Privacy Policy

[LEGAL ENTITY NAME] is the data controller for personal data collected through this site. That means we decide why and how your data is used.

Address: [STREET ADDRESS], [CITY], [STATE] [ZIP], United States.

Privacy questions go to privacy@akindo.world.

We collect only what we need to run the store and deliver your order.

• Order data. Name, billing address, shipping address, email address, phone number, and what you ordered.
• Payment data. Payment method details are collected by our payment processor, not by us. We receive a confirmation, the last four digits, card brand, and billing postcode.
• Account and contact data. Anything you give us when you write to us or sign up for messages.
• Technical data. IP address, browser type, device type, referring page, and pages viewed. Used for security, diagnostics, and understanding what is broken.
• Cookie and similar data. See section 8.

If you are in the UK or the European Economic Area, the table below states our legal basis under the GDPR for each purpose. Where you are elsewhere, the purposes are the same and the basis is the lawful reason we may use the data under local law.

• To take and fulfil your order. Legal basis: performance of a contract.
• To take payment and prevent fraud. Legal basis: legitimate interests in running a secure business, and legal obligation for financial record keeping.
• To provide support and handle returns. Legal basis: performance of a contract and legitimate interests.
• To send service messages about an order, a delivery, or a change to these policies. Legal basis: performance of a contract and legal obligation.
• To send marketing where you have opted in. Legal basis: consent, which you can withdraw at any time.
• To improve the site and fix problems. Legal basis: legitimate interests, with data minimised and, where possible, aggregated.
• To meet legal obligations including tax, accounting, product safety reporting, and responding to lawful requests. Legal basis: legal obligation.

We do not sell your personal data. We share it only with the parties needed to run the store.

• Payment processor. Card and payment details go directly to the processor. We never see the full card number.
• Fulfilment and logistics partners. Name, address, and the contents of your order go to the warehouse that picks and packs it and to the carrier that delivers it.
• Service providers. Hosting, email delivery, error monitoring, and analytics, each bound by contract to use the data only on our instructions.
• Professional advisers and authorities. Where the law requires it, or where needed to protect our rights, our customers, or the public.
• Business transfers. If the business is acquired or restructured, customer data may transfer as part of that, subject to this policy.

Fulfilment partners are located outside your country. Your data will be transferred to, stored in, and processed in countries other than the one you live in, including the United States and China.

Where the GDPR applies, we rely on appropriate safeguards for those transfers, including standard contractual clauses approved by the European Commission and the UK International Data Transfer Addendum, together with transfer risk assessments where required.

• Order records. Kept for 7 years from the end of the tax year of the order, to meet accounting and tax obligations.
• Support correspondence. Kept for 3 years from the last contact, unless it relates to a dispute, in which case we keep it until the matter is resolved and the limitation period has passed.
• Marketing consent records. Kept for as long as you are subscribed, then a minimal suppression record so we do not contact you again by mistake.
• Technical logs. Kept for up to 12 months unless needed longer for a security investigation.

Depending on where you live, you have some or all of the following rights. We will respond within the period required by law, which is one month under the GDPR and 45 days under the CCPA.

• Access. Ask for a copy of the personal data we hold about you.
• Correction. Ask us to fix data that is wrong or incomplete.
• Deletion. Ask us to delete your data. We keep what the law requires us to keep, and we tell you what that is.
• Restriction and objection. Ask us to stop using your data in certain ways, including for direct marketing.
• Portability. Ask for your data in a machine-readable format to give to another provider.
• Withdraw consent. Where processing is based on consent, withdraw it at any time without affecting prior lawful use.
• Opt out of sale or sharing. Under the CCPA and similar US state laws. We do not sell personal data, but you may submit an opt-out request at any time and we will honour it.
• Non-discrimination. We will not treat you differently for exercising any of these rights.

To exercise a right, write to privacy@akindo.world. We may need to verify your identity before acting. You may also lodge a complaint with your local supervisory authority.

We use a small number of cookies and local storage entries. None of them are used to build a profile of you for advertising resale.

• Strictly necessary. Session handling, cart contents, fraud prevention, load balancing. These cannot be turned off if you want the site to work.
• Preferences. Things like your theme choice, stored on your device.
• Analytics. Aggregated page view and error data so we can tell what is broken. Collected without cross-site tracking where the tool allows it.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop the cart and checkout from working.

This site is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us data, write to privacy@akindo.world and we will delete it.

We use industry-standard technical and organisational measures, including encryption in transit, access controls, and least-privilege access to production systems. No system is perfectly secure and we cannot guarantee absolute security. If we learn of a breach that affects your personal data, we will notify you and the relevant authorities within the time the law requires.

We may update this policy from time to time. The effective date at the top shows when the current version took effect. Where a change is material, we will make that clear on the site or by email before it applies.

Privacy requests and questions: privacy@akindo.world.

Postal: [STREET ADDRESS], [CITY], [STATE] [ZIP].