Privacy policy

Last updated 2 October 2026. Written to be read, not skimmed past.

Who we are

This website (https://thekorestack.com) is operated by KoreStack (“KoreStack”, “we”, “us”). We are the data fiduciary for personal data collected through it. You can reach us about anything in this policy at our contact page.

What we collect

When you fill in the form on our contact page, we collect:

  • your name and your business’s name
  • your email address and phone or WhatsApp number
  • your website or social media handle, if you provide it
  • your industry and approximate monthly online revenue
  • anything you write in the message field

If you email us, call us, or message us on WhatsApp, we receive the details you share in that conversation. Our hosting provider also records standard technical information (such as IP address and browser type) in server logs, used only for security and keeping the site running.

We do not currently use advertising or analytics cookies on this website. If we add them, we will update this policy and ask for your consent where the law requires it.

Why we use it

We use the details you send us only to:

  • respond to your enquiry and schedule a call
  • prepare the audit and proposal you asked for
  • follow up about that enquiry

We do not sell or rent your personal data, and we won’t add you to marketing emails or WhatsApp broadcasts without asking separately.

Your consent

We process this data on the basis of the consent you give when you tick the box on our contact form. You can withdraw that consent at any time by writing to our contact page — withdrawing is as easy as giving it. Withdrawal doesn’t affect anything we did before you withdrew, but we will stop using your data and delete it unless the law requires us to keep it.

Who we share it with

We share personal data only with service providers that process it on our behalf:

  • Web3Forms, which delivers contact-form submissions to our inbox
  • our email and hosting providers

If you become a client, how we handle your business’s and your customers’ data is set out in our engagement agreement. We may also disclose data where required by law or a lawful order.

How long we keep it

We keep enquiry details only as long as we need them for the purpose above. If an enquiry doesn’t lead to an engagement, we delete it within 12 months of our last contact, unless the law requires us to keep it longer.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • get a summary of the personal data we hold about you and how we process it
  • have inaccurate or incomplete data corrected or completed
  • have your data erased once it’s no longer needed for the purpose you consented to
  • withdraw your consent at any time
  • have your grievances addressed by us
  • nominate another person to exercise these rights on your behalf in case of death or incapacity

Questions and grievances

Write to our contact page with “Privacy” in the subject line. We will respond as quickly as we can, and in any case within the time required by law. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Security

We use reasonable technical and organisational safeguards to protect personal data, including encrypted connections (HTTPS) and access limited to the people who need it. If a personal data breach affects you, we will inform you and the Data Protection Board as the law requires.

Children

Our services are for businesses. This website is not intended for anyone under 18, and we don’t knowingly collect their data.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will be highlighted here.