Legal

Privacy & Cookie Policy

What personal data we collect when you shop with Korrex, why we collect it, who we share it with, which cookies we set, and the choices you have. Written to apply wherever in the world you are.

01Who is responsible for your data

Korrex is operated by Forclick Limited, which is the data controller for the personal data described in this policy. Our full company registration number and registered address are set out in the panel at the end of this page.

For any privacy matter, email help@shopkorrex.com.

02What we collect

We do not intentionally collect sensitive categories of data such as health, biometric, political or religious information. Please do not send us such information.

03How we collect it

• Directly from you — when you place an order, create an account, subscribe to emails, leave a review or contact support.
• Automatically — through cookies and similar technologies when you browse the Site, as described from section 14 onwards.
• From third parties — payment providers confirming a transaction, carriers updating a delivery, fraud-prevention services, and advertising or analytics platforms where you have consented.

04Why we use it, and our legal basis

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms. You can object at any time — see section 9.

05Who we share it with

We share personal data only with parties that need it to help us run the store, and only to the extent necessary. These include:

• E-commerce and hosting providers that run the Site and store order data;
• Payment providers that process transactions and screen for fraud;
• Carriers, fulfilment partners and customs agents that pick, pack, ship and clear your order;
• Email, SMS and review platforms that send our messages and collect feedback;
• Analytics and advertising partners, where you have consented to those cookies;
• Professional advisers such as accountants and lawyers, and authorities where we are legally required to disclose.

If our business is sold, merged or reorganised, personal data may transfer to the acquiring party, which will remain bound by this policy or an equivalent one.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising in the sense of applicable US state privacy laws.

06International transfers

We operate internationally, and our service providers are located in several countries, including the European Economic Area, the United Kingdom, the United States and Hong Kong. This means your personal data may be transferred to and processed outside the country where you live.

When we transfer data from the EEA or the UK to a country without an adequacy decision, we rely on appropriate safeguards — normally the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum — together with additional technical and organisational measures. You can request a copy of the safeguards we use by emailing us.

07How long we keep it

When data is no longer needed, we delete it or anonymise it so it can no longer be linked to you.

08How we protect it

We use encryption in transit (TLS), access controls, and vetted providers with their own security programmes. Access to personal data inside our business is limited to people who need it to do their job.

No online service can be completely secure. If a breach occurs that is likely to pose a risk to your rights, we will notify you and the relevant supervisory authority as required by law.

09Your rights

Depending on where you live, you may have the right to:

• Access — get a copy of the personal data we hold about you;
• Rectification — have inaccurate or incomplete data corrected;
• Erasure — ask us to delete data we no longer need;
• Restriction — ask us to pause processing while a dispute is resolved;
• Portability — receive your data in a machine-readable format, or have it sent to another provider;
• Objection — object to processing based on legitimate interests, and to direct marketing at any time;
• Withdraw consent — at any time, without affecting processing that already took place;
• Non-discrimination — we will not give you a worse price or service because you exercised a privacy right.

To exercise any of these, email help@shopkorrex.com. We respond within 30 days, and will tell you if we need longer. We may ask you to confirm your identity before we act, to make sure we do not disclose your data to someone else. You may use an authorised agent where the law allows.

10Marketing and how to opt out

If you have subscribed, we send occasional emails or messages about new products, offers and order-related tips. Every marketing message contains an unsubscribe link, and you can also reply to any of them or email us to be removed.

Opting out of marketing does not stop transactional messages such as order confirmations, shipping updates, subscription reminders and refund notices, which we need to send to fulfil your order.

11Automated decisions and profiling

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. We do use automated tools for fraud screening; if an order is declined on that basis you can contact us for a human review.

12Children

The Site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

13Region-specific information

European Economic Area and United Kingdom

Where the GDPR or UK GDPR applies, Forclick Limited acts as controller and the legal bases in section 4 apply. You have the right to lodge a complaint with your national data protection authority.

United States

Residents of states with comprehensive privacy laws, including California, may request disclosure of the categories and specific pieces of personal information collected, deletion, correction, and to opt out of sale or sharing. As stated above, we do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.

Other regions

Where local privacy law gives you rights beyond those described here, those rights apply and we will honour them.

14What cookies are and why we use them

A cookie is a small text file that a website stores on your device. It lets the site remember things between page loads and between visits — what is in your basket, which language you chose, whether you are signed in. Cookies cannot run programs or carry viruses.

We use them to:

• keep the shop working — baskets, checkout, sign-in and security;
• remember your preferences, such as currency, language and region;
• understand how the store is used so we can improve it;
• measure whether our marketing works, and show relevant ads, where you have consented.

15The cookie categories we use

Because our providers update their own cookies from time to time, this list describes categories rather than fixing an exact set of names. The consent banner on the Site always shows the current, live inventory for your session.

16First-party and third-party cookies

First-party cookies are set by Korrex itself and cover the core shop functions.

Third-party cookies are set by services we rely on — our e-commerce platform, payment providers, analytics tools, email and review platforms, and advertising networks. Those providers process the data under their own privacy policies, and we only allow non-essential ones to load where you have consented.

17Similar technologies

• Pixels and tracking beacons — tiny images in pages or emails that confirm a page was viewed or a message opened;
• Local storage — browser storage used to hold preferences and basket contents;
• Software development kits — code from partners that supports features such as chat or reviews.

Wherever this policy says “cookies”, it covers these technologies too.

18How long cookies last

Session cookies are deleted when you close your browser. Persistent cookies stay until they expire or you delete them — typically between 30 days and 24 months, depending on their purpose. Analytics and advertising cookies rarely last longer than 24 months.

19Managing your cookie choices

The first time you visit, a banner lets you accept all cookies, reject all non-essential cookies, or choose category by category. Your choice is stored and applied to future visits.

You can change it at any time through the cookie settings link in the footer of the Site, or by clearing cookies in your browser so the banner appears again. Withdrawing consent does not undo processing that already took place lawfully before you withdrew it.

20Blocking cookies in your browser

Every major browser lets you block or delete cookies in its privacy or security settings, usually under a name like “Cookies and site data”. You can also browse in a private or incognito window, which discards cookies when you close it.

Please note that blocking strictly necessary cookies will break parts of the store — in particular the basket and the checkout.

21Opt-out preference signals

Some browsers and extensions send a Global Privacy Control or similar opt-out signal. Where applicable law requires us to honour such a signal, we treat it as a request to disable non-essential cookies for that browser.

22Changes to this policy

We update this policy when our practices, the tools we use, or the law change. The date at the top always shows the current version. If a change is significant, we will tell you by email or with a notice on the Site before it takes effect.

23Contact and complaints

If you have a question about this policy, want to exercise a right, or want to know exactly what is running on your session, email us at help@shopkorrex.com. If you are not satisfied with our answer, you may complain to the data protection authority in your country — but we would appreciate the chance to put it right first.