Last updated: March 2026

1. Data Controller

Oceanook ("we", "us", "our") operates the websiteoceanook.com. This privacy policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

2. Data We Collect

We collect and store the following personal data:

• Email address - provided during account registration
• Password - stored in hashed form (never in plain text)
• Session data - temporary cookies required for authentication

3. Purpose of Data Processing

We process your data for the following purposes:

• Account creation and authentication
• Sending account activation emails
• Sending newsletters (only if you opt in)

4. Legal Basis

We process your personal data based on:

• Consent (Article 6(1)(a) GDPR) - you provide your email and create an account voluntarily
• Legitimate interest (Article 6(1)(f) GDPR) - for maintaining the security and functionality of our service

5. Data Retention

We retain your email address and account data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

6. Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

• When required by law or legal process
• With email service providers (Mailgun) solely for delivering transactional emails

7. Cookies

We use only essential cookies required for session management and authentication. We do not use tracking cookies or third-party analytics cookies.

8. Your Rights

Under the GDPR, you have the right to:

• Access - request a copy of the personal data we hold about you
• Rectification - request correction of inaccurate data
• Erasure - request deletion of your data ("right to be forgotten")
• Data portability - receive your data in a structured, machine-readable format
• Withdraw consent - withdraw your consent at any time
• Lodge a complaint - file a complaint with a supervisory authority

9. Data Security

We implement appropriate technical measures to protect your data, including password hashing, HTTPS encryption, and secure session management.

10. Contact

To exercise any of your rights or for questions about this privacy policy, please contact us at:info@oceanook.com