Privacy Policy

In this policy, "we" and "us" mean Hutan Rimba Foundation. "You" means a visitor to this website.

Our address is City Lofts Sudirman Unit 21-22, Jl. K.H. Mas Mansyur No.121, Karet Tengsin, Tanah Abang, Jakarta Pusat 10220.

This policy covers the website at www.hutanrimbafoundation.org.

For anything about your personal data, email hello@hutanrimbafoundation.org.

The site's own code collects no personal data while you browse. Our host, Cloudflare, still handles ordinary request data such as your IP address. The only places you can send us personal data are the site's three forms: the partnership inquiry form, the contact form on the homepage and the newsletter sign-up in the footer.

• The site has no visitor accounts or login, no payments and no donations.
• The site runs no analytics, tracking or advertising scripts.
• The site's own code sets no cookies and stores nothing in a visitor's browser.
• Every file a page loads, including our fonts, comes from this site's own domain.
• If you send one of the forms, it goes to a form service, Web3Forms, which delivers it to our inbox as an email.

When you browse, the site's own code collects nothing about you. Cloudflare, the company that hosts the site, processes every request it serves. That includes your IP address and ordinary traffic data.

The site's three forms are the only places it asks for personal data. The partnership inquiry form on the Collaboration page asks for:

• Your name (required).
• Your email address (required).
• Your organization (optional).
• Your partner type: government, corporate, academic, community or other (required).
• Your message, in your own words (required).

The contact form on the homepage asks for your name, your email address and your message, all required.

The newsletter sign-up in the footer asks only for your email address.

Before anything is sent, your browser checks that the required fields are filled in and that your email looks like an email address. This check runs on your device. It sends nothing, and it does not test whether the address works.

When you press send, your browser sends the form straight to Web3Forms, a form-to-email service. Our site has no server of its own that receives or passes on your message.

Along with your details, each submission carries an email subject made from what you entered, our site's public form key, which tells Web3Forms where to deliver it, and an empty anti-spam field.

Like any web server, Web3Forms also receives your IP address and the usual technical details your browser sends with a request.

Web3Forms turns each submission into one email and delivers it to our inbox. The website itself keeps no copy. It has no database or log, and the content editor our staff use cannot see form submissions. Its code does not log, store or show again what you typed.

A newsletter sign-up arrives the same way, as one email to our inbox. The site does not pass your address to a mailing list service.

If a form is shown as unavailable, it sends nothing.

Cloudflare handles every visit. Web3Forms and our email provider only receive what you send through a form.

• Cloudflare hosts the website and processes each visitor's request. Cloudflare's customer terms describe it as a processor acting for the website operator.
• Web3Forms receives each form and delivers it to us as an email.
• Our email provider stores the email once it arrives.

Your data can be handled outside Indonesia.

Web3Forms says in its FAQ that it runs its operations from the US-East region, and that its parent company is registered in Kerala, India. A form sent from Indonesia therefore leaves Indonesia.

Cloudflare serves the site through its global network, so a request may be handled in another country.

Web3Forms says in its FAQ that its server logs may contain personal information and are deleted every 2 months.

Cloudflare keeps traffic data for a limited period and does not publish a fixed one.

You have the rights below over your personal data. Some of them can be limited where the law allows.

• Get information about who we are, why we need your data and who is accountable for it.
• Correct mistakes in your data.
• See your data and get a copy of it.
• Ask us to stop processing your data, and to delete or destroy it.
• Withdraw consent you have given.
• Object to a decision made only by automated processing that significantly affects you. The site makes no such decisions.
• Ask us to restrict how we process your data.
• Claim compensation if your data is mishandled.
• Receive your data in a usable form and have it sent to another party.

Email your request to hello@hutanrimbafoundation.org. Tell us which right you want to use and which form you sent.

We may ask you to confirm who you are first, so that your data does not reach someone else.

Pages are served over HTTPS. The site's security settings stop other sites from showing it inside a frame, and switch off camera, microphone, location, payment and USB access.

The website has no database and keeps no copy of what you send. On our side, a submission exists only as an email in our inbox.

If a breach exposes your personal data, we will notify you as the law requires.

The site's own code sets no cookies and stores nothing in your browser's storage.

It runs no analytics, and every file a page loads comes from this site's own domain.

Cloudflare, our host, may set its own cookies when certain security or measurement features are switched on for a domain.

If we add analytics later, we will update this policy at the same time.

If a child's personal data is processed, the law requires consent from a parent or guardian.

The forms have no file upload and do not ask for ID numbers, bank details, health information or information about children.

The message boxes are free text, so they accept whatever you type. Please do not include ID numbers, bank details, health information or information about children.

This policy is in English, like the rest of the site.

When we change this policy, we post the new version on this page and update the date at the top.