Privacy policy

Karino Webdesign (“Karino”, “we”, “us”) designs and builds websites, web applications and online shops. For the personal data described here, Karino is the data controller: we decide why and how it is processed.

For anything about this policy or your data, write to info@karino-group.com.

• “Personal data” means any information that identifies you or can reasonably be linked to you, such as your name, email address, phone number or IP address.
• “Processing” means anything done with personal data: collecting, recording, storing, using, sending, erasing.
• “You” means anyone who visits the site, fills in a form, or writes to us.

Data you give us:

• Project brief form: the services you need, project stage and timeline, an optional budget range, your description and reference link, your name, company, email, phone, preferred channel and, if you choose Telegram, your Telegram username.
• Callback form: your name, phone number and the day and time window you prefer.
• Email: the content, attachments, sender and recipient addresses and technical headers of any message you send to an address on our domains, and our replies.

Data collected automatically:

• Technical data needed to deliver the site and keep it secure, such as your IP address, browser type and the time of each request. It is used for security, abuse and spam prevention, and is not used to build a profile of you.
• Anonymous visit statistics from a privacy-friendly analytics tool that uses no cookies and does not identify you.

We do not ask for sensitive data (for example health, religious or political information). Please do not send it to us.

We use only the cookies the site needs, never advertising or cross-site tracking cookies:

• NEXT_LOCALE: remembers the language you chose. Up to 1 year.
• karino_theme: remembers the light or dark theme you chose. Up to 1 year.
• The admin session cookie: set only for our own staff when they sign in to the site's management area. Up to 14 days.

The site also keeps two preferences in your browser's local storage, which never leaves your device: whether sound is on, and whether you dismissed the language suggestion.

You can delete or block cookies in your browser settings at any time. The site keeps working with its default language and theme.

• To answer your enquiry, prepare a proposal and plan a call: at your request, before entering into a contract.
• To deliver and support a project we have agreed on: performance of the contract.
• To keep the site and our mailboxes secure, prevent spam, fraud and abuse: our legitimate interest in protecting our service and our users.
• To meet legal obligations, such as accounting and tax records or a lawful order from a competent authority.
• To understand, in aggregate and anonymously, how the site is used and improve it.

We do not sell your data, use it for third-party advertising, or make decisions about you by automated means alone.

Your data is seen only by the members of our team who need it. We share it outside Karino only in these cases:

• Service providers who process it for us under confidentiality: our hosting provider (the servers the site and its database run on), Resend (email delivery and receiving), and Telegram (internal alerts that tell our team about a new request).
• Professional advisers, such as accountants or lawyers, where necessary.
• Competent judicial or administrative authorities, when the law requires it or a lawful order is issued.

Some of these providers operate outside your country, including outside Iran (for example in the United States). Where data is transferred, we use providers that apply recognised security measures and share only what the service requires.

• Enquiries and callback requests that do not lead to a project: up to 24 months after our last contact, then deleted.
• Project correspondence and records: for the duration of the contract and afterwards for as long as the law requires us to keep them.
• Messages identified as spam: deleted from our mailbox regularly.
• Technical security data: for short periods, normally no longer than 90 days.

When the retention period ends, we delete the data or make it permanently anonymous.

All traffic to the site is encrypted (HTTPS with HSTS). Access to the management area is limited to our team and protected by strong, salted password hashing, short-lived sessions and sign-in throttling. Forms are protected against spam and abuse, and the site and its dependencies are kept up to date.

No method of transmission or storage is completely secure. If a security incident affects your personal data, we will inform you and the relevant authorities as the law requires.

Within the limits of the law that applies to you, you have the right to:

• know whether we hold data about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted when we no longer need it or have no legal basis to keep it;
• object to or ask us to restrict certain processing;
• receive the data you gave us in a common, machine-readable format;
• withdraw any consent you gave, without affecting processing that took place before;
• complain to the authority responsible for data protection where you live.

To exercise any of these rights, write to info@karino-group.com. We may ask you to confirm your identity, and we answer within 30 days.

Our services are meant for businesses and adults. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

Our site may link to other websites, such as our clients' sites or our social media pages. Their privacy practices are their own; please read their policies.

We may update this policy when our services or the law change. The date at the top shows when the current version took effect. If a change materially affects how we use your data, we will say so clearly on the site.

This policy is governed by the laws of the Islamic Republic of Iran, including the Electronic Commerce Act, and, where it applies to you, the data protection law of your own country (for example the GDPR in the European Union). Any dispute is first resolved amicably; failing that, it goes before the competent courts of Tehran. Nothing here limits mandatory rights you have under the law of your country.

This policy is published in Persian and English. In case of any difference between the two, the Persian text prevails.

Karino Webdesign
Email: info@karino-group.com