Legal
Privacy Policy
CoastLeap (“CoastLeap”, “we”, “our”, “us”) operates the online platform available at coastleap.com (the “Platform”). This Privacy Policy explains how we collect, use, process, store and protect personal data when individuals access or use the Platform.
Effective Date: March 2025
By accessing or using CoastLeap, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
The Data Controller is:
CoastLeap Legal Team
Athens, Greece
Email: support@coastleap.com
Website: coastleap.com
2. Personal Data We Collect
We may collect the following categories of personal data:
a) Account & Profile Information
- Name
- Company name
- VAT number (where applicable)
- Email address
- Phone number
- Business address
- Service categories
- Profile description and media uploads
b) Subscription & Billing Data
- Billing address
- VAT status
- Payment confirmation data (payment processing is handled by third-party providers — CoastLeap does not store full credit card details)
c) Communications
- Messages sent through the Platform
- Customer support requests
- Email correspondence
d) Technical Data
- IP address
- Browser type
- Device information
- Cookies and analytics data
- Usage behavior within the Platform
3. Purpose of Processing
We process personal data for the following purposes:
- To create and manage user accounts
- To provide directory and contact services
- To verify Supplier and Agency profiles
- To process subscriptions and payments
- To communicate with users
- To improve platform performance and security
- To comply with legal obligations (e.g. tax and regulatory compliance)
4. Legal Basis for Processing (GDPR)
We process personal data under the following legal bases:
- Performance of a contract (account & subscription management)
- Legitimate interest (platform security, fraud prevention, service improvement)
- Legal obligation (tax and regulatory compliance)
- Consent (marketing communications, where applicable)
6. Data Retention
We retain personal data:
- For as long as the account remains active
- For the duration required by tax and accounting laws
- As necessary to resolve disputes or enforce agreements
Users may request deletion of their data (see Section 9).
7. International Transfers
If data is transferred outside the European Economic Area (EEA), appropriate safeguards such as Standard Contractual Clauses (SCCs) are applied.
9. User Rights (GDPR)
Under EU data protection law, users have the right to:
- Access their personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
Requests may be sent to: support@coastleap.com
10. Data Security
We implement appropriate technical and organizational measures to protect personal data against:
- Unauthorized access
- Loss or destruction
- Alteration
- Disclosure
However, no internet-based system is completely secure.
11. Third-Party Links
The Platform may contain links to third-party websites. CoastLeap is not responsible for their privacy practices.
12. Children’s Privacy
CoastLeap is intended for professional users. We do not knowingly collect data from individuals under 18 years of age.
13. Updates to this Policy
We may update this Privacy Policy at any time. Updates become effective upon posting on the Platform. Continued use of CoastLeap constitutes acceptance of the updated Policy.
14. Contact
For privacy-related inquiries:
CoastLeap Legal Team
support@coastleap.com
Athens, Greece