Privacy Policy

Effective Date: June 22, 2026 Last Updated: June 22, 2026

This Privacy Policy explains how Eleat ("Eleat," "we," "our," or "us") collects, uses, stores, discloses, and protects personal data when you access our website, place an order, contact us, or otherwise use our services (collectively, the "Services").

By using our Services, you acknowledge that your personal data will be handled as described in this Privacy Policy.

1. Who We Are

Eleat is a food and beverage brand offering ready-to-eat meals and frozen foods — such as macaroni béchamel, garlic bread, and dirty bun — for personal consumption and for resale through partners and resellers. We take orders through direct and third-party channels, including online delivery platforms and messaging channels such as WhatsApp.

If you have any questions about this Privacy Policy or our data practices, please contact us using the details at the end of this Policy.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

2.1 Information You Provide Directly

This may include:

• full name;
• phone number;
• email address;
• delivery address or pickup details;
• order details and preferences;
• payment confirmation details (for example, transfer proof where relevant);
• messages, questions, complaints, reviews, and support communications;
• dietary notes, allergy information, or special instructions you voluntarily provide.

2.2 Transaction and Order Information

This may include:

• products ordered;
• order date and time;
• amount paid;
• discounts or promotions used;
• delivery method;
• order status;
• refund, replacement, or complaint history.

2.3 Technical and Usage Information

If you use our website or online services, we may collect certain technical information such as:

• IP address;
• browser type;
• device information;
• pages viewed;
• date/time of access;
• referring links; and
• cookie or analytics data.

2.4 Information from Third Parties

We may receive personal data from third parties such as:

• food delivery or ordering service providers;
• messaging platforms;
• analytics providers;
• advertising platforms; or
• business partners.

The personal data we receive depends on the third party and your settings or interactions with them.

3. How We Use Personal Data

We may use personal data for the following purposes:

3.1 To Provide and Fulfill Orders

Including to:

• process and manage orders;
• confirm, prepare, and deliver products;
• communicate about order status;
• provide customer support;
• handle refunds, replacements, and complaints.

3.2 To Operate and Improve Our Business

Including to:

• manage our menu, operations, and customer experience;
• monitor demand and order patterns;
• improve product quality, packaging, and service;
• maintain website performance, security, and functionality.

3.3 To Process Payments and Prevent Fraud

Including to:

• verify transactions;
• detect suspicious activity;
• maintain records for accounting and compliance purposes.

3.4 To Communicate With You

Including to:

• respond to inquiries;
• send service updates and support messages;
• send marketing or promotional communications if you have opted in or where permitted by law.

3.5 To Comply With Legal Obligations

Including to:

• comply with tax, accounting, food safety, and consumer protection obligations;
• respond to lawful requests from regulators, law enforcement, or courts;
• establish, exercise, or defend legal claims.

4. Legal Bases / Grounds for Processing

Where required by applicable law, we process personal data based on one or more of the following grounds:

• to perform a contract or take steps requested by you before entering into a contract (for example, processing your order);
• to comply with legal obligations;
• for our legitimate business interests, such as improving operations, fraud prevention, customer support, and service security;
• based on your consent, where consent is required (for example, certain marketing communications or optional cookies, where applicable).

5. Cookies and Similar Technologies

If you use our website, we may use cookies, pixels, tags, or similar technologies to:

• keep the website functioning properly;
• remember preferences;
• understand traffic and usage patterns;
• measure campaign performance; and
• improve user experience.

You may be able to control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

6. Sharing of Personal Data

We may share personal data with the following categories of recipients where reasonably necessary:

6.1 Service Providers and Vendors

Such as:

• payment processors;
• website hosting providers;
• IT and cloud service providers;
• analytics providers;
• customer support tools;
• delivery or logistics providers;
• marketing and communications tools.

6.2 Ordering and Delivery Platforms

If you place an order through a third-party marketplace or delivery platform, your data may also be processed by that platform under its own privacy policy.

6.3 Professional Advisors and Authorities

We may disclose personal data to:

• accountants, auditors, insurers, lawyers, and other advisors;
• regulators, tax authorities, courts, or law enforcement agencies where required by law or reasonably necessary to protect our rights.

6.4 Business Transfers

If Eleat undergoes a merger, acquisition, restructuring, sale of assets, or similar transaction, personal data may be transferred as part of that transaction, subject to applicable law.

We do not sell your personal data to data brokers.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• providing our Services;
• maintaining business and accounting records;
• resolving disputes;
• enforcing agreements; and
• complying with legal, tax, and regulatory obligations.

Retention periods may vary depending on the type of data and the purpose for which it was collected.

8. Data Security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You are also responsible for protecting your own devices, accounts, and communication channels.

9. Children's Privacy

Our Services are not directed to children under the age required by applicable law to independently provide valid consent for data processing. We do not knowingly collect personal data from children in a manner that requires parental consent without such consent.

If you believe a child has provided us with personal data improperly, please contact us and we will take appropriate steps.

10. Your Rights

Depending on your location and applicable law, you may have rights in relation to your personal data, including the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data, subject to legal or operational limitations;
• object to or request restriction of certain processing;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a relevant authority, where applicable.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding to your request.

11. International Transfers

If we use service providers located outside Indonesia, your personal data may be processed in other jurisdictions. Where applicable, we will take reasonable steps to ensure that such transfers are made in accordance with applicable law and that your data receives an appropriate level of protection.

12. Third-Party Links and Services

Our website, social media pages, or communications may contain links to third-party websites, apps, or services. We are not responsible for the privacy, security, or content practices of those third parties. We encourage you to review their privacy policies before sharing personal data with them.

13. Sensitive Information and Food Preferences

Please do not send us sensitive personal data unless it is necessary for us to assist with your order or request. If you voluntarily provide allergy information, dietary restrictions, or similar details, we will use that information only as reasonably necessary to respond to your request, prepare your order, or support your customer service needs.

However, due to the nature of food preparation, we cannot guarantee an allergen-free environment unless explicitly stated.

14. Marketing Communications

Where permitted by law, we may send you updates, offers, promotions, or news about Eleat. You can opt out of marketing messages at any time by:

• clicking an unsubscribe link where available;
• replying with an opt-out request; or
• contacting us directly.

Even if you opt out of marketing communications, we may still send important service-related messages such as order confirmations, delivery updates, and support communications.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements, or data practices. The updated version will be posted with a revised "Last Updated" date. Your continued use of the Services after the updated version becomes effective indicates your acknowledgment of the updated Policy.

16. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or our handling of personal data, please contact us at:

Eleat (sole proprietorship, Indonesia) Email: visiarch@gmail.com Phone/WhatsApp: +62 823-1404-9419