Privacy notice
Updated 10 October 2026
Indokalo Connect is operated by Indokalo AS, Norwegian organisation number 937 822 553, at Nygardsvegen 36, 5419 Fitjar, Norway. Sondre Grimen handles the enquiries.
For questions or requests about your information, email connect@indokalo.com.
What the form collects
We collect the information you choose to send: your name, business email, company or representative organisation, country, sector, enquiry type, requirements or broad business objective, and any timing details. Enquiry types cover supplier searches, commercial opportunities and initial conversations about business sales, acquisitions or mergers. We also record your permission to be contacted, the submission time and a request reference.
Please don’t include sensitive personal information, financial records, bids, confidential documents or contact details for other people. An ownership enquiry can leave the sale target and prospective counterpart unnamed.
How we use it
We use these details to review your enquiry, understand what you need or offer, reply to you and explore a relevant business introduction. We process the enquiry to take steps you have asked for before a possible agreement and to manage your request.
The form includes your permission to contact you about this request. It does not sign you up for a newsletter or ongoing marketing. You can ask us to stop contacting you at any time.
If we contact you in your business role
We may contact a relevant business decision-maker about a specific supplier, project or partnership enquiry. For individually reviewed contacts, we use professional details published by the business itself: name, business email, job role, company, country and the public page where those details appear. We also record the reason the enquiry is relevant and when the details were checked. We do not guess email addresses or buy personal contact lists.
Where applicable electronic-marketing rules permit this, our basis is legitimate interests under GDPR Article 6(1)(f): assessing a relevant business introduction. We assess the purpose, whether contacting that role is necessary, and the person's reasonable expectations before proceeding. A public email address is not treated as consent. Where consent is required, we need an appropriate permission or invitation instead.
Our first message explains the specific purpose, identifies the source of the contact details and links to this notice. Each contact is assessed individually; we do not make decisions with legal or similarly significant effects about you through automated profiling. Your details are not sold or published in a supplier directory.
You can object to direct marketing at any time. Reply STOP or email connect@indokalo.com. We will stop using your details for that purpose. We retain only the minimum suppression record needed to avoid contacting you again.
Who can see your request
Form submissions are stored privately and are available to Sondre through an access-controlled dashboard. Your contact or company details are not passed to a possible buyer, supplier or partner before we discuss that introduction with you.
We use Cloudflare to receive and store the form submission, GitHub Pages to host this website, and our existing email provider, Mailforge, to handle email conversations. These service providers process information as needed to provide their services. Their infrastructure may involve processing outside Norway and the EEA.
A notification alerts Sondre that a new enquiry has arrived. It contains an enquiry type, a request reference and a private dashboard link, not your contact details or message.
How long we keep it
Submissions in the form’s private storage expire after 90 days. If your enquiry develops into a business discussion or agreement, relevant email correspondence and agreement records may be kept separately for as long as needed to handle that relationship and meet applicable record-keeping obligations.
Individually reviewed prospect records also expire from the private contact register after 90 days. A contact review does not subscribe anyone to an ongoing campaign. A record of an objection may be kept longer so the objection continues to be respected. Relevant business correspondence is held separately in the email account.
Basic security and website data
The site has no advertising trackers or analytics added by Indokalo. The form does not save your enquiry in browser storage.
Cloudflare processes technical connection information to receive the request and help protect the form from abuse. Our form service uses a short-lived, protected identifier derived from the connection’s IP address to limit repeated submissions. This counter expires after two hours; our form record does not store the raw IP address. A separate daily submission counter contains no contact details and expires after two days.
Hosting and email providers may keep their own essential technical and security logs.
Your choices and rights
You can ask to see, correct or delete your personal information, request a restriction on its use, object to processing based on legitimate interests, or request data portability where applicable. The right to object to direct marketing is unconditional. You can withdraw permission for further contact without affecting processing already carried out. To make a request, write to connect@indokalo.com. Please don’t send identity documents unless we specifically need to verify a request.
You may also complain to the Norwegian Data Protection Authority, Datatilsynet, or your relevant local data protection authority.