PRIVACY STATEMENT

Cho Star Solutions (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable privacy laws. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and the rights you have regarding your data.

1. Who We Are

Cho Star Solutions provides IT services, web applications, mobile applications, and related digital solutions. We act as the Data Controller for the personal information collected through our websites, applications, and services.

If you have any questions, you may contact us at: info@chostar.co.uk

2. Personal Data We Collect

We may collect and process the following categories of personal information:

2.1 Information You Provide Directly

• Name

• Email address

• Account registration details

• Information submitted through forms, support requests, or communications

• Subscription or service sign‑up information

• Any other information you voluntarily send to us

2.2 Website & App Usage Data

• IP address

• Device information

• Browser type

• Operating system

• Pages visited and interaction logs

• App usage statistics

• Cookies and similar tracking technologies

2.3 Transaction & Billing Information

• Payment details (processed securely via third‑party payment providers)

• Billing address

• Purchase history

• Invoices and receipts

2.4 Technical & Security Data

• Login activity

• Error logs

• Security event logs

• Authentication data

3. How We Use Your Personal Data

We use your personal information for the following purposes:

• To operate, maintain, and improve our website and applications

• To register and manage your account

• To provide products and services you request

• To process payments and send invoices

• To personalise your experience

• To communicate with you regarding updates, support, or marketing (where permitted)

• To comply with legal obligations

• To secure our systems and prevent fraud

• To analyse usage and improve performance

We only process your personal data when we have a lawful basis, including:

• Contractual necessity (providing services you request)

• Legitimate interests (improving services, preventing fraud)

• Legal obligations (tax, accounting, compliance)

• Consent (marketing communications, optional features)

4. Sharing Your Personal Data

We may share your information with:

• Trusted service providers and subcontractors

• Payment processors

• Hosting providers

• Analytics and security partners

• Legal authorities when required by law

All third parties are required to handle your data in accordance with GDPR and this Privacy Policy.

We never sell your personal data.

5. International Data Transfers

Your personal information may be stored or processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK GDPR‑approved Standard Contractual Clauses

• Adequacy decisions

• Secure, compliant cloud infrastructure

6. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted storage

• Secure servers

• Access controls

• Regular security audits

• Encrypted transmission of sensitive data

Despite these measures, no system is completely secure, but we take all reasonable steps to protect your information.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy.

Retention Periods

• Account data: retained while your account is active; deleted within 90 days of closure

• Website & app usage logs: up to 24 months

• Support communications: up to 24 months

• Financial records: 6 years (legal requirement)

• Backups: automatically overwritten within 90 days

8. Data Deletion

You may request deletion of your personal data at any time. Upon verification, we will securely delete:

• Website account data

• App data

• Stored content

• Usage logs

• Communications (where permitted)

Backup data cannot be immediately deleted but will be purged automatically within 90 days.

To request deletion, email: info@chostar.co.uk

9. Your GDPR Rights

Under GDPR, you have the following rights:

• Right to access – request a copy of your personal data

• Right to rectification – correct inaccurate information

• Right to erasure – request deletion of your data

• Right to restrict processing

• Right to data portability

• Right to object to certain processing

• Right to withdraw consent at any time

• Right to lodge a complaint with the ICO (Information Commissioner’s Office)

We will respond to all requests within the legally required timeframe.

10. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Improve website functionality

• Analyse usage

• Personalise content

• Enhance security

You can manage or disable cookies through your browser settings.

11. Third‑Party Websites

Our website may contain links to external sites. We are not responsible for the privacy practices or content of third‑party websites.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website. Continued use of our services indicates acceptance of any changes.

13. Contact Us

For questions, concerns, or data requests, contact:

Cho Star Solutions Email: info@chostar.co.uk