Privacy rights and jurisdiction-specific expectations

EU and EEA privacy rights

• • The right to know whether personal data is being processed
• • The right to request access to personal data and related information
• • The right to request correction, deletion, or restriction where applicable
• • The right to object to processing based on legitimate interests in some cases
• • The right to complain to a supervisory authority in the relevant jurisdiction

U.S. state privacy expectations

State privacy laws in places such as California, Colorado, Connecticut, Utah, Virginia, Texas, Oregon, and others vary in scope, but they commonly focus on rights to know, access, delete, correct, and opt out of certain sales, sharing, or targeted advertising practices.

IndoPac does not currently sell personal information, share it for cross-context behavioral advertising, or run targeted advertising audiences. If those practices are introduced later, the site's disclosures and controls should expand before launch.

Appeals, children, and sensitive data

If IndoPac later launches a formal request workflow, it should also publish a clear appeals path where applicable under U.S. state privacy laws. That infrastructure does not exist on the public site today because the current processing model is narrow.

The site is not directed to children under 13 and is not designed to knowingly collect sensitive reader profiles, account histories, or payment records.

Operational follow-through

This page describes the rights model IndoPac should honor, but it does not yet create a self-service account portal or automated request system. Before the site adds accounts, submissions, subscriptions, or non-essential tracking, IndoPac should publish a dedicated operational contact method for privacy and accessibility requests.

Until the data posture expands, IndoPac's best compliance strategy is to keep collection narrow, avoid unnecessary tracking, and update these notices before changing that posture.