Privacy Policy

1. Who we are and what this covers

This page explains how PT Caleo Food Technology handles personal data collected through caleofoodtechnology.com. Caleo Food Technology is part of Sentosa Group, with offices in Indonesia and Singapore listed at the bottom of every page.

It covers this website only. It does not cover correspondence, meetings or contracts that take place outside it.

For anything on this page, write to mysgoffice@sentosa-group.id.

2. What we collect

Data you give us

The inquiry form on our contact page asks for your name, company name, email address and message. Phone number and area of interest are optional. We collect nothing beyond what you type into it.

Data collected automatically

When you submit the form, our server records your IP address and the page you submitted from, and includes them in the inquiry email. If a submission is blocked as automated, the IP address, browser identification and source page are written to a security log.

Stored in your browser

Your language choice (Indonesian or English) is saved in your own browser so the site remembers it on your next visit. It stays on your device and is never sent to us.

We use no advertising cookies and no analytics trackers. We do not build profiles of visitors and we do not track you across other websites.

3. Why we use it, and on what basis

We use what you send us to reply to your inquiry, prepare a quotation or technical proposal, and keep a record of the correspondence.

The basis is your consent, given when you submit the form. You may withdraw it at any time by writing to us; withdrawing does not undo processing that already happened.

We do not sell, rent or trade personal data. We do not add you to a mailing list, and we do not send marketing messages unless you ask for them.

4. Third parties that may see your data

Running this website means some data passes through services we do not own. We list them rather than leave them implied:

• Hostinger — our hosting provider. Its servers hold this website and keep standard access logs.
• Google Fonts — the Poppins typeface loads from Google's servers, so your IP address is visible to Google when a page loads.
• Google Maps — the map on our contact page is embedded from Google. Opening that page makes your IP address and your interaction with the map visible to Google.
• Our email provider — inquiries arrive as email and are stored in that mailbox.

These services operate under their own privacy policies, which we do not control. Beyond them, we share personal data only when the law requires it.

5. How long we keep it

• Inquiry emails — kept while we are in contact with you and afterwards as a business record, unless you ask us to delete them.
• Security log of blocked submissions — IP address and browser identification, kept for up to 90 days, then deleted.
• Anti-spam rate-limit records — held for one hour, then expire automatically.

6. Your rights

Under Indonesian Law No. 27 of 2022 on Personal Data Protection, you may ask us to:

• tell you what personal data of yours we hold, and obtain a copy of it
• correct data that is inaccurate or out of date
• delete your data, where we are not required to keep it
• stop processing it, or withdraw the consent you gave
• object to how it is being used

Write to mysgoffice@sentosa-group.id and we will respond within 30 days. If our answer does not satisfy you, you may raise the matter with the competent Indonesian authority.

7. How we protect it

The site is served over an encrypted connection. The inquiry form is protected against automated submissions and against attempts to inject additional email headers. Access to the inquiry mailbox is limited to the people who handle customer enquiries.

No system is perfectly secure, and we will not claim otherwise. If a breach occurs that puts your data at risk, we will notify you and the authorities as the law requires.

8. Children

This is a business-to-business website for food and beverage manufacturers. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has sent us data, write to us and we will delete it.

9. Changes to this policy

We update this page when the way we handle data changes. The date at the top shows when it was last revised. Material changes will be noted here rather than made quietly.