ciel – Terms of Service

KORCIEL Privacy Policy

Effective Date: [Insert Date] Last Updated: [Insert Date]

1. Corporate Privacy Policy & Legal Framework for Data Protection

This Privacy Policy (“Policy”) constitutes a legally binding document governing the collection, use, storage, and disclosure of personal data by Korciel (“Company,” “we,” “us,” or “our”) in connection with our digital platforms, websites, mobile applications, and other technology services (collectively, the “Services”). This Policy is intended to inform users, customers, and business partners (collectively “you” or “Data Subjects”) of our firm commitment to data protection, compliance with applicable laws, and the transparency of our privacy practices.

Korciel adheres strictly to all applicable data protection legislation, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other international, federal, state, and local privacy laws that govern the collection and processing of personal information.

1.1 Purpose and Scope of Privacy Practices

The primary purpose of this Policy is to define and formalize Korciel’s responsibilities and obligations with respect to the handling of personal information, and to inform you of your rights and choices regarding your data. This Policy applies to:

All personal data collected directly from users through registration, transactions, communications, and interactions with the Services;
Data obtained automatically via cookies, web beacons, tracking pixels, and other analytics technologies integrated into our digital properties;
Information received from third-party partners, vendors, service providers, or publicly available sources.

This Policy is designed to apply to all Data Subjects, regardless of their geographic location, and reflects Korciel’s commitment to uphold the highest standards of data privacy and security worldwide.

1.2 Legal Bases for Data Collection and Processing

Korciel processes personal data only when a lawful basis exists under applicable law. These bases include, but are not limited to:

Your explicit consent, where you have affirmatively agreed to the collection and use of your personal data for specific purposes;
The necessity to perform or fulfill a contract to which you are a party, such as completing orders, delivering services, or managing subscriptions;
Compliance with a legal obligation imposed on Korciel by governmental authorities or regulatory bodies;
Protection of vital interests, including in emergencies or safety-related matters;
Legitimate interests pursued by Korciel or third parties, provided such interests do not override your fundamental rights and freedoms.

You have the right to withdraw your consent at any time, where consent is the basis of processing, without affecting the lawfulness of processing based on consent prior to withdrawal.

1.3 Categories of Personal Data Collected

The types of personal information Korciel collects may include, but are not limited to:

Identifiers such as full name, contact details (email address, phone number, mailing address), date of birth, government-issued identification numbers;
Payment and billing information, including credit card data and transaction history;
Technical data such as IP address, browser type, operating system, device identifiers, and location data;
Usage and behavioral data collected through cookies, tracking technologies, and interaction logs;
Communication records including customer service inquiries, emails, chat transcripts, and feedback submissions;
Marketing preferences and subscription status.

We limit collection to data necessary to provide, improve, and personalize our Services, and do not knowingly collect information from individuals under the age of 16 without verified parental consent.

1.4 Data Use and Purpose Specification

Your personal data is processed exclusively for legitimate business purposes, including but not limited to:

Facilitating account creation, authentication, and user management;
Processing orders, payments, refunds, and delivery of products or services;
Responding to customer support requests, inquiries, and dispute resolutions;
Personalizing your experience and delivering targeted marketing communications;
Analyzing trends, monitoring usage, and improving platform functionality and security;
Fulfilling legal and regulatory obligations, such as tax reporting and compliance audits;
Preventing fraud, abuse, unauthorized access, and ensuring platform integrity.

Korciel will not use personal data for purposes incompatible with those originally disclosed without prior notification and consent where required by law.

1.5 Data Retention and Storage

Personal information is retained for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law. Retention periods are determined based on:

Duration of our contractual relationship with you;
Statutory and regulatory requirements for record-keeping;
Legitimate business needs to defend legal claims or enforce agreements.

Data is stored securely using advanced encryption, access controls, and physical security measures. Korciel employs industry-standard protocols to prevent unauthorized access, loss, or alteration of personal data.

1.6 Data Sharing and Disclosure

Korciel may share personal information with:

Trusted third-party service providers and partners who perform business functions such as payment processing, fulfillment, customer support, marketing, analytics, and IT services under strict confidentiality agreements;
Legal authorities or governmental agencies when required by law, subpoena, or regulatory investigation;
Potential business buyers or merger partners, subject to confidentiality and data protection obligations;
Affiliates and subsidiaries within the Korciel corporate group, for internal administrative and operational purposes.

Korciel does not sell personal data to third parties for commercial purposes.

1.7 Data Subject Rights

Where applicable law grants you rights regarding your personal data, Korciel is committed to facilitating and respecting those rights, which may include:

Right of access: obtain confirmation whether personal data concerning you is being processed and receive a copy thereof;
Right to rectification: correct inaccurate or incomplete data;
Right to erasure (“right to be forgotten”): request deletion of personal data when no longer necessary or when processing is unlawful;
Right to restriction of processing: limit the use of your personal data in certain circumstances;
Right to data portability: receive your data in a structured, commonly used format for transfer to another controller;
Right to object: oppose processing based on legitimate interests or direct marketing purposes;
Rights related to automated decision-making and profiling.

Requests can be submitted via our designated privacy contact channels and will be handled promptly and in accordance with applicable timelines.

1.8 International Data Transfers

Korciel operates globally, and personal data may be transferred to, processed, or stored in countries outside your residence, including jurisdictions that may not provide the same level of data protection as your country of origin.

To safeguard your information, Korciel implements appropriate data transfer mechanisms, such as standard contractual clauses, binding corporate rules, or other lawful safeguards approved by regulatory authorities.

1.9 Policy Changes and Updates

Korciel reserves the right to modify or update this Privacy Policy at any time to reflect changes in legal requirements, business practices, or technological advances. Revised versions will be posted on the Platform with updated effective dates.

Continued use of the Services after such modifications constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed of your rights and our obligations.