Data handling
Privacy notice
This notice describes the implemented service. Do not send patient records, real user health data, passwords, credentials or confidential source code.
Responsible operator
- Legal name
- Jogak Studio — Pak Caylee Hyunah, sole proprietor
- Trading name
- Declaration Desk
- Operator country
- KR
- Profile
- 2026-08-26.v5 · effective 2026-08-26
- Address
- 223 Sinheung-ro, Wonmi-gu, Bucheon-si, Gyeonggi-do, Republic of Korea
- Privacy contact
- help.dd@jogak.studio
What the service receives and why
- 01Scope and contactEmail, product summary, stores, markets and public links used to answer the scope request and issue a quote.
- 02Order evidencePayPal order ID, quote reference, accepted terms version, price lines and scope boundary. The order-evidence table has no separate name, email, company, IP-address or user-agent field.
- 03Review materialsProduct facts, redacted screenshots, public wording, specifications, platform messages and PDF/PNG/JPEG files you attach to an additional information request.
- 04Service recordsPayment status, email records, delivery access and case history needed to provide the order, refunds, corrections and support.
Hosting and case dataCloudflare Workers and D1 operate the site and case records. Customer attachments are stored in a private Cloudflare R2 bucket and are available only through the customer capability or Cay’s protected operator route.
Website analyticsCloudflare Web Analytics measures aggregate visits and page performance on public information and scope-entry pages. It is not loaded on private quote, intake, follow-up or delivery pages. Declaration Desk also records anonymous milestones when a public page remains visible for 10 seconds, 30 seconds, 1 minute, 3 minutes or 5 minutes, and when 25%, 50%, 75% or 100% of it is viewed. Milestone collection is inactive on those private pages. It uses no analytics cookie or visitor or session identifier. Declaration Desk does not intentionally send names, email addresses, case references, form answers, payment information or attachments through these analytics integrations, and does not store an IP address with a milestone. Only the date, public page, milestone and aggregate count are retained for 90 days.
PaymentPayPal processes checkout and payment information. Declaration Desk stores the limited order evidence described above.
Service emailPostmark processes transactional service messages, including quotes, payment confirmations, additional-information requests and Answer Pack delivery.
External AICustomer-derived facts are not sent to an external AI service unless the specific Business/API product, training use, retention, region, subprocessors and contract have first been verified.
Review-material retentionPrivate R2 attachments are deleted on the case schedule, within 90 days after final delivery. Local working copies are deleted within the same period or earlier on request. Separate transaction, tax and provider records follow their own periods.
Order acceptance evidenceDeleted after 5 calendar years after acceptance.
MarketingA scope or order email is not added to a marketing list. Any future optional marketing sign-up must be separate.
RequestsUse the privacy contact above to ask about access, correction or deletion. Any applicable limits or identity checks will be explained for the request.