Privacy
Policy.

This Privacy Policy describes how KALYRA — the Kalimantan Alliance for Land Yield Restoration and Adaptation, also known as Muvun Balan — collects, uses, stores, and protects personal information when you visit projectkalyra.com or contact us through our website.

It applies to all Users in Indonesia and internationally. By using the Site, you consent to the practices described here. This policy should be read alongside our Terms & Conditions.

We aim to collect only the information necessary to respond to your enquiries and operate the Site.

Information you provide directly. When you submit our contact form, we may collect:

• Your name and email address
• Your organisation and country (optional)
• The nature of your interest (e.g. carbon credits, partnership)
• The contents of your message

Information collected automatically. When you browse the Site, we may collect:

• Technical data such as IP address, browser type, device type, and referring pages
• Usage data such as pages visited, time on page, and approximate location (country/region)
• Aggregate analytics to help us understand how the Site is used

Our contact form is protected by Google reCAPTCHA v3, which may collect telemetry about your interaction to distinguish humans from automated bots. See the “Third-Party Services” section below.

We use the personal information we collect for the following purposes:

• To respond to your enquiries and evaluate potential partnerships or collaboration
• To provide information about KALYRA, our carbon ecosystem, and related opportunities
• To operate, maintain, and improve the Site and its content
• To monitor and protect the security of the Site and our contact-form backend
• To detect, prevent, and address fraud, abuse, or technical issues
• To comply with legal obligations and applicable Indonesian law

We do not use your information to make automated decisions that produce legal or similarly significant effects on you.

Where the General Data Protection Regulation (GDPR) or similar laws apply, we process your personal data on the following legal bases:

• Consent — when you voluntarily submit the contact form or enable optional analytics.
• Legitimate interests — to respond to enquiries, maintain site security, and operate our project.
• Legal obligation — where we are required to retain or disclose data under Indonesian law.

You may withdraw your consent at any time by contacting us using the details at the end of this policy.

The Site uses only minimal, essential cookies required for it to function. Where we enable analytics (for example, Google Analytics 4), it is used in an aggregated, anonymised form to help us understand visitor behaviour and improve the Site.

You can control or delete cookies through your browser settings. Disabling cookies may affect some features of the Site, but you will still be able to browse our content and use the contact form.

We rely on trusted third-party services to operate the Site and deliver your enquiries securely. These providers may process limited data on our behalf:

• Google reCAPTCHA v3 — used to protect our contact form from spam and abuse.
• Email & SMTP providers — used to deliver your enquiry to our team.
• Hosting & infrastructure providers — used to host and serve the Site.

These services operate under their own privacy policies, which we encourage you to review. We do not sell your personal information to any third party.

KALYRA does not sell, rent, or trade your personal information. We may share data only:

• With service providers who process data on our behalf (as described above), under appropriate confidentiality obligations.
• When required by law, regulation, or lawful request from public authorities.
• In connection with a merger, acquisition, or restructuring of KALYRA, subject to confidentiality safeguards.

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our contact-form backend uses layered protections including CORS restrictions, rate limiting, reCAPTCHA, honeypot and timing checks, input validation, and TLS-encrypted email delivery.

However, no method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we are committed to investigating and responding to any suspected breach in accordance with applicable law.

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to respond to your enquiries, and to meet our legal, accounting, and reporting obligations. Contact-form enquiries are typically retained for the duration of any active conversation and a limited period thereafter, after which they are deleted or anonymised.

Depending on your location, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal information
• Object to or restrict certain processing of your data
• Withdraw consent at any time (without affecting processing already carried out)
• Request a portable copy of your data

To exercise any of these rights, please contact us using the details below. We will respond in accordance with applicable law, generally within 30 days.

KALYRA operates from Indonesia, and your information may be processed on servers located outside your country of residence. By using the Site, you acknowledge that your data may be transferred to and processed in jurisdictions with data protection laws that differ from your own. Where required, we will put appropriate safeguards in place for such transfers.

The Site is not directed at children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we do, we will revise the “Last updated” date at the top of this page.

We encourage you to review this page periodically. Material changes will be communicated through the Site where appropriate.