needed to understand the question, but it does not need a national identification number or a detailed personal history. The practical consequence is that readers can omit information that is not necessary for a response. If information is included accidentally, it is handled under the same access and deletion controls as other correspondence.
Our legal basis is considered separately for each purpose rather than assumed from a single visit. Replying to a message is connected to the reader's request, while security logging supports the legitimate interest of keeping pages and forms available. Optional measurement is enabled only according to the choice recorded through the cookie controls. Where law requires a record, that obligation takes priority for the limited period needed to satisfy it.
Service providers may include the site's hosting company, an email delivery provider, a form-security service, and a grouped measurement provider if optional measurement is enabled. Each provider receives only the fields needed for its function and is expected to restrict staff access, protect transmissions, and notify Derive of a relevant security incident. Some infrastructure may be located outside Indonesia, so contractual safeguards and the provider's security documentation are considered before use. Derive does not authorize these providers to use editorial correspondence for independent advertising.
Requests should identify the relevant email address, page, and preferred action. We may verify identity with a reasonable confirmation message, especially when disclosure could expose another person's information. A request log is retained for up to 24 months, while the underlying correspondence follows the retention period described above. If a request is refused in whole or part, the response will state the reason and explain how to raise a complaint.
Derive aims to acknowledge privacy questions within 10 working days and provide a substantive response within 30 calendar days. A complex request may require additional time where permitted, and we will explain the reason before the original response period ends. Complaints may be sent through contact.php, to 120 Cihampelas Street, Bandung, West Java 40131, Indonesia, or by phone at +62 22 731 8975. This page was reviewed on 14 October 2026; the next planned review is October 2027, with any material change dated in the page history.