Privacy Policy

Last Updated: 2025.07.25

Laktak ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, in accordance with the General Data Protection Regulation ("GDPR") and California Consumer Privacy Act ("CCPA").

1.Information We Collect

We collect the following categories of personal data:

a. Information You Provide

(Required for service)

Account registration details (e.g., name, email address, password)
Profile information (e.g., profile photo, interests, bio) (Optional — refusal may limit profile visibility)
User-generated content (e.g., posts, comments, media uploads)
Feedback, survey responses, or contact requests (Optional)

b. Automatically Collected Information

Device and browser information
IP address
Usage logs and analytics
Cookies and tracking technologies (see below) We use cookies and similar tracking tools to improve functionality, analytics, and advertising. You can manage cookies via your browser settings or through our [Privacy Preferences Center]. We use tools such as Google Analytics — you may opt out via Google’s opt-out page.

c. Information from Third Parties

Social media logins (if you connect accounts)
Payment providers (e.g., transaction confirmation, not card details)

2.How We Use Your Information

We use your information for the following purposes:

To operate and improve our services (Legal basis: contract fulfillment, legitimate interest)
To personalize user experience and content (Legal basis: legitimate interest)
To communicate with you (e.g., service announcements, updates) (Legal basis: contract fulfillment)
To process transactions and provide customer support (Legal basis: contract fulfillment)
For legal compliance and fraud prevention (Legal basis: legal obligation, legitimate interest)
With your consent, for marketing and promotional communications (Legal basis: consent; you may withdraw at any time)

We may share your personal data with the following categories of third parties:

a. Service Providers

We engage third-party vendors to help provide and maintain our services (e.g., hosting providers like AWS, analytics tools like Google Analytics, payment processors like Stripe). These vendors are contractually obligated to handle your data securely and only for specified purposes.

b. Legal and Regulatory Authorities

We may disclose data if required by law, court order, or legal process, or to defend our legal rights or comply with regulatory requirements.

c. Business Transfers

In case of merger, acquisition, or asset sale, your data may be transferred to a successor entity, subject to this Policy’s terms.

We may share your information with third parties when you give us explicit consent to do so.

e. Advertising Partners (If Applicable)

Where permitted by law and based on your preferences, we may share anonymized or aggregated data with advertising networks to deliver interest-based ads.

4.Your Rights

If you are located in the EU/EEA or California, you have the following rights:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (“right to be forgotten”)
Restriction: Ask us to limit processing of your data
Portability: Receive your data in a structured, machine-readable format
Objection: Object to certain types of processing (e.g., direct marketing)
Withdraw Consent: At any time, for processing based on consent
Non-discrimination: CCPA grants the right not to receive discriminatory treatment when exercising your rights

How to Make a U.S. Privacy Rights Request

Depending on where you reside in the United States, and subject to applicable laws and exceptions, you may have specific rights related to your personal data, such as access, correction, deletion, and the right to opt out of data sales or targeted advertising. You may submit a U.S. Privacy Rights request by contacting us at:

Email: [email protected] Subject Line: “U.S. Privacy Rights Request” We will verify your identity before processing your request and respond within the timeframe required by applicable law (e.g., 30 days for GDPR, 45 days for CCPA).

5.International Data Transfers

Your personal data may be transferred and processed outside your country of residence, including in countries that may not provide the same level of data protection. We ensure such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or where necessary, based on your explicit consent under GDPR Art. 49.

6.Data Retention

We retain personal data only as long as necessary for the purposes stated in this Policy, or as required by law. When no longer needed, data will be securely deleted or anonymized.

7.Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. These include encryption, regular security audits, and employee data protection training. However, no internet transmission is completely secure.

8.Children’s Privacy

Our services are not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. We use self-declaration and, where necessary, age-gate mechanisms to help prevent underage registration. If we become aware of such data, we will delete it.

9.Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via our website or app. Continued use of our services constitutes acceptance of the revised Policy.

10.Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: Email: [email protected]

Thank you for trusting Laktak with your information.