Privacy
Policy.

The data controller for personal data processed via this website is:

For all queries related to the processing of personal data, including requests to exercise your rights, please contact the address above in writing or by email.

Eloma collects personal data only when voluntarily submitted by the visitor. The categories of data collected via this website include:

• — Contact form submissions: name, email address, and the content of the message or enquiry.
• — Technical data: IP address, browser type and version, device type, pages visited, and referral source — collected automatically by server logs and analytics tools.
• — Cookie data: preference signals and session identifiers stored in the browser. See the Cookie Policy for full detail.
• — Correspondence data: content of emails or letters sent directly to the Eloma office outside of the website contact form.

Eloma does not request or store sensitive personal data categories such as health records, financial information, or identity documents via this website.

Personal data collected via this website is used for the following purposes:

• — Responding to enquiries submitted through the contact form, including product questions, batch documentation requests, and wholesale correspondence.
• — Maintaining a record of correspondence for internal reference and quality assurance purposes.
• — Analysing website traffic patterns to improve content and navigation structure (using anonymised or aggregated technical data only).
• — Complying with applicable legal obligations under Indonesian law, including data protection obligations under Law Number 27 of 2022 concerning Personal Data Protection.

Eloma does not use personal data for automated decision-making, profiling, or targeted advertising campaigns without explicit prior consent.

Processing of personal data by Eloma rests on the following legal bases:

Eloma does not sell, rent, or trade personal data with third parties for commercial purposes. Limited data sharing occurs only in the following circumstances:

• — Service providers: Website hosting, email infrastructure, and analytics tools operated by third-party providers who are bound by data processing agreements and may not use the data for independent purposes.
• — Legal requirements: Where Eloma is required by law or by a competent authority to disclose personal data, it will do so to the minimum extent necessary and will endeavour to notify the individual where permitted.

All third-party service providers engaged by Eloma are assessed for adequate data protection standards prior to engagement.

Eloma retains personal data for the minimum period necessary for the purpose for which it was collected:

At the end of the applicable retention period, data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

Under applicable Indonesian data protection law, individuals whose personal data is held by Eloma have the following rights:

• — Right of access: To request a copy of the personal data Eloma holds about you.
• — Right to rectification: To request correction of inaccurate or incomplete data.
• — Right to erasure: To request deletion of personal data where retention is no longer justified.
• — Right to object: To object to processing based on legitimate interest.
• — Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact [email protected]. Eloma will respond within 30 calendar days of receipt of a valid request.

This website uses cookies and similar technologies to support its function and to collect anonymous traffic data. A detailed description of the cookies used, their purpose, and the controls available to visitors is provided in the Cookie Policy.

Cookie preferences can be managed or withdrawn at any time using the Cookie Settings option in the website footer, or by adjusting your browser settings directly.

Eloma implements organisational and technical measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• — HTTPS encryption for all data in transit between the visitor's browser and the web server.
• — Access controls restricting internal access to personal data to staff with a documented operational need.
• — Regular review of systems holding personal data and the third-party providers who process it on Eloma's behalf.

While Eloma takes reasonable precautions, no transmission of data over the internet can be guaranteed to be completely secure. In the event of a personal data breach, Eloma will take appropriate steps in accordance with applicable law.

For any question, concern, or request relating to personal data processed by Eloma, please contact:

This Privacy Policy was last revised in January 2026. Eloma reserves the right to amend this document at any time. Material amendments will be noted at the top of this page with a revised date. Continued use of this website following such amendment constitutes acceptance of the revised policy.

Eloma products are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories.