Privacy Policy

Introduction and commitment

This Privacy Policy applies to visitors and customers of https://motionflushao.world who interact with Corea supplement information, inquiry forms, and related email correspondence—including when you arrive from paid advertising, where the domain and operator identity should match what was shown in the ad. We describe processing in plain language while referencing the EU General Data Protection Regulation (GDPR) and the Dutch GDPR implementation act (Uitvoeringswet AVG).

We minimise data collection to what is proportionate for operating a compliant food-supplement information service, answering questions, improving website stability, and—only where you consent—using analytics or marketing technologies described separately in the Cookie Policy.

Reading this document together with our Terms and Cookie Policy gives you a complete picture. Nothing here limits mandatory rights that apply to you as a consumer or data subject under national law.

Data controller and contact

The controller responsible for processing is the operator trading as Motionflushao.world, with its principal contact point at Zuidplein 80, 3083 BM Rotterdam, Netherlands. For privacy-specific correspondence, email talk@motionflushao.world and include enough context for us to verify your identity when you exercise GDPR rights.

We do not require you to create an account to read product information. If we introduce accounts or newsletters later, we will update this Policy and obtain consent where consent is the appropriate legal basis.

Categories of personal data

Depending on how you interact with us, we may process the following categories:

• Identity and contact data: name, email address, and any shipping or billing details you supply if you complete a purchase when checkout is available.
• Communication content: free-text messages you send through forms or email, including attachments if you choose to send them.
• Technical data: IP address, approximate location derived from IP, browser type and version, device category, operating system, referral URL, and timestamps from server logs.
• Usage data: aggregated statistics about pages viewed, scroll depth, or events captured by optional analytics tools when you have granted consent.
• Cookie identifiers: as listed in the Cookie Policy, including consent storage keys.

We do not ask for special categories of data (such as health data) through marketing forms. If you voluntarily disclose health information in a message, we will use it only to respond to your inquiry and will not use it for profiling beyond that context without a separate lawful basis.

Purposes and legal bases

Website delivery and security

We process technical and log data to deliver pages over HTTPS, detect abuse, debug errors, and maintain infrastructure integrity. Legal basis: Article 6(1)(f) GDPR (legitimate interests in secure, reliable service).

Handling inquiries and pre-contract steps

When you contact us about Corea, we use your contact details and message content to reply and, where relevant, prepare or perform a contract. Legal bases: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR for ancillary correspondence.

Legal obligations

We may process data to comply with tax, consumer, or regulatory obligations applicable in the Netherlands or other jurisdictions where we sell. Legal basis: Article 6(1)(c) GDPR.

Optional analytics and marketing

Non-essential cookies or pixels load only after you provide consent through our banner or preference centre. Legal basis: Article 6(1)(a) GDPR. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Retention periods

General inquiry emails and form submissions are retained for up to twenty-four months after the last substantive message in a thread unless a longer period is necessary for establishing, exercising, or defending legal claims. Server logs containing IP addresses are typically rotated within ninety days unless retained longer for security investigations.

Financial and accounting records follow statutory retention periods under Dutch law where applicable. Cookie lifetimes are specified in the Cookie Policy. When data is no longer needed, we delete or irreversibly anonymise it.

Recipients and processors

We share personal data with categories of recipients such as hosting providers, email transport services, customer-support tooling, payment processors when transactions occur, and professional advisers bound by confidentiality. Each processor is bound by a written contract meeting Article 28 GDPR requirements.

We do not sell your personal data. If we were to engage in a business transfer, personal data may transfer as part of the assets, subject to continued protection consistent with this Policy.

International transfers

If we transfer personal data outside the European Economic Area, we implement appropriate safeguards such as the European Commission’s standard contractual clauses, an adequacy decision, or another mechanism permitted under Chapter V GDPR. You may request a summary of safeguards by contacting us.

Security measures

We apply TLS encryption for data in transit, access controls for internal systems, separation of production and test environments where feasible, and periodic review of subprocessors. No system is perfectly secure; please protect your own devices and use unique passwords if we ever offer password-protected areas.

Your GDPR rights

Subject to conditions in Articles 15–22 GDPR, you may request access, rectification, erasure, restriction of processing, data portability for data you provided where processing is automated and contract or consent-based, and objection to processing based on legitimate interests. Where processing is consent-based, you may withdraw consent at any time.

You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We encourage you to contact us first so we can resolve concerns quickly.

Automated decision-making

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on you.

Children

Corea marketing is directed at adults. We do not knowingly collect personal data from children without appropriate parental authority. If you believe we have received a child’s data inadvertently, contact us for prompt deletion.

Changes to this Policy

We may update this Privacy Policy to reflect legal, technical, or organisational changes. The “current as of” date at the top adjusts when we publish substantive revisions. Continued use of the website after changes constitutes acceptance where permitted by law; where required, we will obtain fresh consent.

Contact for privacy requests