Online Privacy Policy

This Online Privacy Policy explains how GURACORP® (“GURACORP®”, “we”, “us”) handles personal information on www.guracorp.net (the “Site”) and in the GURACORP® store. Related marks include GURA® and GRD®. GURACORP® is a concept design studio based in the Netherlands.

The Site is a studio website and store. It is not a game, a social network, or a public forum. Please also read the Terms of Service.

By using the Site or completing a store order you accept this policy. If you do not agree, do not use the Site and do not buy.

1. What we collect

Site use

When you visit the Site, our hosting and security providers (Cloudflare) may record technical data such as IP address, browser and device type, approximate location derived from IP, pages requested, and timestamps. This is ordinary server and CDN operation. We do not run a third-party advertising pixel on the Site.

Your dark/light preference may be stored in your browser (local storage). That stays on your device.

Contact and booking

If you send the contact form we receive the fields you submit — typically name, email, company, budget, timeline, and message — so we can reply about work. If you book a consultation through a third-party calendar (for example Cal.com), that provider collects what you enter on their page under their own policy.

Newsletter

If you subscribe, we collect your email and a Cloudflare Turnstile token to stop bots. Subscription is opt-in. We send studio mail through Resend. You can unsubscribe from the link in any newsletter or by emailing support@guracorp.net.

Store — paid checkout (Stripe)

Paid store purchases are processed by Stripe. You complete payment on Stripe Checkout. GURACORP® does not see or store your full card number, CVC, or card expiry. Stripe collects and processes payment credentials under Stripe’s own terms and privacy policy.

Depending on the product, Stripe also collects:

• Email address
• Billing name and billing address
• For physical goods: shipping name, shipping address, and phone number
• Payment status, amount, currency, and a checkout session id
• An optional newsletter opt-in (off unless you choose it)

Stripe sends us what we need to fulfil the order: that you paid, which product, your email, shipping details (for hardware), and whether you opted into the list. We store order metadata (including that you accepted the Terms and which Terms version was in force) so we can fulfil, confirm, keep stock, and contest chargebacks.

United States–only hardware (including GURA® firearm accessories made and stored in the US): Stripe is set to collect a United States shipping address and phone only. We share name, address, phone, and order details with the United States fulfillment partner and the carrier so the parcel can be dispatched from US inventory. Those items never enter the Netherlands.

Hardware shipped from the Netherlands (including GURA® merch): Stripe collects the shipping address for the country you selected. We use that address to pack and ship from the Netherlands and to email confirmation from store@guracorp.net.

Paid digital products: we use your email to send retrieval or confirmation mail. We do not need a shipping address.

Store — free downloads

For a FREE store asset we collect your email, your acceptance of the Free Asset License, and a Turnstile token. We send a short-lived retrieval link from store@guracorp.net. Newsletter opt-in on that form is optional. We log email, product, and time so we can prevent abuse and count unique downloads. We do not take a card for free downloads.

2. Why we use it

We use personal information to:

• Operate the Site and keep it secure
• Answer contact and booking inquiries
• Process payment (via Stripe), fulfil orders, and email store confirmations or download links
• Share hardware shipping details with the fulfiller and carrier
• Keep stock and accounting records, and defend chargebacks or fraud
• Send newsletter mail when you have opted in
• Comply with tax and other legal duties

We do not sell or lease personal information. We do not use store addresses for marketing unless you opted into the newsletter (email only).

3. Legal bases (EEA / UK / Netherlands)

Where GDPR or UK GDPR applies:

• Contract — checkout, payment, fulfilment, download retrieval, defect handling
• Consent — newsletter; you may withdraw at any time
• Legitimate interests — Site security, bot checks, download logs, chargeback defense
• Legal obligation — tax, accounting, and similar records

4. Who we share it with

We share personal information only as needed:

• Stripe — payment, Checkout, billing and shipping collection, fraud tools. See Stripe’s privacy policy.
• Cloudflare — hosting, CDN, security, Turnstile
• Resend — transactional store mail and newsletter delivery; newsletter audience if you opt in
• United States fulfillment partner and carriers — name, shipping address, phone, and product for US-origin hardware only
• Carriers and customs — for Netherlands-origin hardware, as required to deliver
• Professional advisers or authorities — if required by law or to protect GURACORP®, GURA®, or GRD® rights or safety

Staff admin login uses cookies on this Site. That is for GURACORP® operators only, not store buyers.

5. Cookies and similar

The public Site uses:

• Cloudflare cookies and Turnstile as needed for security and bot checks
• Stripe cookies when you open Checkout (on Stripe’s domain)
• Local storage for appearance (dark/light)

We do not set advertising cookies. If you block cookies, Checkout or Turnstile-protected forms may not work.

6. Retention

We keep information only as long as needed for the purpose, including:

• Paid orders and Stripe records — for fulfilment, tax, accounting, and chargeback windows
• Shipping details — to dispatch and to handle damage or defect claims
• Free-download logs — for security and unique-download counts
• Newsletter emails — until you unsubscribe or we delete the list record
• Contact messages — as needed to handle the inquiry
• Server logs — on ordinary provider rotation

7. International transfers

GURACORP® is based in the Netherlands. The Site is served through Cloudflare. Stripe, Resend, and US fulfillment process data in the United States and other countries. Those transfers are part of running Checkout, mail, and US-origin hardware dispatch. Providers apply their own safeguards (including standard contractual clauses where they offer them).

US-origin hardware orders necessarily send shipping details to the United States. That is required to deliver a US-only product from US inventory.

8. Your rights

You may ask GURACORP® to access, correct, or delete personal information we hold, or to restrict or object to certain processing, and (where applicable) to receive a copy. If processing is based on consent, you may withdraw consent without affecting earlier lawful use.

Email support@guracorp.net or store@guracorp.net (store orders). We will respond as required by applicable law. If you are in the EEA you may also complain to a supervisory authority, including the Autoriteit Persoonsgegevens in the Netherlands.

We may need to keep some order and payment records even after a deletion request, where the law or a dispute requires it.

9. Children

The Site and store are for people 18 and over. Do not submit personal information if you are under 18. If we learn we collected information from someone under 18, we will delete it where we can.

10. Security

We use HTTPS, limit staff access, and rely on Stripe for card data. No transmission or storage is perfectly secure. You send information over the internet at your own risk.

11. Other sites

Links (including Stripe Checkout, Cal.com, and social profiles) go to third parties. Their policies apply on their sites. GURACORP® is not responsible for those practices.

12. Changes

We may update this policy by posting a new version here. The “Last Updated” date will change. The version in force when you complete checkout applies to that order.

13. Contact

Privacy and general: support@guracorp.net. Store: store@guracorp.net.

GURACORP® — Netherlands.