Privacy Policy

Karma Terminal is the data controller responsible for your personal data. For any privacy-related questions or requests, contact us via our contact page.

• Contact and get in touch form submissions, including the message text you write and your email address if you choose to provide it
• Forum display names, the name you choose to display in the forum
• Cookie preferences, your response to our cookie consent prompt

• Contact form messages and email addresses are deleted within 90 days of your enquiry being resolved
• Forum display names are retained for as long as your account is active and deleted upon request
• Cookie preferences are stored for 12 months, then re-prompted

We do not use advertising, analytics, or tracking cookies.

We do not sell, rent, or share your personal data with third parties for marketing purposes. If our infrastructure relies on third-party hosting or services, those providers act as data processors under our instruction and are bound by data processing agreements that meet GDPR standards.

Karma Terminal is hosted on Railway, a platform whose infrastructure may process data outside the UK or European Economic Area (EEA). Railway operates under data processing agreements that include Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data is protected to the same standard as within the EEA.

Under GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data
• Restriction — ask us to limit how we use your data
• Portability — request your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, contact us via our contact page. We will respond within 30 days.

If you believe we are handling your data unlawfully, you have the right to lodge a complaint with your local data protection authority. In the EU, this is your national supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

If we make significant changes to this policy, we will update the date at the top of this page.

Questions about this policy? Reach us via our contact page.