Privacy Policy

1. Introduction

Guideway Consulting ("we," "us," or "our") operates ThePicks (accessible at thepicks.io), a creator-curated shopping platform that connects brands and creators. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website and services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, password, and phone number (optional) when you create an account.
• Creator Information: Social media account details (TikTok, Instagram, YouTube), UGC reference URLs, country of residence, and affiliate experience survey responses.
• Brand Information: Company name, contact name, website URL, product categories, and company introduction.
• Order & Payment Information: Shipping address, order details, and payment information processed through Stripe. We do not store full credit card numbers; only the card brand and last four digits are retained for reference.
• Communications: Any messages or inquiries you send to us via email or other channels.

2.2 Information Collected Automatically

• Usage Data: Pages viewed, click logs, referring URLs, access times, and interaction patterns with the platform.
• Device Information: Browser type, operating system, device type, and IP address.
• Cookies: We use cookies and similar technologies to maintain your session and improve your experience.

3. How We Use Your Information

• To create and manage your account
• To process orders, payments, and refunds
• To facilitate creator-brand matching and curated shopping experiences
• To calculate and distribute creator commissions
• To process brand subscription billing and settlements
• To communicate with you about orders, updates, and support
• To send marketing communications (only with your consent; you may opt out at any time)
• To analyze usage patterns and improve our services
• To prevent fraud and ensure platform security
• To comply with legal obligations

4. Sharing of Information

We do not sell your personal information. We may share your information in the following circumstances:

• Payment Processors: Stripe processes your payment information securely. Their privacy policy governs their use of your data.
• Shipping Partners: Shipping addresses and order details are shared with delivery carriers to fulfill your orders.
• Brands & Creators: Relevant order information is shared with brands for fulfillment and with creators for commission tracking.
• Service Providers: Cloud hosting (AWS), email services, and analytics tools that help us operate the platform.
• Legal Requirements: When required by law, court order, or governmental authority.

5. Data Retention

• Account information is retained for as long as your account is active.
• Order and payment records are retained for 5 years from the transaction date, as required by applicable tax and commercial laws.
• Upon account deletion, personal information is removed within 30 days, except where retention is required by law.
• Usage and analytics data may be retained in anonymized form for service improvement.

6. Data Security

We implement industry-standard security measures, including encrypted data transmission (HTTPS/TLS), secure password hashing, and access controls. Payment processing is handled entirely by Stripe, a PCI DSS-compliant payment processor. While we strive to protect your information, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for marketing communications
• Request a copy of your data in a portable format
• Lodge a complaint with a data protection authority

To exercise any of these rights, please contact us at privacy@thepicks.io.

8. Cookies

We use essential cookies for authentication and session management, and analytics cookies to understand how our platform is used. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the platform.

9. International Data Transfers

Our servers are located in the Republic of Korea (AWS ap-northeast-2). If you access our services from outside Korea, your information may be transferred to and processed in Korea. By using our services, you consent to such transfers.

10. Children's Privacy

Our services are not intended for individuals under the age of 14. We do not knowingly collect personal information from children under 14. If we become aware of such collection, we will promptly delete the information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact