Privacy Policy

Who we are

Gentle Core Trading LLC ("Gentle Core", "we", "us") is the data controller for the purposes of Article 4(7) of the General Data Protection Regulation (GDPR) in respect of personal data processed via gentlecore.co. You may contact us by email at private@gentlecore.co. Postal contact is by appointment, worldwide.

What information we collect

We collect data you submit directly through our source-request form, contact form, and dossier inquiries — typically your name, email address, WhatsApp number, and the content of your message.

When you visit the site, our hosting provider (Vercel) records limited technical data — IP address, user agent, and language preference — in server access logs for security, abuse prevention, and operational diagnostics.

Why we process it (lawful bases under GDPR Article 6)

(a) Performance of a contract or pre-contractual measures (Art. 6(1)(b)) — to respond to inquiries you initiate and progress them toward a possible transaction.

(b) Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the site, and to maintain records appropriate to a private resale house.

(c) Consent (Art. 6(1)(a)) — where applicable, such as for any non-essential cookies. We currently use no such cookies.

Sharing your data

We do not sell or rent your personal data. We share it only with the limited recipients required to operate the site and respond to you:

Vercel Inc. — hosting and edge infrastructure (USA and EU regions), processing under the Vercel Data Processing Addendum.

WhatsApp / Meta Platforms Ireland — only if you choose to contact us through WhatsApp, in which case the conversation is carried over their infrastructure under their own terms and privacy policy.

International transfers

Vercel processes data globally, including outside the European Economic Area. Such transfers rely on Standard Contractual Clauses approved by the European Commission under Article 46 of the GDPR, with supplementary measures where required.

Retention

Inquiry messages are retained for the duration of the conversation plus 24 months thereafter, for follow-up and legitimate business records. Server access logs are rotated by our hosting provider in accordance with their published policy.

Your rights under GDPR

Subject to the conditions in the Regulation, you have the right to: access your data (Art. 15), have it rectified (Art. 16), erased (Art. 17), or restricted (Art. 18); to data portability (Art. 20); to object to processing (Art. 21); to withdraw consent at any time where processing is based on it (Art. 7); and to lodge a complaint with a supervisory authority in your country of habitual residence (Art. 77).

To exercise any of these rights, please email private@gentlecore.co.

Cookies

We use only strictly necessary cookies and equivalent storage. Please see our Cookie Policy for details.

Children's data

The site is not directed to children under the age of 16, and we do not knowingly collect personal data from them.

Changes to this policy

We will note any material changes on this page and update the "Last updated" date below.