Privacy Policy - KpopSource

Privacy & Data Protection GDPR & CCPA Aligned

Your privacy matters here too.

This page explains what information KPOPSOURCE collects, how it is used, how long it may be retained, what rights you have under privacy regulations, and how to reach out to us with any data questions.

Zero Data Selling We never sell personal information
GDPR & CCPA Access, deletion & export rights
Data Security Encryption & SSL safeguards
Direct Contact [email protected]
Privacy at a Glance Effective 24 August 2024 · Updated January 2026
Personal Data Never Sold
Log Retention Up to 24 Mos
Age Minimum 13+ Years
Privacy Rights GDPR & CCPA
SSL Encryption 256-Bit Active
Privacy Inquiry Direct Email
Overview

What this policy covers.

Our commitment to transparent data stewardship and member trust.

At KPOPSOURCE, we are committed to protecting privacy and personal data. This policy explains how information is collected, used, disclosed, and safeguarded when members visit the forum or use related services. It is written with GDPR, CCPA, and similar privacy expectations in mind.
Policy Details

The full privacy policy.

Each section below covers a specific aspect of how we handle your information.

1
Data Intake

Information we collect

Information you provide:

  • Account registration: Username, email address, and password.
  • Profile information: Optional profile details such as avatar, location, interests, social links, and bio.
  • Content you post: Posts, replies, private messages, comments, and uploads associated with your account.
  • Contact forms: Name and email address submitted through direct contact channels.
  • Communications: Feedback, questions, and support interactions.

Information collected automatically:

  • Log data: IP address, browser type, operating system, referring URL, pages visited, access times, and device identifiers.
  • Cookies and similar technologies: Used to enhance forum experience. See the cookie policy for more detail.
  • Usage data: Information about how the forum is used, including time spent and accessed features.
2
Regulatory Framework

Legal basis for processing (GDPR)

If you are in the European Economic Area (EEA), our processing of personal data relies on the following legal bases:

  • Contractual necessity: To provide forum services and fulfill obligations under the terms.
  • Legitimate interests: To maintain platform integrity, prevent abuse, and improve community services.
  • Consent: For activities that rely on explicit opt-in, such as some communications.
  • Legal obligation: To comply with applicable laws, regulations, and valid legal processes.
3
Operations

How we use your information

  • Provide and maintain the forum: Including support, operational delivery, and troubleshooting.
  • Personalize your experience: Such as card showcases, inventory tracking, and preference-based features.
  • Communication: Send important updates and service notifications, with opt-out choices where applicable.
  • Monitor and analyze usage: Improve platform speed, reduce query workloads, and understand forum traffic patterns.
  • Protect users: Detect fraud, multi-account ban evasion, spam, and malicious behavior.
  • Comply with legal obligations: Meet applicable legal and regulatory record-keeping requirements.
  • Enforce our terms: Including community rules, content policies, and account limits.
4
Data Lifecycle

Data retention

Personal information is retained only as long as needed for the purposes it was collected, unless a longer period is required by law.

  • Account information: Retained while your account is active and for a reasonable period afterward if legally necessary.
  • Content: Retained as long as needed to provide forum services, subject to backup cycles and legal requirements.
  • Log data: Typically retained for up to 24 months for security audits and analytics purposes. Max 24 Mos
  • Legal requirements: Some information may be retained longer for dispute resolution, compliance, or rights protection.
5
Disclosure Standards

Sharing your information

We do not sell personal information. Information is only shared in the following limited circumstances:

  • Service providers: Trusted infrastructure and operational partners that help run the forum and related services.
  • Legal requirements: When disclosure is required by law or necessary to protect rights, users, or public safety.
  • Business transfers: In mergers, acquisitions, or asset reorganizations, with member notice where required.
  • With your consent: When you explicitly agree to third-party sharing.
6
Global Safeguards

International data transfers

Information may be transferred to and processed in countries other than your own. Where international transfers occur, we rely on established cross-border safeguards:

  • Standard Contractual Clauses: Contract terms approved by the European Commission ensuring adequate protection.
  • Adequacy decisions: Jurisdictions officially recognized as providing equivalent levels of data protection.
  • Transfer mechanisms: Other recognized legal frameworks and technical protections under applicable law.
7
Protection Architecture

Data security

We deploy robust technical and organizational safeguards including HTTPS/SSL encryption, isolated Unix sockets for MySQL and Redis, role-based staff access controls, and regular patch updates. However, no digital transmission or server storage is 100% immune to risk.

In the unlikely event of a verified data breach that poses a risk to member rights and freedoms, we will notify affected members and authorities as required by applicable data protection laws.

8
Member Entitlements

Your privacy rights

GDPR rights (EEA & UK members) may include:

  • Access: Request a copy of your personal data held by KPOPSOURCE.
  • Correction: Rectify inaccurate, outdated, or incomplete information.
  • Deletion (Erasure): Request erasure of personal information, subject to statutory exemptions.
  • Restriction: Request temporary restriction of data processing in certain circumstances.
  • Data Portability: Receive your data in a structured, commonly used digital format.
  • Objection: Object to specific forms of processing based on legitimate interests.
  • Automated Decision-Making: Protection against decisions made solely through automated evaluation.

CCPA rights (California residents) may include:

  • Right to Know: Discover categories of personal information collected, used, and disclosed.
  • Right to Delete: Request deletion of personal data collected from you.
  • Opt-Out of Sale: We do not sell personal data, so no opt-out is necessary.
  • Non-Discrimination: Freedom from discriminatory service or pricing for exercising statutory rights.

To exercise any of these rights, contact us at [email protected]. We respond within the statutory timeframes required by applicable law.

9
Measurement & Partners

Third-party advertising & analytics

We may use privacy-respecting third-party advertising and telemetry services that rely on cookies or similar browser technologies.

Advertising: Interest-based advertising opt-outs may be exercised through the Network Advertising Initiative at optout.networkadvertising.org.

Analytics: Aggregated analytics collect telemetry such as page visits, referral sources, and traffic timing without tracking individual identities across non-affiliated websites.

10
Minor Protection

Children's privacy

The forum is not intended for children under 13. We do not knowingly collect personal information from individuals under 13 years of age.

If a parent or guardian believes a child under 13 has registered or provided personal information without verified consent, contact us immediately at [email protected] for prompt account removal.

For users under 16 (or the applicable digital age of consent in your jurisdiction), verified parental consent may be required.

11
Binding Terms

Acceptance of this policy

By registering for, browsing, or using KPOPSOURCE, you signify your informed acceptance of this privacy policy. If you do not agree with these provisions, please do not use the forum.

Continued use of the website following the posting of policy revisions constitutes acceptance of those updates.

12
Revision Protocols

Changes to this policy

We may update this policy periodically to reflect evolving platform features, security safeguards, or statutory requirements. When updates occur, notice is provided by:

  • Posting the updated policy directly on this page.
  • Updating the revision date at the top of the policy.
  • Sending an email notice to registered members where appropriate.
  • Displaying an announcement banner on the forum when changes are material.
13
Dispute Resolution

Complaints & supervisory authorities

If you believe our processing of personal data infringes your statutory privacy rights, you have the right to lodge a complaint with your jurisdiction's data protection supervisory authority.

We encourage you to contact us first at [email protected] so we can address your concerns swiftly and directly.

14
Data Controller

Contact us

For questions regarding this policy, data access requests, or privacy concerns, contact our designated privacy team:

No matching privacy terms

No privacy policies matched your search query. Try searching for "cookies", "retention", "gdpr", or "security".

Have questions about your data?

Want to exercise your privacy rights, request data deletion, or clarify how data is processed? Reach out and our team will gladly assist you.