Data Protection

Privacy Policy

How Core Harbor Base collects, safeguards, and processes personal and telemetry data.

Last Updated: August 29, 2026

At Core Harbor Base, we are committed to protecting your privacy and treating all shared business and personal data with the highest standards of confidentiality and security.

This Privacy Policy explains what information we collect when you visit core-harborbase.click, how we handle inquiry submissions, and the safeguards we apply to store analytics shared during client engagements.

1. Data Controller Identification

The designated data controller responsible for personal information processed under this policy is:

  • Entity Name: Core Harbor Base
  • Registered Address: Office 6, 64 Sample Road, Chiang Mai 00000, Thailand
  • Direct Line: +66 52 000 218
  • Privacy Officer Contact: info@core-harborbase.click

2. Information We Collect

We collect information only when provided voluntarily or when necessary to deliver our storefront conversion advisory services:

A. Contact & Inquiry Information

When you submit a diagnostic brief or contact our studio via our website forms, we collect:

  • Full name and business email address.
  • Organization or app title.
  • App Store / Google Play store links.
  • Project notes, conversion questions, and target market preferences.

B. Storefront Diagnostic Telemetry (Client Engagements)

When performing a commissioned audit, clients may grant read-only access or export reports containing:

  • Aggregate App Store Connect / Play Console metrics (impression volume, download counts, conversion ratios, acquisition channels).
  • Note: We never request or store sensitive personal end-user data, financial customer records, or source code.

We collect standard server logs (IP address, browser type, referral headers) and essential cookie records to ensure stable site delivery.

3. Lawful Basis & Purpose of Processing

We process collected information based on:

  1. Contractual Performance & Scoping: To evaluate your application brief, provide accurate service proposals, and execute commissioned audits.
  2. Legitimate Interests: To maintain website security, prevent fraud, and respond to commercial inquiries.
  3. Legal Compliance: To maintain accounting and taxation records under the laws of Thailand.

4. Data Retention Periods

  • Inquiry Submissions: General consultation requests that do not proceed to an active engagement are deleted after twelve (12) months.
  • Client Engagement Telemetry: Store telemetry and audit dossiers are retained securely for twenty-four (24) months after project completion to facilitate follow-up reviews, after which they are permanently purged.
  • Invoicing & Accounting Records: Retained for seven (7) years in compliance with Thai statutory accounting standards.

5. International Data Transfers

As an international consultancy based in Thailand serving global clients, information submitted to us may be processed on secure servers or cloud infrastructure located in Thailand, Singapore, the European Union, or the United States.

All international data transfers are protected with industry-standard encryption protocols (TLS 1.3, AES-256) and strict contractual confidentiality agreements.

6. Your Rights Regarding Your Data

Depending on your jurisdiction (including GDPR and Thailand’s Personal Data Protection Act - PDPA), you possess the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete records.
  • Erasure: Request deletion of your personal records where no statutory retention obligations apply.
  • Restriction & Objection: Object to specific processing activities.
  • Data Portability: Request transfer of your data in a structured, machine-readable format.

To exercise any of these rights, please email our privacy desk at info@core-harborbase.click.

7. Security Measures

We implement multi-layered physical, administrative, and technical safeguards to prevent unauthorized access, alteration, or disclosure of your data. All team workstations utilize encrypted drives, two-factor authentication, and isolated project environments.