Legal
Privacy Policy
How KZA Certification collects, uses, stores, and protects your personal data.
Last updated: Initial Draft
1. Data We Collect
Account data: name, email, phone number, and login credentials.
Submission data: card information, card photos, shipping address, and tracking numbers.
Limited technical data such as IP address and browser information for security and abuse prevention purposes.
2. How We Use Data
Processing submissions, issuing certificates, handling payments, sending status notifications, and handling customer support inquiries.
Improving service quality based on aggregate trends (e.g., average time between stages) without identifying individuals.
3. Legal Basis for Processing
Processing is based on the execution of the service agreement, the consent you provide (e.g., when contacting us), and the legitimate interest in operating the platform securely.
4. Sharing Data with Third Parties
Data may be shared with cloud infrastructure providers, payment providers, and shipping couriers as needed for operations. Provider details and processing regions will be announced in the final version.
KZA does not sell your personal data to third parties.
5. Storage & Retention
Certificate-related data is stored to support long-term public verification. Account data and submission history are stored as long as the account is active and for mandatory retention periods.
Specific retention periods and deletion mechanisms will be finalized with the legal team.
6. Security
We implement role-based access controls, audit logging for sensitive actions, encryption in transit, and separation of duties between grading, encapsulation, quality control, and finance staff.
7. Your Rights
You can request access, correction, or deletion of your personal data by contacting the customer support team. Some data may remain stored to fulfill legal obligations or maintain certificate integrity.
8. Cookies
We use functional cookies to maintain login sessions and preferences. The use of analytical or marketing cookies will be explicitly informed before being enabled.
9. Policy Changes
This policy may be updated from time to time. Material changes will be informed via email or in-app notifications.
10. Contact
For privacy-related questions, please contact us through the contact page. Data Protection Officer contact (if any) will be listed in the final version.