KORETTAGS PRIVACY POLICY

1. Information We Collect

1.1 Information You Provide to Us

• Account information: name, email address, phone number, password, and (for business/team accounts) company name and role.
• Digital card content: job title, company, photo, bio, social links, physical or business address, and any other details you choose to add to your card.
• Payment information: for paid plans and physical product purchases, billing details are collected and processed by our third-party payment processor; Koret Tags does not store full card numbers.
• Communications: information you provide when you contact support, submit the contact form, or otherwise correspond with us.
• Meeting and scheduling information: availability you set, and details of meetings booked through Koret Tags Meetings (participant name, contact details, time, and any notes provided).
• Contacts you save:if you save a contact from someone else's card, we may store that saved contact information in your account.

1.2 Information Collected Automatically

• Usage and analytics data: views, shares, saves, and interactions with your digital card, including approximate timing and, where available, referral source (e.g., QR scan, WhatsApp link, direct link).
• Device and log data: IP address, browser type, device type, operating system, and general location inferred from your IP address.
• Cookies and similar technologies: used to keep you signed in, remember preferences, and understand how the services are used. See Section 6 (Cookies and Tracking) for details.

1.3 Information From Third Parties

• If you sign in using a third-party account (e.g., Google), we receive basic profile information from that provider as permitted by your settings with them.
• If a business/team admin creates a card on your behalf, we receive the information the Admin provides about you.
• If you connect a third-party CRM or integration, we may receive or send data to that platform as configured by you or your organization's Admin.

2. How We Use Your Information

We use the information we collect to:

• Create and operate your account and digital card, and enable sharing and contact-saving features;
• Provide analytics on card views, shares, and saves;
• Enable meeting scheduling and email signature features;
• Process payments and manage subscriptions;
• Provide customer support and respond to inquiries;
• Maintain the security and integrity of the Services, including detecting fraud and abuse;
• Send service-related communications (e.g., account notices, billing receipts) and, where you have opted in, product updates or marketing communications; and
• Comply with legal obligations and enforce our Terms of Service.

3. Legal Bases for Processing

Where applicable data protection law requires a legal basis for processing (such as Nigeria's Data Protection Act 2023 or the EU/UK GDPR), we rely on one or more of the following: your consent; performance of a contract with you; our legitimate interests in operating, securing, and improving the Services (balanced against your rights); and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time as described in Section 9 (Your Privacy Rights).

4. How We Share Your Information

• With people you share your card with. Your digital card is designed to be shared; the information you include on it will be visible to anyone you share it with or to anyone who scans your QR code or NFC tag.
• With your organization's admin.If you use a Koret Tags account created under a business/team plan, your admin may access your card's information and analytics.
• Service providers. We share information with vendors who help us operate the services, such as cloud hosting, payment processing, analytics, and customer support providers, under contractual confidentiality and data protection obligations.
• Integrations you enable. If you or your organization connects a third-party CRM or other integration, relevant data will be shared with that platform according to your configuration.
• Legal and safety reasons. We may disclose information if required by law, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Koret Tags, our users, or the public.
• Business transfers. If Koret Tags is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy.

We do not sell your personal data to third parties for their own marketing purposes.

5. Data Retention

We retain personal data for as long as your account is active or as needed to provide the services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law (for example, billing records) or necessary for legitimate business purposes such as fraud prevention.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand aggregate usage of the Services. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Services.

7. Data Security

We use administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Koret Tags is based in Nigeria and may store or process data using service providers located in other countries. Where we transfer personal data internationally, we take steps intended to ensure the data receives an adequate level of protection consistent with applicable law, such as contractual safeguards with our service providers.

9. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete personal data;
• Request deletion of your personal data;
• Object to or restrict certain processing of your personal data;
• Request a copy of your personal data in a portable format; and
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at contact@korettags.com. We may need to verify your identity before fulfilling your request. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), or the relevant data protection authority in your country, if you believe your rights have been violated.

10. Children's Privacy

The services are not directed to children under 18, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will delete it.

11. Third-Party Links and Services

Your digital card and the services generally may contain links to third-party websites, social media platforms, or services (including WhatsApp and CRM integrations). This policy does not apply to those third parties, and we encourage you to review their privacy practices separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, by email or an in-app notice) before the changes take effect. The "Last Updated" date at the top of this policy indicates when it was last revised.

13. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact:

• Email: contact@korettags.com
• Phone: +234 704 916 0027 (Mon–Fri, 9AM–6PM WAT)
• Address: Lagos, Nigeria
• Data Protection Officer: Adebowale Alabi / +234 704 916 0027