Privacy policy

1. Information we receive

When you contact Caban, we may receive your name, email address, telephone number if supplied, message, and any correction details you choose to send. Server logs may include IP address, browser type, device information, requested URL, referrer, and timestamps. We do not ask readers to submit medical records, identity documents, or precise health histories through ordinary forms. Please avoid placing sensitive information in a message.

For example, a reader submitting a correction about an article on interval pacing typically provides only a name, an email address for follow-up, and a short description of the suggested change. Information we receive can be grouped as (a) identifying details you choose to provide, such as a name and email address, (b) technical details collected automatically by the hosting infrastructure, such as an IP address and browser type, and (c) the content of a message itself, which we do not pre-screen before it reaches the editorial desk. We do not knowingly collect information through hidden tracking pixels embedded in emails we send. If a reader includes an attachment with a correction request, it is reviewed manually and is not automatically processed by any third-party scanning tool beyond standard spam filtering.

2. Purposes

We use contact details to answer correspondence, investigate corrections, protect the site from abuse, and keep a record of editorial decisions. Aggregated technical information helps us understand whether pages load and whether accessibility improvements are needed. We do not sell personal information or use it to create a health profile. Editorial submissions are assessed for relevance and responsibility.

A practical example: if several readers report that a specific page loads slowly on mobile devices, we use aggregated, non-identifying technical logs to investigate the cause rather than examining any individual reader's activity. Purposes also include basic fraud and abuse prevention, such as identifying a pattern of automated spam submissions to the contact form, which relies on technical signals rather than personal profiling. We do not use contact information to send unsolicited marketing messages unrelated to a reader's original inquiry. Where a correction is substantiated, the underlying message may be retained as part of the internal editorial record described in our editorial policy. We do not combine contact-form data with any separately purchased marketing list.

3. Legal basis

For Indonesian readers we process information to respond to a request, provide a service, maintain security, and pursue legitimate editorial and operational interests. Where consent is required for optional analytics or a mailing feature, we ask for it separately. You can withdraw optional consent without changing the lawfulness of prior processing. We do not make solely automated decisions with legal or similarly significant effect on readers.

In practice, responding to a correction request relies on the basis of taking steps at your request, while retaining a server log for security purposes relies on our legitimate interest in keeping the site available and safe from abuse. Where legitimate interest is the basis, we weigh that interest against a reader's privacy expectations before relying on it, and a reader can object to processing based on legitimate interest by contacting us. Consent-based processing, such as an optional future newsletter signup, would include a clear opt-in step and an easy way to withdraw that consent at any time through an unsubscribe link or a written request. Withdrawing consent affects only processing going forward and does not retroactively make earlier, properly consented processing unlawful. We do not use profiling to make decisions about a reader's access to content, pricing, or eligibility for any feature.

4. Retention periods

We keep different categories of information for different lengths of time, based on why the information was collected and whether a longer period is needed for legal, security, or editorial recordkeeping reasons. Routine contact-form messages that do not lead to a published correction are generally retained for up to twelve months before deletion. Messages tied to a substantiated correction, which forms part of the editorial record described in our editorial policy, are retained for up to twenty-four months to support any follow-up questions about the same article. Server logs containing technical details such as IP addresses are generally retained for up to ninety days for security monitoring before being purged or anonymized. Where a dispute, legal obligation, or an active security investigation requires it, we may retain specific records for a longer period limited to what that purpose requires.

5. Your rights and how to exercise them

Consistent with Indonesia's Personal Data Protection Law, a reader can request access to the personal information we hold about them, ask us to correct inaccurate information, request deletion where retention is no longer necessary, and object to processing based on our legitimate interest. A reader can also ask us to restrict processing while a dispute about accuracy is resolved, and can request a copy of information they provided in a portable format where technically feasible for a small editorial operation like ours. To exercise any of these rights, a reader can write to the contact address or phone number listed at the end of this policy, describing the specific request and providing enough detail, such as an email address previously used, for us to locate the relevant records. We aim to acknowledge a rights request within seven business days and to provide a substantive response within thirty calendar days, consistent with common regional practice for data-subject requests, extending that period only where a request is unusually complex and explaining the reason for any delay. There is no charge for a standard rights request, though we may ask for reasonable verification of identity before disclosing personal information, to prevent a third party from accessing another reader's data.

6. Third-party processors

Caban relies on a small number of third-party service providers to operate the site, and we share only the information necessary for each provider to perform its function. These include a web hosting and infrastructure provider that stores site files and processes server logs, an email delivery service used to receive and route messages submitted through the contact form, and, where enabled, an analytics provider that processes aggregated, privacy-conscious usage statistics such as page views and approximate region. We do not engage a data broker, and we do not permit a processor to use reader information for its own independent marketing purposes. Each processor is selected with attention to its own security and privacy practices, and we expect a processor handling personal information on our behalf to apply protections consistent with this policy. We do not currently share personal information with a social media platform for advertising purposes, and if that were to change, this policy would be updated before such sharing began.

7. International transfers

Because modern hosting and email infrastructure often operates across multiple countries, information submitted to Caban may be processed on servers located outside Indonesia, including in regional data centers operated by our hosting or email providers. Where information is transferred internationally, we rely on providers that apply recognized technical and contractual safeguards, such as encryption in transit and contractual confidentiality obligations, to protect the information during and after transfer. We do not transfer personal information to a processor in a manner inconsistent with the cross-border transfer requirements of Indonesia's Personal Data Protection Law. A reader concerned about where their specific information is processed can contact us for general information about the hosting and email providers we use, recognizing that exact server locations can change as providers update their own infrastructure. We review our processor agreements periodically to confirm that international transfer safeguards remain appropriate.

8. Security measures

We apply reasonable technical and organizational measures appropriate to a modest editorial publishing operation, including encrypted connections for pages and forms, access controls limiting who can view submitted messages, and routine software updates on the hosting platform. No system can be guaranteed completely free of risk, and we encourage readers not to include highly sensitive information, such as a national identification number, in an ordinary message. Staff and contributors with access to reader correspondence are expected to treat it as confidential and to use it only for the purposes described in this policy. If we become aware of a security incident that creates a meaningful risk to personal information we hold, we intend to assess the situation promptly and, where appropriate, notify affected readers and relevant authorities consistent with applicable Indonesian requirements. A reader who identifies a potential security weakness is asked to report it responsibly to the contact address below rather than attempting to exploit it.

9. Children's information

This site is written for an adult general readership, including mature men interested in athletic endurance and functional preparation, and it is not directed at children. We do not knowingly collect personal information from a person under eighteen years of age, and the contact form is not intended for use by a minor without the involvement of a parent or guardian. If we become aware that a message from a minor has been submitted without appropriate oversight, we will delete the related personal information promptly, keeping only what is necessary to document that the deletion occurred. A parent or guardian who believes a minor has submitted personal information to Caban can contact us using the details below to request its removal. This section exists for completeness rather than because the site actively markets to or targets a younger audience.

10. Complaints, contact, and revision history

A reader who believes their information has been handled inconsistently with this policy can first raise the concern directly with us at the address below, and we aim to acknowledge a complaint within seven business days and provide a substantive response within thirty days. If a reader remains unsatisfied after contacting us, Indonesia's data protection authority structure under Law No. 27 of 2022 provides a further avenue for raising a complaint about personal data handling. We maintain a simple internal log of material changes to this policy: a clarification to the third-party processors section was completed on 20 April 2026, the retention periods section was refined on 15 July 2026, and the scheduled annual review was completed on 1 October 2026, which is reflected in the reviewed date at the top of this page. Minor formatting or wording corrections that do not change the substance of a section are not separately logged. Questions, corrections, or rights requests may be sent to Jalan Purnawarman No. 27, Bandung Wetan, Bandung, Jawa Barat 40115, Indonesia, or by telephone at +62 811 7265 9304, and we encourage written correspondence by post or through the contact page for any request that requires a documented response.

Named processors and business registration

To avoid vague references, the processors who may handle data on Caban's behalf are named here directly. Vercel Inc., based in the United States, provides web hosting, content delivery, and server infrastructure and may process server logs as part of that service. Google LLC, through Google Analytics, provides aggregated web-analytics measurement when a reader accepts optional cookies, and is itself bound by its own published data-processing terms. Where a reader submits the contact form, the message is transmitted using standard email delivery and stored in the mailbox of the editorial desk at [email protected], which is checked only by Caban staff.

Requests concerning personal data, including access, correction, deletion, or withdrawal of consent as described above, may be sent in writing to Jalan Purnawarman No. 27, Bandung Wetan, Bandung, Jawa Barat 40115, Indonesia, by telephone at +62 811 7265 9304, or by email at [email protected]. We aim to acknowledge a request within 5 working days and resolve routine requests within 30 calendar days, consistent with the general timeframes referenced in Indonesia's Personal Data Protection Law. Caban operates in Indonesia under business registration number NIB 0311230091827 and tax identification number NPWP 02.481.736.4-428.000, issued to PT Caban Media Nusantara.