DETAILED PRIVACY POLICY
Effective Date: October 31, 2025
This Detailed Privacy Policy ("Policy") outlines how HSKFREE.COM collects, uses, processes, and protects the Personal Data (PD) and Non-Personal Data (NPD) of users across its entire global network. This policy applies to all language versions and subdomains, ensuring a consistent standard of privacy protection worldwide.
A. Data Controller and Universal Scope
HSKFREE.COM acts as the Data Controller responsible for the processing of your data. This Policy applies equally to data collected through the main domain (hskfree.com) and all language subdomains (e.g., ar.hskfree.com, ja.hskfree.com). The processing standards are uniform across all access points.
B. Information Collected and Methods
We collect two primary categories of data:
Personal Data (PD): Information that can directly identify you. This includes your Name and Email Address, which is voluntarily provided by you when you subscribe to a newsletter, submit a contact form, or create a user account (if applicable).
Non-Personal Data (NPD) / Usage Data: Information about your access and usage, automatically collected via server logs and tracking technologies. This includes your IP Address, unique device identifiers, browser type, operating system, pages visited, the specific Subdomain Accessed (which identifies your language preference), and time spent on the Sites.
C. Legal Basis for Processing and Data Usage
We process your data based on various legal grounds, particularly those specified by the General Data Protection Regulation (GDPR), which serves as our baseline standard:
Consent: We process data (such as sending promotional newsletters or placing advertising cookies) only when we have obtained your clear, affirmative consent.
Legitimate Interest: We process NPD to operate, maintain, and improve the Website, analyze traffic patterns across different subdomains (to ensure content quality and availability), and detect/prevent technical issues or fraud.
Contractual Necessity: We use your PD (Name, Email) to fulfill requests you initiate, such as replying to your specific support or contact inquiries.
D. Cookies, Tracking Technologies, and Compliance
We use cookies, pixels, and web beacons for traffic analysis, site optimization, and interest-based advertising. We fully adhere to the Google EU User Consent Policy and all relevant regional laws regarding tracking technologies. For visitors accessing the Sites from the European Economic Area (EEA) and the UK, we deploy a compliant Consent Management Platform (CMP) to obtain explicit consent before setting any non-essential cookies (including those for analytics and personalized advertising). You have the right to review and change your cookie preferences or withdraw consent at any time via the cookie settings available on our Sites.
E. Data Sharing, International Transfer, and Security
We do not sell, rent, or trade your Personal Data. We may share data with trusted third-party service providers (such as Google for analytics and advertising, or cloud hosting services) who assist us in operating the Website, provided those parties agree to maintain confidentiality. Given our global scope, your data may be transferred to and processed in jurisdictions outside your country of residence (e.g., US servers). We ensure that any such transfer is protected by appropriate safeguards, such as the implementation of legally-approved transfer mechanisms like Standard Contractual Clauses (SCCs), where required.
F. Your Data Protection Rights (GDPR & CCPA)
Depending on your geographical location, you are entitled to several rights regarding your data, including: the right to access your data; the right to request rectification of inaccurate data; the right to erasure ("right to be forgotten"); the right to object to processing for direct marketing; and the right to data portability. To exercise any of these rights, please submit a formal request using the email address provided in the "CONTACT" section. We are committed to responding to all valid requests promptly and in accordance with applicable data protection laws.