Privacy Policy

At Paking Duck, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains the types of information we collect, how we use and protect that information, when it may be shared, and the choices and rights available to you.

Last Update: April 24, 2026

‍

1. Introduction

Paking Duck Inc. ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have over it.

‍

This policy applies to all personal data processed through our website at www.pakingduck.com and related enterprise services. It complies with the General Data Protection Regulation (GDPR) and applicable data protection laws.

‍

2. Definitions

For clarity, the following terms are used throughout this policy:

‍

3. Data We Collect and Why

‍

3.1 Website Browsing

When you visit our website, we automatically collect server log data including your IP address, browser type and version, operating system, pages visited, date and time of access, and referring URLs. This data is used solely to ensure proper website functioning, diagnose technical issues, and improve site performance. It is not used to identify individuals.

‍

3.2 Account Registration

When you register for an account, we collect the information you provide in the registration form, such as your name, email address, and contact details. We also record your IP address and timestamp at the point of registration to prevent misuse and for security purposes.

‍

3.3 Newsletter Subscription

If you subscribe to our newsletter, we collect your email address and use a double opt-in process to confirm your subscription. We also record your IP address and subscription timestamp for legal compliance purposes. We use tracking pixels in newsletter emails to measure open rates and link clicks to improve future communications.

‍

3.4 Contact Forms and Email

When you contact us via email or a website contact form, we store the information you provide in order to respond to your inquiry. This data is used solely for communication purposes.

‍

3.5 Blog Comments

If you leave a comment on our blog, we store your username (or pseudonym), comment content, and IP address. The IP address is retained for security purposes in case of content violations or third-party rights infringement.

‍

3.6 Job Applications

If you apply for a position with us, we process your application data for hiring purposes only. If no employment contract results, application data is deleted within two months of a rejection notice, unless a longer retention period is required for legal defense purposes under applicable equal treatment legislation.

‍

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

‍

Consent (Art. 6(1)(a) GDPR): Where you have given explicit permission, such as newsletter subscription.
Contract Performance (Art. 6(1)(b) GDPR): Where processing is necessary to fulfill a contract with you or take pre-contractual steps at your request.
Legal Obligation (Art. 6(1)(c) GDPR): Where processing is required to comply with applicable law, such as tax obligations.
Vital Interests (Art. 6(1)(d) GDPR): In rare circumstances where processing is necessary to protect someone's life.
Legitimate Interests (Art. 6(1)(f) GDPR): Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights. Our legitimate interest is to operate and improve our business for the benefit of our employees and customers.

‍

5. Cookies

Our website uses cookies to enhance your experience. Cookies are small text files stored on your device by your browser. We use the following categories of cookies:

‍

Strictly Necessary Cookies: Required for the website to function. These cannot be disabled.
Functional Cookies: Enable features such as remembered preferences and shopping carts.
Analytics Cookies: Help us understand how visitors use our site so we can improve it.
Marketing Cookies: Used to track visits and display relevant advertising.

‍

When you first visit our site, you will be presented with a cookie banner where you can accept or reject non-essential cookies. You can also change your cookie preferences at any time via your browser settings. Please note that disabling certain cookies may affect website functionality.

‍

6. International Data Transfers

Paking Duck Inc. is based in the United States. If you are located in the European Union or European Economic Area, your personal data may be transferred to and processed in the United States, which may not provide the same level of data protection as your home country.

‍

Where we transfer data internationally, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms. You may request a copy of the applicable transfer mechanism by contacting us at team@pakingduck.com.

‍

7. How We Share Your Data

We do not sell your personal data. We may share your data in the following limited circumstances:

‍

Service Providers (Processors): We share data with trusted third-party vendors who support our operations (e.g., email service providers, analytics platforms, shipping/parcel services). These parties are contractually obligated to process data only on our instructions and in compliance with applicable law.
Legal Requirements: We may disclose personal data to comply with a legal obligation, court order, or to cooperate with law enforcement authorities.
Protection of Rights: We may disclose data where necessary to protect the rights, property, or safety of Paking Duck Inc., our customers, or the public.

‍

Categories of third-party processors we currently use include email delivery platforms, web analytics tools, and logistics and fulfillment partners.

‍

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. General retention periods are:

‍

Account data: Retained for the duration of your account relationship and up to 3 years after account closure, or as required by applicable law.
Newsletter subscriber data: Retained while your subscription is active and for up to 12 months after unsubscribing.
Contact and inquiry data: Retained for up to 2 years from the date of last contact.
Server log data: Retained for up to 12 months.
Blog comment data: Retained for the duration the comment remains published.
Job application data: Deleted within 2 months of a rejection notice, unless extended for legal purposes.

‍

After the applicable retention period, data is securely deleted or anonymized.

‍

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

‍

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete data.
Right to Erasure: You can request deletion of your data in certain circumstances (the "right to be forgotten").
Right to Restriction: You can ask us to limit processing of your data in certain situations.
Right to Data Portability: You can request your data in a structured, machine-readable format.
Right to Object: You can object to processing based on legitimate interests, including direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

‍

To exercise any of these rights, please contact us at team@pakingduck.com. We will respond within 30 days. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

‍

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

‍

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by applicable law.

‍

11. Automated Decision-Making and Profiling

We do not engage in automated individual decision-making or profiling that produces legal or similarly significant effects on data subjects.

‍

12. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us at team@pakingduck.com and we will promptly delete it.

‍

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this document and, where appropriate, notify you by email or through a prominent notice on our website.

‍

We encourage you to review this policy periodically. Continued use of our services after changes become effective constitutes your acceptance of the updated policy.

‍

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us:

‍

Paking Duck Inc.

‍

New York, NY 10001

‍

Email: team@pakingduck.com

‍

Website: www.pakingduck.com

‍