1. Introduction
CoreLinkBase ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect on our website (https://corelinkbase.com) and how we use, store and protect it. This policy applies to business visitors, retail partners and prospective customers who use our website or submit an inquiry form.
2. Data We Collect
- Inquiry form data: shop/company name, email address, delivery state, product of interest, quantity and message - provided voluntarily by you.
- AI chat data: messages you type into the AI assistant, an anonymous session ID, and your selected language.
- Turnstile token: a Cloudflare Turnstile anti-bot token, which is verified and then discarded.
- Aggregated traffic metrics: page views and country-level statistics collected by Cloudflare Web Analytics. No individual user profiles are built.
3. Legal Basis for Processing
We process your personal data on the legal basis of your consent (when you submit a form or use the AI chat) and our legitimate interest in responding to your B2B inquiry. You may withdraw consent at any time by emailing [email protected].
4. Third-Party Services We Use
All third-party services we use are part of the Cloudflare ecosystem. We do not transfer data to advertising networks.
| Service | Provider | Purpose | Data Processed |
|---|---|---|---|
| Cloudflare Web Analytics | Cloudflare, Inc. | Privacy-friendly, cookie-free page-view analytics | Aggregated page views, country (no cookies, no user IDs) |
| Workers AI | Cloudflare, Inc. | Powering the AI chat assistant | Chat messages + anonymous session ID + language |
| D1 Database | Cloudflare, Inc. | Storing inquiry form submissions | Shop name, email, state, product, quantity, message |
| Cloudflare Turnstile | Cloudflare, Inc. | Spam and bot protection on forms | Verification token (verified then discarded) |
Services We Do NOT Use
- No Facebook Pixel / Meta tracking
- No TikTok Pixel / TikTok tracking
- No Google Analytics
- No third-party advertising or remarketing trackers
5. Data Retention
- Inquiry form data: retained for 24 months after the last interaction, then permanently deleted.
- AI chat transcripts: retained for 30 days, then automatically deleted.
- Cloudflare Web Analytics: aggregated statistics retained up to 6 months by Cloudflare.
- Turnstile tokens: not stored - verified and immediately discarded.
6. Your Rights (GDPR / CCPA)
Depending on your location, you may have the following rights under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):
- Access - request a copy of your personal data.
- Rectification - correct inaccurate or incomplete data.
- Erasure - request deletion of your personal data ("right to be forgotten").
- Objection - object to processing based on legitimate interest.
- Portability - receive your data in a structured, machine-readable format.
- Opt-out of sale/sharing - we never sell your data; this right is honored by default.
To exercise any right, email [email protected]. We respond within 30 days.
7. Cookies
Our website does not use tracking cookies. Cloudflare Web Analytics is cookie-free and privacy-first. The only client-side storage we use is a localStorage key (clb_lang) that remembers your language preference; it contains no personal data and can be cleared at any time.
8. Data Security
All data is transmitted over HTTPS/TLS. Inquiry data is stored in Cloudflare D1, protected by Cloudflare access controls. We do not store payment card details - payments are made by bank transfer (T/T) or PayPal, processed outside our systems.
9. Children's Privacy
CoreLinkBase is a B2B platform and is not intended for individuals under 18. We do not knowingly collect data from minors.
10. Contact Us
For privacy questions or to exercise your rights, contact our data protection team:
Email: [email protected]
Subject: Privacy Request
Response: within 30 days (GDPR/CCPA requests) or 24 hours (general inquiries), Mon - Sat.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date. Continued use of the website after changes constitutes acceptance of the updated policy.