Jurnal Space Privacy Policy
Effective date: 7 November 2026
This policy explains how PT Impresi Pustaka Digital Nusantara, operating the Jurnal Space service (“We”, “Us”), collects, uses, stores, and protects personal data, with reference to Indonesian Law No. 27 of 2022 on Personal Data Protection (the “PDP Law”).
This policy is available in Indonesian and English. If there is any difference in interpretation, the Indonesian version prevails.
1. Our Two Roles
| Context | Our role | Who controls the data |
|---|---|---|
| Visitors to jurnal.space, prospective clients, and clients (contact and billing details) | Personal data Controller | Us |
| Data inside a client’s OJS (authors, reviewers, editors, registered readers) | Personal data Processor | The journal manager (client) |
For data inside a client’s OJS, We process data only on the client’s instructions and to provide the services (hosting, maintenance, migration, upgrades). Authors or reviewers with requests about their data in a particular journal should contact that journal’s manager. We will help the journal manager respond.
2. Data We Collect
a. From the consultation form: name, journal name and URL (optional), OJS version, type of request, and WhatsApp number or email address.
b. From our working relationship: contact name and position, institution, billing address, communication history, and payment data. The payment data We keep is limited to transfer receipts or transaction numbers. Payments through banks, international transfer services, or payment processors are handled by those providers. Your card details and payment account credentials stay with those providers, and We do not store them.
c. Technical access provided by clients: server credentials or OJS administrator accounts. This access is used only for the agreed work.
d. Technical site-visit data: visit statistics from a cookie-free analytics service (number of visits, pages viewed, referring sites, country, and page load speed), which are not used to identify you personally, and standard server logs (IP address, browser type, access time) for security. The visitor’s country is also used to show the appropriate language version.
3. Purposes & Legal Basis
| Purpose | Legal basis (PDP Law, Article 20) |
|---|---|
| Responding to consultation requests | Your consent when submitting the form |
| Preparing quotations, providing services, and billing | Performance of a contract |
| Meeting tax and bookkeeping obligations | Compliance with a legal obligation |
| Keeping the site and servers secure | Legitimate interest |
We do not sell personal data, and We do not use it for advertising or send promotions without separate consent.
4. Service Providers We Use
To provide our services, We use the following types of providers:
| Provider type | Function | Data that may be processed |
|---|---|---|
| Server infrastructure (data centre/VPS) | Runs Jurnal Space Hosting | Data inside client OJS installations |
| Backup storage | Stores encrypted backups in a location separate from the main server | Copies of client OJS data |
| Email services | Receives, forwards, and sends email from @jurnal.space addresses | Email addresses and correspondence |
| Site hosting, analytics, & form delivery | Serves jurnal.space, counts visits without cookies, and forwards consultation form submissions | Form submissions, visit statistics, and technical logs |
| Banks, transfer services, & payment processors | Receive payments, including from abroad | Payer name, account/transaction number, and amount |
Providers process data only for the functions above. We provide the names of these providers and their processing locations on request. Clients and data subjects can request them at [email protected]. Active clients are also notified before We add or replace a provider that processes data inside client OJS installations, as set out in Section 11 of the Terms of Service.
Some providers process data outside Indonesia. For transfers of data abroad, We choose providers that apply adequate data protection in line with Article 56 of the PDP Law. We may also disclose data where required by law or by order of a competent authority.
5. Storage & Retention
| Data | Kept for |
|---|---|
| Consultation requests that do not proceed | 12 months from the last communication |
| Client contact details | For the duration of the working relationship, then deleted except where they appear in billing documents |
| Billing and tax documents (invoices, payment receipts, withholding slips, contracts) | 10 years, in line with document-retention obligations under Indonesia’s Law on General Provisions and Tax Procedures |
| Client server/OJS access credentials | Only while the work is in progress. We ask clients to change their passwords after Handover |
| Data inside client OJS installations | Follows the service period and the export/deletion terms in Section 10 of the Terms of Service |
| Server backups | Up to 1 month of history, then deleted automatically |
6. Security
We apply reasonable measures, including encrypted connections (HTTPS/SSH), key-based authentication for server access, restricting access to personnel handling the work, encrypted backups in a separate location, and regular security updates.
If a personal data protection failure (breach) occurs, We will notify the affected data subjects, the relevant clients, and the competent authority no later than 3 × 24 hours, in accordance with Article 46 of the PDP Law.
7. Your Rights
Under the PDP Law, you have the right to:
- obtain information about how your data is processed;
- access and obtain a copy of your data;
- correct inaccurate data;
- request the deletion or destruction of your data;
- withdraw your consent;
- object to certain processing.
Send your request to [email protected]. We respond no later than 3 × 24 hours after receiving the request, in line with the deadline set by the PDP Law for most of these rights, and may ask you to verify your identity first.
8. Cookies
The jurnal.space site does not use tracking or advertising cookies. The only cookie We set is lang, which remembers your language choice (Indonesian or English) for 1 year. This cookie contains no personal data, and you can delete it at any time through your browser settings. If this changes, We will update this page and ask for consent where required.
9. Children
Our services are intended for journal managers and institutions, not for children. We do not knowingly collect children’s data through jurnal.space.
10. Changes to This Policy
Changes to this policy are published on this page with a new effective date. Significant changes are also notified by email to active clients.
11. Contact
- Jurnal Space — PT Impresi Pustaka Digital Nusantara
- Email: [email protected]