Outreach Privacy Notice

Last updated: August 16, 2026

This notice applies when PAULGA contacts, or seeks permission to contact, a university, student association, student council, or another professional organization about a PAULGA Campus proposal. It supplements our general Privacy Policy.

Controller and contact

The controller is PAULGA, operated by Inchan Baek, business registration number 438-02-04020, at 103-1804, 16 Hyowon-ro 308beon-gil, Paldal-gu, Suwon-si, Gyeonggi-do, Republic of Korea. For privacy requests, objections, or consent withdrawal, email support@paulga.com or call +82 10-3203-8941.

Information we process

• professional or organizational contact details, such as a name, public role, organization, school, functional email address, and country;
• the official public page, partnership channel, referral, or direct response from which the details came;
• consent records, including the consent wording and version, the sending address, date and time, authorized role, and any later withdrawal; and
• our correspondence, including replies, objections, delivery failures, and a minimal suppression record.

The campus partner consent page does not submit form entries to PAULGA or intentionally write them to local or session storage. It prepares text locally in the browser. Choosing “Open email app” passes the prepared text to the representative’s configured email application; choosing “Copy email text” places it on the device clipboard. A browser, operating system, or email application may handle that information under the representative’s own settings. PAULGA receives it only if the representative sends the generated email.

Sources

We obtain contact details from the individual or organization directly, an official partnership or external-affairs channel, an authorized referral, or a public page maintained by the relevant school or organization. When we first use publicly sourced personal data, we identify the specific source in the message where practicable.

Purposes and legal bases

• Permission-led outreach — to record and act on express consent where electronic-marketing law requires it. The GDPR basis is consent under Article 6(1)(a).
• Relevant organizational proposals — where local electronic-marketing law permits a purpose-matched message to an organizational contact, our GDPR basis is the legitimate interest under Article 6(1)(f) in assessing a limited, relevant campus partnership.
• Required compliance records and notices — to prove the permission received and provide legally required consent, refusal, or withdrawal notices. Where EU law applies, the basis is Article 6(1)(c) to comply with a legal obligation.
• Suppression and dispute handling — to honor an objection or withdrawal, prevent repeat contact, and handle disputes using the minimum record. Where EU law applies, the basis is Article 6(1)(f): our legitimate interest in respecting requests and demonstrating responsible outreach.

A legitimate-interest basis never overrides a rule that requires prior consent for the communication channel. Consent to receive a proposal is optional, may be refused without consequence, and does not create a contract, purchase obligation, or endorsement.

Outreach limits

Where a representative uses consent version campus-outreach-email-v1.1-2026-08-16, permission covers one PAULGA Campus proposal sent within 14 days of consent and no more than one directly related follow-up within 30 days of the proposal. Permission ends after both allowed emails are sent, 30 days after the proposal, or automatically if no proposal is sent within 14 days. We do not use an outreach tracking pixel or make automated decisions about recipients.

Recipients and international processing

Access is limited to PAULGA personnel who need it for campus outreach, support, legal compliance, or security. Plus Five Five, Inc. (Resend) sends one-to-one outbound emails and stores related message and delivery-event data. Cloudflare, Inc. operates Email Routing for support@paulga.com and forwards incoming replies and opt-out requests to a PAULGA-controlled Gmail mailbox. Google LLC provides that destination Gmail service and stores the forwarded correspondence. Vercel Inc. delivers this website on PAULGA’s Pro plan and may process technical request and security logs, including an IP address and system-configuration information, when the page is visited. Form-field values are not submitted to Vercel by this page, and Vercel Analytics is disabled on this page.

PAULGA is established in the Republic of Korea, so information sent to us is processed in Korea. The European Commission has adopted an adequacy decision for covered transfers to the Republic of Korea. Resend, Cloudflare, Google, Vercel, and their subprocessors may also process information in the United States or other listed locations. The Resend Data Processing Addendum, Cloudflare Data Processing Addendum, and Vercel Data Processing Addendum provide the applicable EU Standard Contractual Clauses and UK transfer terms. Google states that Google LLC participates in the EU–US Data Privacy Framework, its UK Extension, and the Swiss–US Data Privacy Framework. Current subprocessor and location information is available from each provider’s published privacy or security materials.

Retention

• Public-source prospect details with no permission or response are removed from the active outreach register within 90 days after the last permitted contact.
• Consent evidence and related correspondence are retained for up to three years after the last covered message or withdrawal, unless a dispute or legal duty requires longer retention.
• After an objection or withdrawal, we keep only the minimum suppression record while PAULGA conducts campus outreach, with an annual review. We delete it when the address is permanently invalid or PAULGA ends campus outreach, unless a legal claim or duty requires longer retention. It is not used for promotion.

Your rights and direct-marketing objection

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or information about your data. You may object to direct marketing at any time, or withdraw consent, by replying “unsubscribe” or emailing support@paulga.com. We will stop covered marketing without requiring a reason. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

EU/EEA individuals may complain to their local supervisory authority; a list is available from the European Data Protection Board. The Netherlands authority is the Autoriteit Persoonsgegevens. UK individuals may contact the Information Commissioner’s Office, and Swiss individuals the Federal Data Protection and Information Commissioner. Korean individuals may contact the Personal Information Protection Commission.

Changes

If this notice changes materially, the updated version and date will be posted here. A later notice does not expand an existing email consent beyond the wording the representative agreed to.