Privacy policy

At KainRuffle, we are committed to safeguarding the privacy and security of every visitor to our online store. This Privacy Policy explains, in plain and transparent terms, how we collect, use, store, and protect your personal information when you browse or make a purchase from our collection of shirts, pants & trousers, and skirts. We adhere to internationally recognised data protection principles, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to ensure your rights are respected at all times.

1. Information We Collect

We collect only the information necessary to process your orders, improve our services, and communicate with you effectively. The types of data we may collect include:

Contact details: your name, shipping address, billing address, and email address ([email protected] is used for all privacy-related correspondence).
Payment information: payment card details, PayPal account, or other payment method data. We do not store full card numbers on our servers; they are processed by our secure payment gateway providers.
Order history: details of the products you have purchased, including sizes, colours, and quantities.
Technical data: IP address, browser type, device information, and cookies (as described in Section 5).
Communication records: any messages or enquiries you send to us via email or our contact forms.

2. How We Use Your Information

Your personal data is used solely for legitimate business purposes, including:

Processing and delivering your orders, including sending order confirmations and shipping updates.
Handling returns, exchanges, and customer service enquiries.
Improving our website, product selection, and user experience through aggregated analytics.
Sending you promotional emails or newsletters, but only if you have explicitly opted in. You can unsubscribe at any time with one click.
Complying with legal obligations, such as tax, accounting, or fraud prevention requirements.

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

3. Legal Basis for Processing (GDPR)

For users within the European Economic Area (EEA), we process your data based on the following legal grounds:

Contract performance: processing is necessary to fulfil your order or to take steps at your request before placing an order.
Legitimate interests: for analytics, fraud prevention, and improving our services, provided your rights do not override these interests.
Consent: for marketing communications, where you have given clear, affirmative consent.
Legal obligation: where we are required to retain or disclose data under applicable law.

4. Data Storage and Retention

We store your personal data on secure servers located in data centres that comply with international security standards. We retain your information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:

Order records are kept for a period of 7 years to meet tax and accounting obligations.
Email communications and customer service records are retained for 3 years after the last interaction.
Marketing preferences are kept until you withdraw your consent or request deletion.

Once the retention period expires, your data is securely deleted or anonymised.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and understand how our store is used. These include:

Essential cookies: required for the website to function, such as remembering items in your cart.
Analytics cookies: help us understand which pages are most popular and how visitors navigate our site.
Preference cookies: remember your language or currency preferences.

You can control or disable cookies through your browser settings at any time. However, please note that disabling essential cookies may affect your ability to complete a purchase. We do not use third-party advertising cookies without your explicit consent.

6. Sharing and Disclosure

We do not share your personal information with third parties except in the following limited circumstances:

Service providers: trusted partners who assist us with payment processing, shipping, email delivery, and website hosting. These providers are contractually bound to protect your data and may only use it for the specific services they perform for us.
Legal authorities: if required by law, court order, or government regulation, or if disclosure is necessary to protect our rights, safety, or property.
Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, with appropriate notice provided.

All third-party processors are carefully vetted and comply with applicable data protection laws.

7. International Data Transfers

As an international online store, we may transfer your data to countries outside your country of residence. When we do so, we ensure that appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission.
Privacy Shield or equivalent certification frameworks, where applicable.
Other legally recognised transfer mechanisms that ensure your data remains protected.

By using our website, you acknowledge that your information may be processed in countries with different data protection laws, but we always apply a high standard of care regardless of location.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you.
Rectification: correct any inaccurate or incomplete information.
Erasure: ask us to delete your data, subject to legal retention requirements.
Restriction: limit how we process your data in certain circumstances.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interests or direct marketing.
Withdraw consent: at any time, for any processing based on your consent.

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request, but we will never use this verification process to delay or deny your rights.

9. Data Security Measures

We implement robust technical and organisational measures to protect your personal information, including:

Encryption: all data transmitted between your browser and our website is secured using SSL/TLS (256-bit encryption).
Access controls: only authorised personnel have access to personal data, and they are bound by confidentiality agreements.
Regular audits: we conduct periodic security reviews and vulnerability scans of our systems.
Secure payment processing: payment transactions are handled by PCI-DSS compliant providers, ensuring your financial details are never exposed to us directly.

While no method of transmission over the internet is 100% secure, we strive to use commercially acceptable means to protect your data.

10. Children's Privacy

Our website is not intended for children under the age of 16, and we do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us at [email protected] so we can promptly remove the information from our records.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page, and the revised version will apply to all data collected after the date of publication. We encourage you to review this page periodically to stay informed about how we protect your information.