Privacy Policy | Male Vitalis

Effective 5 November 2026

1. Scope and editorial contact

This policy explains how Male Vitalis handles information in connection with malevitalis.info, an English-language men's wellness publication serving readers in Indonesia. It covers ordinary page visits, browser preferences, and messages sent through the contact form. The site does not provide user accounts, paid subscriptions, a shop, or a patient portal. Questions about this policy can be sent to [email protected]. Postal correspondence is addressed to Block A, Candi Rejo, Sibiru-biru District, Deli Serdang Regency, North Sumatra 20358, Indonesia. The telephone contact is +62 811 6320 107. These channels are for editorial correspondence.

2. Information you choose to submit

The contact form asks for a name, an email address, a subject, and a message. It also requires an acknowledgment that these details will be used to handle the enquiry. The form does not request medical records, identification documents, payment details, or attachments. Please keep your message focused on an editorial question, correction, or site issue, and avoid including another person's private information. Information typed into the form is sent only when you submit it; the application does not record keystrokes or save an unfinished draft. Direct email and telephone communications are handled through their respective communication services.

3. Technical information and form protection

A request to the website necessarily passes network information, including an IP address and browser request details, to the hosting service. The application does not create a visitor profile from those requests. Hosting and network providers may retain access or security logs under their own operational settings. The contact page starts a short-lived PHP session to protect the form against cross-site request forgery and to limit rapid repeat submissions. The session contains a random form token and submission timing, rather than a copy of the message. A hidden field also helps identify automated form abuse.

4. Purposes and grounds for processing

Contact details are processed to receive, assess, and respond to the message you choose to send. The form acknowledgment records your choice to submit those details for that purpose; it is not agreement to marketing. Technical processing supports delivery of requested pages, prevention of abuse, and maintenance of the service. Where a legal obligation requires retention or disclosure, that obligation may provide a separate basis. Personal information is not used for automated decisions with legal or similarly significant effects. The publication does not sell contact lists, build advertising audiences, or infer a health profile from article visits.

5. Browser storage and optional resources

The preference interface stores a first-party localStorage entry named mv_consent. It contains the selected consent mode and the time of the choice, and the site treats it as expired after 180 days. Functional mode uses local fallback fonts. Partial and Accept All enable the specified Google Fonts stylesheet. No analytics, advertising pixels, social widgets, or marketing cookies are installed by this application. Core presentation styles are served from locally hosted stylesheets, independent of optional font consent. The Cookie Policy explains these resources, session storage, retention, and how to change your preference through the footer controls.

6. Message delivery and service providers

On a valid submission, the server passes the message to its configured PHP mail transport for [email protected]. A successful response means that transport accepted the message for delivery; it does not establish that the message reached an inbox or was read. The application does not maintain a separate database of enquiries. Hosting, mail transport, and mailbox providers may process message contents and necessary delivery metadata to perform their services. Access should be limited to people handling the correspondence or maintaining the service. The application does not automatically forward enquiries to advertisers, clinics, supplement sellers, or unrelated mailing lists.

7. Retention and deletion

Browser preference data expires in the application after 180 days and can be removed earlier by clearing site storage. The contact session is reset after 30 minutes of inactivity; its cookie is a browser-session cookie. Server session cleanup also depends on the host's session garbage-collection settings. Submitted messages remain in the editorial mailbox while needed to resolve the enquiry and should be reviewed for deletion within 12 months after resolution, unless a dispute or legal duty requires longer retention. This mailbox review is an operational process, not an automatic deletion feature in the website. Provider backups and security logs follow the provider's applicable retention arrangements.

8. International handling and external services

A visitor in Indonesia may connect to infrastructure located outside Indonesia. The actual hosting, mail, and content-delivery providers determine where relevant network requests and messages are processed. Google Fonts requests, when enabled, are made directly by the browser to Google's font services. Those requests disclose the technical connection information needed by the receiving font service. This policy does not represent that all processing remains in North Sumatra. Any operator-directed international transfer of personal information must be assessed under applicable Indonesian data-protection requirements and appropriate contractual or other lawful safeguards before it is arranged.

9. Requests concerning your information

You may contact the editorial address to request information about personal data held in correspondence, access or correction, withdrawal of consent where relevant, or deletion where applicable. Describe the message or period concerned so the request can be located without asking for unnecessary additional information. Reasonable verification may be needed before disclosing correspondence to prevent release to the wrong person. Applicable rights and exceptions arise under Indonesian law, including Law No. 27 of 2022 on Personal Data Protection. Withdrawal does not undo processing already lawfully completed, and a justified retention obligation may limit immediate deletion. You may also pursue available complaint or legal channels.

10. Security, children, and policy changes

The form validates input, checks a session token, and limits repeated submissions within a session. HTTPS should protect information in transit on the live domain. These measures do not make internet communication risk-free. Please report suspected misuse through the contact address without sending passwords or confidential evidence unnecessarily. The publication is intended for adults and does not intentionally solicit information from children. If a child's information has been submitted, contact us to request review and removal where appropriate. Changes to the site's processing practices must be reflected in this policy; optional new processing requires appropriate notice and choice before activation. The effective date shown on this page identifies this policy edition.