Privacy Notice for Kit#Kat Curios (KKC)
Please note that we are committed to safeguarding the privacy of our website visitors and service users. This applies where we are acting as a data controller with respect to the personal data of our website visitors and service users (that is, where we determine the purposes and means of the processing of that personal data).
What type of information we collect and/or process
We currently collect and process the following information:
Personal identifiers, contacts and characteristics
Typically, this may include name and contact details along with usage data such as your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of service use. This usage data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is "legitimate interest", specifically for monitoring and improving our website and services to provide the best possible customer experience.
Account data
Typically, this may include your name, address and email address. The source of the data is the Account Sign-up form. This data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is "contractual", namely, the performance of a contract between you and KKC and/or taking steps, at your request, to enter into such a contract.
Enquiry data
This relates to information contained in any enquiry you submit to us regarding goods and/or services and may be processed for the purposes of answering your query. The legal basis for this processing is "consent".
Transaction data
This relates to information about transactions that you enter into with us and/or through our website, including purchases of goods and services. The data may include your contact details, your card details and the transaction details. The data may be processed for the purpose of supplying any purchased goods or services and keeping proper records of those transactions. The legal basis for this processing is "contractual", namely the performance of a contract between you and KKC and/or taking steps, at your request, to enter into such a contract, and also our legitimate interests, namely the appropriate administration of our website and business.
Notification data
This relates to information that you may provide to us for the purpose of subscribing to our email notifications and/or newsletters. The data may be processed for the purposes of sending you relevant notifications and/or newsletters. The legal basis for this processing is "consent".
How we (KKC) get the information and why we have it
Most of the personal information we process is provided to KKC directly by you for one (or more) of the following reasons:
**A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies may be either "session" cookies or "persistent" cookies. A session cookie will expire at the end of the user session when the web browser is closed. A persistent cookie will be stored by a web browser and will remain valid until its set expiry date (unless deleted by the user before the expiry date). Note that cookies do not usually contain any information that personally identifies you, but personal information that we store may be linked to the information stored in and retrieved from cookies.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
What we do with the information we have
We use the information that you provide in order to carry out the business processing described above.
We may share information with or disclose your personal data to the following organisations or individuals in order to complete business transaction.
Delivery companies. Only limited information is passed to these organisations in order to ensure delivery of your items.
The KKC store is built with and hosted on https://stor.co. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Stor’s data storage, databases and the general Stor application. They store your data on a secure server behind a firewall. Their Privacy Policy can be accessed via their web site.
Marketing Companies. From time to time we may use marketing companies to help us manage our electronic communications with you or carry out surveys and product reviews on our behalf.
Financial transactions relating to our website and services are handled by our payment services providers, Trust Payments. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. Information about the payment services providers' Privacy Policy and practices can be accessed via their web site.
Your information is securely stored with our web site host organisation and the companies which process card and other payments.
Your data protection rights
Under data protection law, you have rights including:
Your right of access -- you have the right to ask us for copies of your personal information.
Your right to rectification -- you have the right to ask us to rectify information you think is inaccurate; you also have the right to ask us to complete information you think is incomplete.
Your right to erasure -- you have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing -- you have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing -- you have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability -- you have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us if you wish to make a request -- contact details are given below.
Retention and Deletion of personal data
The policy and procedures set out here are designed to ensure that we comply with our legal obligations.
Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
We will retain your personal data as follows:
How to complain
You can complain to the Information Commissioner’s Office (ICO) if you are not happy with how we have used your data.
Their address is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Our contact details
Name: Kit#Kat Curios
Address: 16 Tregorrick View
St Austell
Cornwall
PL25 4EE
United Kingdom
Mobile: (+44) 07804 637301
E-mail: kitkatcurios@gmail.com
Date of this edition: 10th August 2022; Version number:
We may modify this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are in accord with any changes (which will be identified by a changed date and version number). We may notify you of significant changes to this policy by email.
