Privacy policy

KIM operates this store and website, including all related data, content, features, tools, products, and services, in order to provide you, as a customer, with a personalized shopping experience (the “Services”). This Privacy Policy describes how we collect, use, and disclose your personal data when you use the Services—such as when you visit the website, make purchases or other transactions, or otherwise interact with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you confirm that you have read this Privacy Policy and understand how your data is collected, used, and disclosed as described herein.

Personal Data We Collect or Process

The term “personal data” refers to information that identifies you or another individual, or that can reasonably be linked to you or another individual. Personal data does not include information that is collected anonymously or de-identified so that it cannot reasonably be used to identify or be linked to you.

Below are the categories of personal data that we may collect or process, including inferences drawn from such data. The collection and processing depend on how you interact with the Services and where you reside and are carried out in accordance with applicable law.

  • Contact information, including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information, including credit card numbers, debit card numbers, financial account numbers, payment card and account details, transaction information, payment methods, payment confirmations, and other payment-related data.
  • Account information, including your username, password, security questions, and account settings.
  • Transaction information, including details about products you view, add to your cart or wish list, purchase, return, or exchange, as well as information about canceled purchases and past transactions.
  • Communications with us, including information you provide in messages sent to us, such as when contacting customer support.
  • Device information, including data about your device, web browser, or network connection, your IP address, and other unique identifiers.
  • Usage information, including information about how you interact with the Services, such as how and when you use the Services or navigate their interfaces.

Sources of Personal Data

We may obtain personal data from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, contact us, or otherwise provide us with your personal data.
  • Automatically through the Services, including data collected from your device when you use our products or services and visit our websites, as well as through cookies and similar technologies.
  • From our service providers, including when we engage them to provide certain technological solutions or when they collect or process personal data on our behalf.
  • From our partners or other third parties.

How We Use Your Personal Data

Depending on how you interact with us and which Services you use, we may use personal data for the following purposes:

  • Providing, customizing, and improving the Services. We use your personal data to provide the Services, including fulfilling our contractual obligations, processing payments, fulfilling orders, storing information about your preferences and products of interest, sending account-related notifications, processing purchases, returns, exchanges, and other transactions, creating and managing accounts, arranging delivery, facilitating returns and exchanges, enabling customer reviews, and providing a personalized shopping experience, such as displaying product recommendations related to your purchases. This may include using personal data to improve and tailor the Services to your needs.
  • Marketing and advertising. We use your personal data for marketing and promotional purposes, such as sending marketing, advertising, and promotional materials via email, SMS, or postal mail, and displaying online advertisements for products or services within the Services or on other websites, including advertisements based on products you have purchased, added to your cart, or other actions you take within the Services.
  • Security and fraud prevention. We use your personal data to authenticate your account, protect payment and purchasing processes, detect suspicious activity, investigate and take action against potentially fraudulent, illegal, unsafe, or harmful activities, and ensure public safety and the security of our Services. If you choose to register an account, you are responsible for keeping your login credentials secure. We strongly recommend that you do not share your username, password, or other access details with third parties.
  • Communicating with you. We use your personal data to provide customer support, respond to inquiries, deliver services efficiently, and maintain our business relationship with you.
  • Legal compliance. We use your personal data to comply with applicable laws or respond to lawful legal processes, including requests from law enforcement or government authorities, to conduct investigations, pre-trial disclosures in civil proceedings, and to participate in potential or ongoing litigation or other adversarial proceedings. We also use personal data to enforce our terms and policies and to investigate potential violations.

How We Disclose Personal Data

Under certain circumstances, we may disclose your personal data to third parties for legitimate purposes in accordance with this Privacy Policy, including:

  • Service providers and vendors that perform services on our behalf, such as IT infrastructure management, payment processing, data analytics, customer support, cloud storage, order fulfillment, and delivery.
  • Business and marketing partners that provide marketing services and display advertisements. These partners will use your data in accordance with their own privacy notices. Depending on your place of residence, you may have the right to opt out of the sharing of your data for targeted advertising based on your online activity across other merchants’ platforms and websites. You may exercise this right on the relevant page.
  • With your consent or at your direction, such as when you authorize us to share specific information with third parties (for example, to ship products to you or when you use social media widgets or third-party login integrations).
  • With our affiliates and entities within our corporate group.
  • In connection with a business transaction, such as a merger or bankruptcy, or to comply with legal obligations (including responding to subpoenas, search warrants, or similar requests), enforce applicable terms and policies, and protect the Services, our rights, and the rights of our users or others.

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties. If you follow links to websites not affiliated with or controlled by us, please review their privacy and security policies and terms of use. We are not responsible for the privacy or security of such websites, including the accuracy, completeness, or reliability of information found on them.

Information you post in public or partially restricted spaces (including content shared on third-party social media platforms) may be accessible to other users of the Services and/or users of those third-party platforms without restriction. The inclusion of such links does not imply endorsement of the content, owners, or operators of those platforms unless expressly stated.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal data from children under the age of majority in your jurisdiction. If you are a parent or legal guardian and believe that a child has provided us with personal data, you may contact us using the information below to request deletion of such data.

As of the effective date of this Privacy Policy, we are not aware of any “sharing” or “selling” (as defined by applicable law) of personal data of individuals under 16 years of age.

Data Security and Retention

Please note that no security measure is perfect or completely risk-free, and we cannot guarantee “absolute security.” Information you send to us may not be secure during transmission. We recommend that you do not use unsecured communication channels to send confidential information.

The retention period for your personal data depends on various factors, including whether the data is needed to maintain your account, provide the Services, comply with legal obligations, resolve disputes, and enforce applicable agreements and policies.

Your Rights and Data Management

Depending on your place of residence, you may have some or all of the following rights regarding your personal data. These rights are not absolute and may apply only in certain circumstances, and we may deny requests as permitted by law.

  • Right of access. You may have the right to request access to the personal data we hold about you.
  • Right to deletion. You may have the right to request deletion of your personal data.
  • Right to correction. You may have the right to request correction of inaccurate personal data.
  • Right to data portability. You may have the right to receive a copy of your personal data and request that it be transferred to a third party under certain conditions.
  • Right to opt out of sale or sharing for targeted advertising. Depending on your location, you may have the right to opt out of the “sale” or “sharing” of your personal data or its processing for purposes considered “targeted advertising” under applicable privacy laws. You may exercise this right on the relevant page. If you access our website with the Global Privacy Control (GPC) signal enabled, we will treat it as an opt-out request for that device and browser, and if the device can be linked to an account, the opt-out will apply to the account as well. We recognize only the GPC signal and do not respond to other “Do Not Track” signals.
  • Communication preferences. You may opt out of receiving promotional emails at any time using the unsubscribe link in our messages. Even if you opt out of marketing communications, we may still send you non-promotional messages related to your account or orders.

If you reside in the United Kingdom or the European Economic Area, you may also have the following additional rights, subject to applicable limitations:

  • Right to object to or restrict processing.
  • Right to withdraw consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You may exercise your rights through the Services or by contacting us using the information below. We will not discriminate against you for exercising your rights. We may need to verify your identity before processing your request. Where permitted by law, you may appoint an authorized agent to act on your behalf.

Complaints

If you have complaints regarding how we process your personal data, please contact us using the information below. Depending on your location, you may have the right to appeal our decision or lodge a complaint with your local data protection authority. For the European Economic Area, a list of supervisory authorities is available on the relevant EU website.

Cross-Border Data Transfers

Please note that we may transfer, store, and process your personal data outside your country of residence. Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent UK-approved arrangements, unless the data is transferred to a country deemed to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. The updated version will be posted on this website, the “Last updated” date will be revised, and we will provide notice as required by applicable law.

Contact Information

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise your rights, please email us at info@kim.limited.
For the purposes of applicable data protection laws, we act as the data controller of your personal data.