Hazel Core Analytics Co., Ltd. ("Hazel Core," "we") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit toolkithazelcore.click or engage our reporting services.

1. Data controller

Hazel Core Analytics Co., Ltd.
Nam Soojin, 76 Jungang-ro 4-gil, Bucheon-si, Gyeonggi-do 14000, REP. OF KOREA
Email: info@toolkithazelcore.click
Phone: +82-32-5168-3274

2. Information we collect

Website visitors

  • Contact form submissions: name, email, message content, and optional fields (engagement type, fiscal year, donor count)
  • Technical data: IP address, browser type, pages visited, and referral source (when analytics cookies are accepted)
  • Cookie preferences stored in your browser localStorage

Reporting clients

  • Contact details for designated client representatives
  • Donor records, giving history, bank reconciliation files, and campaign data submitted for report preparation
  • Communication records related to engagements

3. How we use information

  • Respond to inquiries and provide quotes
  • Prepare contracted reporting deliverables
  • Improve website content and usability (analytics, with consent)
  • Comply with legal obligations

We do not sell personal information. We do not use client donor data for marketing to donors or third parties.

4. Legal basis for processing

We process personal data based on: (a) contract performance for reporting engagements; (b) legitimate interest in responding to inquiries and operating our website; (c) consent for non-essential cookies and analytics; and (d) legal compliance where applicable under the Personal Information Protection Act (PIPA) of the Republic of Korea.

5. Data retention

  • Contact form inquiries: 24 months from submission, then deleted
  • Client donor source files: deleted within 90 days of final report delivery unless extended retention is requested in writing
  • Final delivered reports: retained by us for 12 months for revision support, then deleted unless a longer period is contracted
  • Analytics data: 14 months from collection

6. Your rights

Under PIPA and applicable regulations, you may request access to, correction of, deletion of, or suspension of processing of your personal information. Submit requests to info@toolkithazelcore.click. We respond within 10 business days. You may also lodge a complaint with the Personal Information Protection Commission of the Republic of Korea.

7. International transfers

Our primary data storage is located in the Republic of Korea. If we use cloud services with servers outside Korea, we ensure appropriate safeguards including contractual data processing agreements compliant with PIPA requirements. Client donor data is not transferred internationally without prior written notice to the client.

8. Security measures

We use encrypted file transfer for client uploads, access controls limiting data to assigned project staff, and secure deletion procedures at retention period end. No transmission method is completely secure; we encourage clients to avoid sending unnecessary sensitive fields in contact forms.

9. Third-party services

We may use third-party hosting and analytics providers. These providers process data on our instructions. See our Cookie Policy for details on analytics cookies.

10. Changes

We update this policy when our practices change. The "Last updated" date reflects the most recent revision.