Korespa Privacy Policy
Last updated: 31 August 2026
1. Introduction
Korespa respects your privacy and is committed to protecting personal information in a transparent, responsible and lawful manner.
This Privacy Policy explains how Korespa collects, uses, stores, shares and protects personal information when you visit or interact with our websites, services, publications and other digital properties.
Korespa operates an international website that may be accessible from many countries. We therefore aim to apply a high standard of privacy protection based primarily on the principles of the European Union General Data Protection Regulation (“EU GDPR”) and United Kingdom data protection legislation.
Where additional or different privacy rights apply in a particular jurisdiction, including certain states of the United States, we will respect those rights where the relevant legislation applies to Korespa and the individual concerned.
This Privacy Policy should be read together with our Cookie Policy and any other privacy notices displayed when particular information is collected.
2. Who We Are
For the purposes of applicable data protection legislation, the organisation responsible for determining how and why personal information is processed is:
Korespa.com
Privacy enquiries:
Email: [privacy@korespa.com]
Website:
Korespa: [www.korespa.com]
Where required by law, details of our representative or Data Protection Officer will also be provided here.
3. Privacy Principles
Korespa seeks to process personal information according to the following principles:
- lawfulness, fairness and transparency;
- purpose limitation;
- data minimisation;
- accuracy;
- storage limitation;
- integrity and confidentiality;
- accountability;
- privacy by design and by default.
We aim to collect only the information reasonably necessary for the purposes described in this Policy.
4. Information We May Collect
Depending on how you interact with Korespa, we may collect the following categories of information.
4.1 Information You Provide Directly
This may include:
- your name;
- email address;
- information submitted through contact forms;
- newsletter subscriptions;
- comments or correspondence;
- competition or survey responses;
- requests submitted to Korespa;
- privacy or data protection requests;
- information supplied when contacting our editorial or administrative teams.
We ask users not to provide unnecessary sensitive personal information.
5. Information Collected Automatically
When you access Korespa, certain technical information may be processed automatically.
This may include:
- IP address;
- approximate geographical location derived from an IP address;
- browser type and version;
- operating system;
- device type;
- language;
- referring website;
- pages visited;
- time and date of access;
- page interaction information;
- advertising identifiers;
- cookie identifiers;
- consent preferences;
- diagnostic and security information.
We may also collect aggregated or statistical information that does not directly identify an individual.
6. Cookies and Similar Technologies
Korespa and authorised service providers may use cookies and similar technologies, including:
- browser cookies;
- local storage;
- pixels;
- tags;
- SDKs where applicable;
- web beacons;
- advertising identifiers;
- measurement technologies;
- fraud-prevention technologies.
These technologies may be used for purposes including:
- providing essential website functionality;
- security;
- fraud detection and prevention;
- remembering user preferences;
- measuring website usage;
- understanding website performance;
- analytics;
- measuring advertising effectiveness;
- displaying advertising;
- personalising advertising where the user has provided the required consent.
More detailed information is provided in our Cookie Policy.
Users can review or change their choices at any time using the Privacy Choices / Manage Cookies option available on Korespa.
7. Advertising
Korespa is partly supported by advertising.
Advertising allows us to make content and services available to users and may involve the use of advertising technology providers.
Our advertising partners may process information such as:
- IP addresses;
- cookie identifiers;
- device identifiers;
- browser information;
- interactions with advertisements;
- approximate location;
- advertising measurement information.
Depending on the user’s jurisdiction and privacy choices, advertisements may be:
Non-personalised advertising
Advertisements may be selected using limited contextual information, such as the content being viewed, general location or basic device information.
Personalised advertising
Where legally permitted and where any required consent has been obtained, advertising providers may use information about previous interactions, interests or activity to select advertising considered more relevant to the user.
Korespa does not require users to consent to personalised advertising in order to access ordinary editorial content unless otherwise clearly stated.
8. Google Advertising
Korespa currently uses, or may use, advertising and related services supplied by Google, which may include services such as Google AdSense or Google Ad Manager.
Google and its advertising partners may use cookies and other technologies in connection with advertising displayed on Korespa.
Google’s use of advertising cookies may enable Google and its partners to display advertisements based on visits to Korespa and, where permitted, visits to other websites or digital services.
Third-party advertising vendors, including Google, may place or read cookies on a user’s browser or use technologies such as IP addresses, pixels, identifiers or web beacons as a result of advertising being served on Korespa.
Users may control personalised advertising through Google’s advertising privacy controls and through Korespa’s consent management system where applicable.
Additional information about how Google processes information collected through websites and applications using Google services is available through Google’s privacy and advertising documentation.
9. Other Advertising Providers
Korespa may work with additional advertising companies, advertising exchanges, measurement providers, technology platforms, demand partners, supply partners or advertising networks in the future.
Where such providers process personal information:
- they will be disclosed where required;
- appropriate contractual arrangements will be used where required;
- consent will be collected where required;
- users will be given appropriate information and controls;
- our Cookie Policy and consent management system will be updated accordingly.
Where an advertising provider participates in an applicable consent framework, the provider may also be displayed directly within our consent management platform.
This structure allows Korespa to introduce, remove or change advertising providers without reducing users’ privacy rights.
10. Consent Management
For jurisdictions in which consent is required for particular advertising, analytics or storage technologies, Korespa uses a consent management mechanism.
Where applicable, users can choose between categories such as:
- Necessary;
- Functional;
- Analytics;
- Advertising;
- Personalised Advertising.
Non-essential technologies that require consent should not be activated before that consent has been obtained.
Users can later withdraw or modify their consent through the Privacy Choices / Manage Cookies function.
Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.
11. European Economic Area, United Kingdom and Switzerland
For users in the European Economic Area, United Kingdom and Switzerland, Korespa applies enhanced privacy controls where required.
These may include:
- obtaining consent before using certain non-essential technologies;
- providing granular privacy choices;
- allowing consent to be withdrawn;
- maintaining records of consent;
- communicating relevant advertising partners and processing purposes;
- limiting personalised advertising where consent has not been obtained.
Where required for Google’s publisher advertising services, Korespa uses a consent management platform compatible with the applicable Google and IAB Transparency and Consent Framework requirements.
12. Legal Bases for Processing — EU and UK
Where the EU GDPR or UK GDPR applies, Korespa processes personal information only where there is an appropriate legal basis.
Depending on the circumstances, this may include:
Consent
For example:
- certain cookies;
- personalised advertising;
- optional analytics;
- newsletters or other communications where consent is required.
Contract
Where processing is necessary to provide a service requested by the individual.
Legal obligation
Where information must be processed to comply with applicable legislation, regulatory requirements, court orders or other legal obligations.
Legitimate interests
Korespa may process information where necessary for legitimate business interests, provided those interests are not overridden by the rights and freedoms of individuals.
Examples may include:
- maintaining website security;
- preventing fraud and abuse;
- maintaining and improving our services;
- protecting Korespa’s legal rights;
- understanding general website performance;
- defending legal claims.
Where consent is legally required, legitimate interests will not be used as a substitute for that consent.
13. Analytics and Website Measurement
Korespa may use analytics services to understand how visitors interact with the website.
Analytics information may help us:
- determine which content is useful;
- measure website performance;
- diagnose technical problems;
- understand traffic trends;
- improve navigation;
- improve editorial content.
Where consent is legally required for particular analytics technologies, those technologies will not be activated until the appropriate consent or other applicable legal condition exists.
Where possible, Korespa seeks to minimise, aggregate or anonymise analytical information.
14. Purposes for Which We Use Personal Information
Personal information may be used to:
- operate Korespa;
- provide requested services;
- respond to communications;
- provide editorial content;
- maintain subscriptions;
- deliver newsletters where requested;
- administer forms;
- prevent fraud and malicious activity;
- maintain cybersecurity;
- analyse website usage;
- improve website performance;
- measure advertising;
- provide advertising;
- personalise advertising where permitted;
- maintain records of consent;
- comply with legal obligations;
- establish, exercise or defend legal claims.
We will not use personal information for materially incompatible purposes without an appropriate legal basis and, where necessary, additional notification or consent.
15. Sharing Personal Information
Korespa does not sell personal information in the ordinary meaning of exchanging personal information directly for money.
We may, however, share information with service providers where necessary to operate the website.
These may include:
- hosting providers;
- content delivery networks;
- security providers;
- analytics providers;
- advertising providers;
- email providers;
- website infrastructure providers;
- consent management providers;
- professional advisers;
- regulatory authorities.
Information may also be disclosed where reasonably necessary to:
- comply with applicable law;
- respond to lawful government or regulatory requests;
- protect Korespa’s rights;
- prevent fraud or cybersecurity incidents;
- protect users or third parties;
- establish or defend legal claims.
16. Advertising and the Meaning of “Sale” or “Sharing” in the United States
Certain United States privacy laws use terms such as “sale”, “share”, “targeted advertising” or “cross-context behavioural advertising” in ways that may include some advertising technology arrangements even where no money is paid directly in exchange for personal information.
Therefore, although Korespa does not sell personal information in the conventional sense, certain advertising activities could legally be considered a “sale” or “sharing” of personal information under particular US state privacy laws.
Where such laws apply to Korespa, eligible users will be provided with any required opt-out rights.
17. United States Privacy Rights
Residents of certain US states may have additional privacy rights under applicable state legislation.
Depending on the applicable legislation and whether it applies to Korespa, these may include rights to:
- know or access personal information;
- request deletion;
- correct inaccurate personal information;
- obtain a portable copy of certain information;
- opt out of sale;
- opt out of sharing;
- opt out of targeted advertising;
- limit certain uses of sensitive personal information;
- opt out of qualifying profiling or automated decision-making;
- appeal certain privacy request decisions;
- exercise privacy rights without unlawful discrimination.
Korespa will honour these rights where the applicable legislation requires us to do so.
18. California Privacy Rights
Where the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), applies to Korespa, California residents may have rights including:
- the right to know what personal information is collected;
- the right to know how that information is used;
- the right to know with whom information is disclosed;
- the right to delete qualifying personal information;
- the right to correct inaccurate information;
- the right to opt out of qualifying sale or sharing;
- the right to limit certain uses of sensitive personal information;
- the right not to receive discriminatory treatment for exercising privacy rights.
Where required, Korespa will recognise legally valid opt-out preference signals, including Global Privacy Control (“GPC”).
Users may exercise applicable choices through our Your Privacy Choices facility.
19. Global Privacy Control
Where required by applicable legislation, Korespa seeks to recognise valid browser-based privacy preference signals such as Global Privacy Control (GPC).
A recognised GPC signal may be treated as a request to opt out of qualifying sale, sharing or targeted advertising for the browser or device from which the signal is received, where applicable.
20. International Data Transfers
Korespa’s website may use service providers located in different countries.
Consequently, personal information may be processed outside the country in which a visitor resides.
Where EU or UK personal information is transferred internationally, Korespa will use an appropriate transfer mechanism where required.
Depending on the circumstances, this may include:
- an adequacy decision;
- UK adequacy regulations;
- Standard Contractual Clauses;
- the UK International Data Transfer Agreement;
- the UK Addendum to Standard Contractual Clauses;
- another legally recognised transfer mechanism.
Where appropriate, additional technical or organisational safeguards may also be applied.
21. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:
- operational requirements;
- security;
- fraud prevention;
- legal obligations;
- accounting requirements;
- resolving disputes;
- enforcing agreements.
Different categories of information may therefore have different retention periods.
When information is no longer required, it will be deleted, anonymised or securely disposed of where reasonably practicable.
22. Data Security
Korespa takes reasonable technical and organisational measures designed to protect personal information against:
- unauthorised access;
- accidental loss;
- unauthorised disclosure;
- alteration;
- misuse;
- destruction.
Measures may include, where appropriate:
- access controls;
- authentication;
- encryption;
- secure communications;
- software updates;
- security monitoring;
- backups;
- vulnerability management;
- restricted administrative access.
No internet-based system can, however, be guaranteed to provide absolute security.
23. Data Breaches
Where Korespa becomes aware of a personal data breach, we will investigate the incident and take appropriate measures.
Where legally required, we will notify the relevant data protection authority and affected individuals within the applicable statutory periods.
24. Children’s Privacy
Korespa is intended for a general audience.
We recognise that children and young people may require additional privacy protection.
Where our services are likely to be accessed by children, Korespa will take the age of users into account when designing data-processing activities and privacy controls.
We do not knowingly seek to collect unnecessary personal information from children.
We do not knowingly use children’s personal information for personalised advertising where doing so would be prohibited by applicable law or platform requirements.
Where age-related consent requirements apply, appropriate safeguards will be used.
Parents, guardians or eligible young people who have concerns about personal information can contact us using the details provided in this Policy.
25. EU and UK Data Protection Rights
Where the EU GDPR or UK GDPR applies, individuals may have rights including:
- right to be informed;
- right of access;
- right to rectification;
- right to erasure;
- right to restrict processing;
- right to data portability;
- right to object;
- right to withdraw consent;
- rights relating to certain automated decision-making and profiling.
These rights are subject to the conditions and exceptions contained in applicable legislation.
Requests can be submitted to:
We may need to verify the identity of the person making the request before releasing or modifying personal information.
26. Privacy Complaints
If you believe Korespa has handled your personal information incorrectly, please contact us first at:
We will investigate privacy complaints in accordance with applicable legislation and our internal privacy procedures.
Where required by UK data protection legislation, we maintain an appropriate procedure for dealing with data protection complaints.
Individuals may also have the right to complain to their national data protection regulator.
For individuals in the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO).
Individuals in the European Economic Area may contact the competent data protection authority in their country.
27. Automated Decision-Making and Profiling
Certain advertising technologies may perform automated processing to select or measure advertisements.
Where such processing constitutes profiling or automated decision-making regulated by applicable legislation, Korespa and/or the relevant advertising provider will provide the legally required information and controls.
Korespa does not currently intend to make decisions producing legal or similarly significant effects about ordinary website visitors solely through automated processing.
28. External Websites
Korespa articles may contain links to third-party websites.
Korespa does not control the privacy practices of external websites and is not responsible for their independent processing activities.
Users should review the privacy policy of the external website before providing personal information.
29. Embedded Content
Korespa may display content supplied or hosted by third parties, such as:
- videos;
- maps;
- social media content;
- multimedia players;
- interactive content.
Third-party embedded services may process technical information or use cookies or similar technologies.
Where such processing requires consent, Korespa will seek to prevent the relevant non-essential technology from loading until the appropriate consent has been obtained.
30. Changes to Advertising Partners
The advertising ecosystem changes over time.
Korespa may therefore:
- add advertising providers;
- remove advertising providers;
- replace advertising platforms;
- change analytics suppliers;
- change consent management providers.
Where such a change materially affects how personal information is processed, we will update this Privacy Policy, our Cookie Policy, our consent management system or other applicable privacy information.
31. Changes to this Privacy Policy
Privacy legislation, technology and Korespa’s services may change.
We may therefore update this Privacy Policy periodically.
When we make material changes, we will update the “Last updated” date and, where legally required, provide additional notification or request renewed consent.
We recommend reviewing this Policy periodically.
32. Contact
Questions about this Privacy Policy or Korespa’s handling of personal information may be sent to:
Korespa Privacy Team
Email: [privacy@korespa.com]
33. Jurisdiction-Specific Information
This Privacy Policy is intended to provide a global description of Korespa’s privacy practices.
Where a law applicable to a particular individual provides additional rights or imposes additional obligations, the applicable law will take precedence over any inconsistent provision of this Policy.
Nothing in this Privacy Policy is intended to remove or restrict privacy rights that cannot legally be waived.