GDPR & Data Protection Policy

Kuranko

Effective Date: 13 October 2026

Last Updated: 13 October 2026

This GDPR and Data Protection Policy explains how Kuranko collects, processes, stores, protects, and manages personal information when users access https://kuranko.com/. We are committed to transparency, responsible data handling, and respect for individual privacy. This Policy outlines our data protection principles, lawful processing practices, security measures, and the rights available to individuals under applicable data protection laws.

1. Introduction

Kuranko is operated by SHINAGIA LTD. and provides a structured decision-support platform designed to help individuals approach important decisions with clarity, evidence, analysis, and confidence.
This Policy explains how personal information is handled when users visit the website, create an account where available, use decision-support features, or communicate with the platform.
We aim to process personal information fairly, lawfully, transparently, and only for legitimate purposes.
This Policy applies to personal information processed through the website and associated services, subject to applicable data protection laws.
It should be read alongside our Privacy Policy, Cookie Policy, and applicable terms of use.
Where a particular law grants individuals additional rights or imposes specific obligations, those requirements will apply to the relevant processing activities.

2. Data Protection Principles

Lawfulness, fairness, and transparency: Personal information will be processed on an appropriate legal basis, fairly, and with clear information about relevant processing activities.
Purpose limitation: Information will be collected for specified, explicit, and legitimate purposes and will not be processed incompatibly with those purposes.
Data minimization: We aim to collect only the personal information reasonably necessary for the intended purpose.
Accuracy: Reasonable steps will be taken to correct or update inaccurate personal information where appropriate.
Storage limitation: Information will not be retained longer than necessary, subject to applicable legal and operational requirements.
Integrity and confidentiality: Appropriate safeguards will be used to protect personal information against unauthorized access, loss, alteration, or disclosure.
Accountability: We seek to maintain appropriate procedures and records to demonstrate compliance with applicable data protection obligations.

3. Personal Information We Collect

Information provided by users: We may collect names, email addresses, account details, contact information, and other details users voluntarily submit through forms or communications.
Decision-related information: Users may provide questions, objectives, assumptions, preferences, constraints, evidence, and contextual information when seeking structured decision support.
Technical information: We may process IP addresses, browser types, device information, operating systems, timestamps, diagnostic records, and other technical information associated with website access.
Communication records: Information included in support requests, privacy enquiries, feedback, and other communications may be retained to address the relevant matter.
Transaction information: Where paid features are available, we may process payment status, transaction references, billing details, and records needed to administer purchases.
Cookie-related information: Cookies and similar technologies may collect information about sessions, preferences, security, and website performance, depending on the technologies implemented and your consent choices.
We aim to limit collection to information relevant to the purposes described in this Policy.

4. Purposes of Data Processing

To provide and maintain website functionality and decision-support features.
To process user-provided information to help structure decisions, compare options, assess evidence, and identify practical next steps.
To administer accounts and authenticate users where account functionality is available.
To respond to enquiries and provide technical or service-related assistance.
To process transactions, verify payments, and maintain appropriate financial records where paid features are offered.
To maintain website security, prevent unauthorised access, investigate misuse, and resolve technical issues.
To evaluate system performance and improve reliability where appropriate.
To comply with applicable legal and regulatory obligations.
To establish, exercise, or defend legal claims when necessary.
Personal information will not be used for purposes incompatible with applicable law or the information provided to users.

5. Lawful Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we will rely on an appropriate lawful basis for each relevant processing activity.
Consent: We may process information with your consent where required, including for certain non-essential cookies or optional processing activities.
Contract: Processing may be necessary to provide a requested service, administer an account, or fulfil contractual obligations.
Legitimate interests: We may process information for legitimate interests such as maintaining security, preventing misuse, and ensuring reliable platform operation, provided those interests do not override your rights and freedoms.
Legal obligations: Processing may be necessary to comply with applicable laws, regulatory requirements, or lawful orders.
Vital interests or public tasks: These bases may apply only where relevant circumstances and legal requirements justify their use.
Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Decision-Support Processing and Human Control

The platform helps users approach decisions systematically by examining relevant questions, options, assumptions, and available evidence.
Information entered into decision-support features may be processed to generate analysis, comparisons, explanations, or suggested next steps.
Depending on the functionality available, certain features may use automated systems or artificial intelligence technologies.
Automated outputs may be incomplete or inaccurate and should be evaluated in the context of the user's circumstances.
The platform is intended to strengthen human judgment, not replace the user's responsibility for making the final decision.
Users should independently verify important information and seek qualified professional advice when decisions involve significant legal, financial, medical, or other high-impact consequences.
Where applicable law provides rights concerning solely automated decisions that produce legal or similarly significant effects, users may exercise those rights through the contact details in this Policy.
We will provide additional information about relevant automated processing where required by law.

7. Data Sharing and Disclosure

Personal information may be shared with service providers that support hosting, infrastructure, security, technical maintenance, payment processing, or customer support, where applicable.
Such providers may process information on our behalf only to the extent necessary for their authorized functions and subject to appropriate safeguards.
Information may be disclosed to legal or professional advisers where reasonably necessary for legitimate legal or operational purposes.
We may disclose information to public authorities where required by applicable law or valid legal process.
Information may be shared when reasonably necessary to investigate suspected fraud, protect individuals, enforce applicable terms, or safeguard the platform.
In a business restructuring, acquisition, or transfer of relevant assets, information may be disclosed where legally permitted and appropriate protections are applied.
We do not sell personal information to third parties as a general business practice.
Where third parties act as independent controllers, their own privacy policies and legal obligations may apply.

8. International Data Transfers

Personal information may be processed or stored outside the country in which a user resides, depending on hosting arrangements and the service providers used.
Where the GDPR or other applicable laws regulate international transfers, we will seek to ensure that transfers comply with those requirements.
Appropriate safeguards may include an adequacy decision, approved contractual clauses, or another legally recognized transfer mechanism.
Information about relevant safeguards may be requested where disclosure is required by law.
We will seek to ensure that international processing arrangements provide an appropriate level of protection for personal information.

9. Data Retention

Personal information will be retained only for as long as reasonably necessary to fulfil the purposes for which it was collected.
Account information may be retained while an account is active and for an appropriate period afterward where necessary.
Decision-related information may be retained for service delivery, continuity, troubleshooting, or other legitimate purposes, subject to applicable requirements.
Support communications may be retained to resolve enquiries, document outcomes, and address disputes.
Transaction records may be retained to comply with accounting, taxation, and other legal obligations.
Technical and security logs may be retained for appropriate periods to investigate errors or protect systems.
Retention periods depend on the type of information, its purpose, legal requirements, and the need to establish or defend legal claims.
When information is no longer required, reasonable steps will be taken to delete, anonymize, or securely dispose of it, subject to legal obligations and technical limitations.

10. Data Security

We seek to implement reasonable technical and organizational measures to protect personal information against accidental loss, unauthorized access, alteration, destruction, or disclosure.
Depending on the systems in use, safeguards may include access controls, authentication measures, security monitoring, secure configurations, and appropriate service-provider arrangements.
Access to personal information should be restricted to authorized individuals who need it for legitimate purposes.
We may review security procedures as the platform and its operational requirements evolve.
No electronic system or internet transmission can be guaranteed to be completely secure.
Users should protect their account credentials and contact support if they suspect unauthorized access.
If a personal data breach occurs, we will assess the circumstances and fulfil any notification and remedial obligations required by applicable law.

11. Cookies and Similar Technologies

The website may use cookies and similar technologies to support essential functionality, manage sessions, remember preferences, and maintain security.
Analytics or other optional technologies may be used where implemented and permitted by applicable law.
Non-essential cookies will be subject to prior consent where legally required.
Users may manage their preferences through the available consent mechanism or browser settings.
Disabling certain cookies may affect website functionality.
Further information about the technologies used and available controls is provided in the Cookie Policy.

12. One-Time Billing and Payment Data

Where paid features are available, the platform uses a one-time billing model for the relevant purchase rather than recurring payments.
Payment providers may collect and process payment credentials and transaction information to complete purchases and prevent fraud.
We may receive transaction references, payment confirmations, billing information, and other limited details needed for customer support and recordkeeping.
Sensitive payment credentials may be handled directly by the relevant payment provider, depending on the payment integration.
Transaction records may be retained as required by applicable accounting, tax, legal, and dispute-resolution obligations.
Payment information will be handled in accordance with applicable data protection requirements and relevant provider arrangements.

13. Your Data Protection Rights

Depending on your location and applicable law, you may have the following rights concerning your personal information:
Right of access: Request confirmation of processing and access to relevant personal information.
Right to rectification: Request correction of inaccurate or incomplete information.
Right to erasure: Request deletion where the legal requirements are satisfied.
Right to restriction: Request restriction of processing in circumstances provided by law.
Right to data portability: Request eligible information in a structured, commonly used, machine-readable format.
Right to object: Object to certain processing activities, including processing based on legitimate interests, where applicable.
Right to withdraw consent: Withdraw consent where processing relies on consent.
Rights concerning automated decisions: Exercise applicable rights relating to qualifying automated decision-making.
Right to complain: Lodge a complaint with a competent data protection authority.
These rights are subject to legal conditions and exceptions. We may request information necessary to verify your identity before processing a request.

14. Children's Data Protection

The platform is not intended to collect children's personal information in circumstances that violate applicable law.
We do not knowingly collect children's personal information unlawfully.
Where parental consent or another legal authorisation is required, the applicable requirements must be satisfied before relevant processing takes place.
If you believe that a child has provided personal information inappropriately, please contact us.
We will review the concern and take appropriate steps where required by law.

15. Policy Updates

We may update this Policy to reflect changes in data processing, platform functionality, service providers, security practices, or legal requirements.
The updated version will be published at https://kuranko.com/ with a revised date where appropriate.
Where changes require additional notice or renewed consent, we will take the steps required by applicable law.
Users are encouraged to review this Policy periodically.

16. Contact Information

For questions, concerns, or requests regarding this GDPR and Data Protection Policy, please contact us using the details below.
Operator: SHINAGIA LTD., operator of Kuranko.
Website: https://kuranko.com/
Support email: [email protected]
General enquiries: [email protected]
Physical address: Agiou Maronos 19, Lakatameia, 2304, Nicosia, Cyprus.
Company Registration Number: HE 496070
Please describe your request clearly and avoid sending unnecessary sensitive information.
We will review requests and respond within the time limits required by applicable law.
Before publication, the operator should verify whether SHINAGIA LTD. or another entity is the relevant data controller, confirm any applicable data protection contact details, and ensure this Policy accurately reflects actual processing practices.

17. Final Provisions

This Policy sets out the intended framework for protecting personal information in connection with the website and its services.
It should be interpreted in accordance with the GDPR where applicable and other relevant data protection laws.
If any provision is found unenforceable, the remaining provisions will continue to apply to the extent permitted by law.
Nothing in this Policy limits any mandatory privacy rights that cannot lawfully be excluded.
The operator should review this Policy periodically to ensure that it remains accurate, complete, and consistent with the platform's actual data practices.