This privacy policy explains how OnGossase Academy collects, uses, discloses, retains, and deletes personal data when you use ongossase.boutique. It is written as a data lifecycle notice so you can see what information is handled, why it is handled, and how long it is kept.
When you use the contact form or otherwise communicate with OnGossase Academy, we may process your name, email address, phone number if you provide it, inquiry message, and service preferences. We also process limited technical data such as server request metadata and browser and device information to support secure delivery and basic site operation.
We receive personal data from you when you submit a form, send a message, or choose service preferences. Technical data is generated automatically when you access the website, including information needed for request handling, security monitoring, and technical delivery.
The website uses essential cookies for basic site operation and privacy preference cookies to store your selected settings. No analytics cookies or marketing or advertising cookies are confirmed as active on this site.
We use essential cookies to keep the site operating and privacy preference cookies to remember your choices. Because tracking is not enabled, we do not rely on analytics or marketing cookies. You can manage cookies through your browser controls and, where available, through site preference settings, although disabling essential cookies may affect core functions.
We use personal data to respond to contact form submissions, manage service inquiries, maintain website security, deliver the site technically, and record privacy preferences. Technical data is used to detect errors, prevent abuse, and keep the website functioning reliably. We do not state any additional use beyond the purposes described in this policy.
We may share personal data with service providers that support website hosting, technical delivery, security, and contact handling. These recipients are expected to process data only for the services they provide to us and to apply appropriate confidentiality and security measures. We do not confirm any marketing or advertising sharing based on the current site configuration.
We may disclose personal data when required to comply with law, a valid legal process, or a binding request from a competent authority. We may also disclose information where necessary to protect the security of the website, prevent misuse, or establish, exercise, or defend legal claims.
Privacy rights lifecycle
Depending on your location and the processing involved, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction or portability where those rights apply. We assess each request against the legal basis for processing and any retention or disclosure duties that may limit the outcome.
To exercise a privacy right, submit a request through one of the contact channels listed in this policy and provide enough detail for us to identify the relevant data. We may need to verify your identity and clarify the request before taking action. If a request cannot be fully granted, we will explain the reason where the law requires us to do so.
We retain personal data for the period needed to respond to your inquiry, maintain the website, meet security and recordkeeping needs, and satisfy any applicable legal obligations. When the relevant purpose ends, we delete the data or anonymize it where that is appropriate and technically feasible. If deletion is delayed because of a legal or operational need, the data remains protected and is used only for that limited purpose.
If we make material changes to this privacy policy, we will update the published version and use reasonable means to draw attention to the change when appropriate. The revised policy applies from its effective date and replaces earlier versions for future processing.
For GDPR purposes, OnGossase Academy acts as the controller for the personal data described in this policy. We process data on the legal bases that are appropriate to the activity involved, including performance of a service, legitimate interests in operating and securing the website, compliance with legal obligations, and consent where it is required for a specific choice or preference.
Where GDPR applies, it governs our processing of personal data relating to individuals in the European Economic Area.
Where GDPR applies, you may request access, rectification, erasure, restriction, portability, or objection, depending on the legal basis and the nature of the processing. If processing is based on consent, you may withdraw that consent for future processing. We may ask for information needed to verify your identity and to understand the scope of the request before responding.
Use the listed service channels for privacy questions, requests, or complaints about this policy.
