Legal
Privacy Policy
Last updated: 9 July 2026
This Privacy Policy explains how coRefined (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit corefined.com (the “Site”) and use our contact and newsletter forms. We keep data collection to the minimum needed to respond to you and run the Site securely.
1. Data we collect
We only collect data you choose to give us, plus a small amount of technical data needed to operate and protect the Site.
Information you provide
- Contact form: your name, email address, and any project details you write in the message.
- Newsletter form: your email address.
Information collected automatically
- Technical data with form submissions: when you submit a form, we store your IP address, your browser’s user-agent string, and a timestamp. This is used to prevent spam and abuse and to keep a record of the request.
- Rate-limiting: your IP address is processed temporarily to enforce request limits that protect the Site from abuse.
We do not use advertising trackers or third-party analytics, and we do not build marketing profiles about you.
2. Cookies & local storage
The Site does not use tracking cookies. We store a single preference in your browser’s local storage, “f404-theme”, to remember whether you chose light or dark mode. It stays on your device, is never sent to our servers, and you can clear it at any time through your browser settings.
3. How we use your data
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to your enquiry | Name, email, message | Steps taken at your request / legitimate interest |
| Sending newsletters you subscribed to | Email address | Consent |
| Preventing spam & abuse | IP address, user-agent, timestamp | Legitimate interest |
| Remembering your theme choice | Local-storage preference | Strictly necessary / your choice |
4. How your data is stored & shared
Form submissions are recorded on our server and a notification is emailed to our team so we can follow up. We do not sell your personal data or share it for third-party marketing. We rely on a small number of service providers who process data only to help us operate the Site:
- Email delivery (SMTP): our email provider transmits the notification of your enquiry or subscription to us.
- Google Fonts & Tailwind CDN: the Site loads fonts and styling from these content-delivery networks. When your browser requests those files, the provider may receive your IP address and technical request data. We do not control their processing; please review their own privacy notices.
We may also disclose data where required by law or to protect our rights, safety, or property.
5. How long we keep it
We keep enquiry and subscription records for as long as needed to respond to you and for our legitimate business records, and no longer than necessary for those purposes. You can ask us to delete your data at any time (see below). Newsletter data is kept until you unsubscribe.
6. Your rights
Depending on your location, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data (“right to be forgotten”);
- object to or restrict certain processing;
- request a copy of your data in a portable format;
- withdraw consent to marketing at any time.
To exercise any of these rights, email us at corefined.agency@gmail.com. You also have the right to lodge a complaint with your local data-protection authority.
7. Unsubscribing
You can opt out of the newsletter at any time using the unsubscribe link in any email we send, or by contacting us directly. We will remove your email from our mailing list promptly.
8. Security
We apply appropriate technical measures to protect your data, including transport encryption (HTTPS), input validation and sanitisation, rate limiting, and OWASP-aligned security headers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information.
9. Children’s privacy
The Services are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, provide a more prominent notice. Please review this page periodically.
11. Contact us
For any questions about this policy or your data, email corefined.agency@gmail.com or use our contact form. See also our Terms of Service.