1. What we collect
We collect your email address, optional preferred name, selected response language and support type, the message you submit, consent records, submission time and payment status. Our hosting and security providers may also process limited technical information such as IP address, browser details and access logs.
Your message may contain information about your mental or emotional condition. This is sensitive personal data. We process it only after you give express consent. Please do not include identification numbers, home addresses, passwords, financial credentials or unnecessary identifying information about other people.
2. Why we use it
We use the information only to receive and understand your message, provide the written response you requested, contact you about that response, process payment, keep the service secure, resolve service issues and comply with applicable law. We do not sell your story or use its content for advertising.
3. Privacy-friendly website measurement
To understand whether people can find and use the service, Ruang Lega keeps aggregate daily counts of page views and service steps, grouped by page, language and broad source such as Google, YouTube, WhatsApp or direct access. Campaign tags in Ruang Lega links may also be counted.
This measurement does not use analytics cookies, create a visitor profile or store full referring URLs. Names, email addresses and private message content are not placed in the analytics records. Because counts are aggregate, they measure interactions rather than unique individuals.
4. Who may process it
Access is limited to the person providing your response and service providers needed to host the website, store submissions, process payments and deliver email. These providers should receive only the information necessary for their role and must be selected with appropriate privacy and security safeguards.
Payments are processed by ToyyibPay. Ruang Lega sends ToyyibPay the payment amount, your email, optional preferred name and a transaction reference. The content of your private message is not sent to ToyyibPay. ToyyibPay separately handles payment information under its own privacy terms.
5. Confidentiality and urgent safety
Ruang Lega is private, but it is not anonymous: your email and payment record may identify you. The service is not monitored continuously. If information reveals a serious and immediate risk of death or significant harm, minimum necessary information may be disclosed where permitted or required by law to protect a person.
6. Retention and security
The operating policy is to delete the message and direct identifiers within 90 days after the response is sent, unless a longer period is required for a dispute, safeguarding concern or legal obligation. Payment and accounting records may be kept separately for the period required by law. Reasonable access controls, encryption, backups and service-provider safeguards will be used.
7. Your choices and rights
You may ask whether your information is being processed, request access or correction, withdraw consent, object to direct marketing, or request deletion where applicable. Withdrawing consent before a reply may prevent us from completing the service.
8. Contact
For access, correction, deletion, consent withdrawal or privacy questions, email hello@ruanglega.org.