1.1. The Konscious Group Ltd powers the www.konsciouskind.com shop (‘Service’). We are committed to protecting your data as a customer or site visitor.
1.3. We use data to provide and continue to improve our Service. By using it, you agree to this Policy, part of our terms and conditions (‘Terms’).
2. Data collection and usage
2.1. We collect data to be able to offer you, as a customer and visitor, a high-quality customised experience, as well as to improve our offer.
2.2. We only use the data we collect to carry out the services under our contractual and legal obligations, and for our legitimate interests, including:
2.2.1. Processing orders and payments.
2.2.2. Responding to questions, requests, or complaints, as well as to keep records of these to evidence any previous communication in the future.
2.2.3. Keeping you up to date with improvements to our Service via custom email communications.
2.2.4. Managing your entry in any promotional competitions or prize draws.
2.2.5. Sending surveys and collecting feedback.
2.3. Our legitimate interests include:
2.3.1. Understanding which products or services may interest you and improving them.
2.3.2. Understanding who is or may be interested in our products and services.
2.3.3. Maintaining and updating our records.
2.3.4. Compliance with the law.
2.3.5. Protecting our business from malicious attacks or illegal activities.
2.4. We collect your personal data when you:
2.4.1. Place an order.
2.4.2. Sign up to our newsletter.
2.4.3. Engage with us on social media.
2.4.4. Get in touch with us through email or a contact form.
2.4.5. Complete surveys we may send to you.
2.5. For the purposes outlined above, we may collect the following types of data:
2.5.2. Email address.
2.5.3. Delivery address (used for billing as well).
2.5.4. Phone number.
2.5.5. Payment details.
2.5.6. Other data we may collect for market research and analytics includes IP addresses, webpage usage and social media profiles. This helps us understand the interests of our visitors to continue to improve our Service.
2.6. Children’s privacy.
2.6.1. We do not address anyone under the age of 18 (“Children”).
2.6.2. We do not knowingly collect personally identifiable data from Children. If you are a parent or guardian, and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware we have collected Personal Data from Children without parental consent, we will take steps to remove that data from our servers.
3. Data protection
3.1. Your data is protected by law beyond what’s described in this Policy.
3.2. We take reasonable skill and care to comply with data protection laws
3.3. Data Protection laws allow us to collect and use your personal information where there are valid reasons for doing so. These include:
3.3.1. Having received your consent.
3.3.2. For fulfilling contracture obligations.
3.3.3. For fulfilling legal obligations.
3.3.4. Having a legitimate interest recognised by the law.
3.4. If you reside in the European Economic Area (EEA), you have certain data protection rights defined by the General Data Protection Regulation (GDPR). Your data protection rights include:
3.4.1. Right to access, update or delete the information we have on you.
3.4.2. Right of rectification. Your information can be rectified, should you find it inaccurate or incomplete.
3.4.3. Right to object to the processing of your personal information.
3.4.4. Right of restriction to the processing of your personal information.
3.4.5. Right of data portability. You have the right to be provided with a copy of the personal data we store in a structured, readable, and appropriate format.
3.4.6. Right to withdraw consent. You can withdraw your consent to the processing of your data.
3.5. Should you wish to exercise any of your rights upon the personal data we hold about you, please contact us. Note that, for confidentiality and security purposes, we may ask you to verify your identity prior to proceeding with any request.
3.6. You also have the right to complain to a Data Protection Authority within the EEA about the processing of your personal data by us.
4. Data sharing
4.1. We do not sell, rent, or trade any personal information.
4.2. Note that certain information may be shared with trusted third parties who help provide this Service and carry out all our contractual and legal obligations. These may include payment providers, fulfilment partners and couriers.
4.3. However, under certain circumstances, we may need to disclose your data if required to do so by law or if validly required by relevant public authorities such as a court or a governing agency.
4.4. Other reasons for which your data may be disclosed, always in good faith, include:
4.4.1. To protect and defend our rights and property.
4.4.2. To prevent or investigate possible malicious actions in connection with this Service.
4.4.3. To protect your own personal safety as a user of this Service or that of the public.
4.4.4. To protect ourselves against legal liability.
5. Data storage
5.1. We keep your information only for as long as is necessary to provide you with our agreed services, carry out the purposes outlined in this Policy, fulfil our legal obligations, and any applicable orders of regulatory bodies or courts.
5.2. The data we collect is stored in a password protected area and can only be accessed with authorisation.
5.3. Our server hosting service provider has numerous security measures put in place to protect any data which may be stored in our server to block malicious bots and attackers, constantly scanning for vulnerabilities and, whenever possible, developing web application firewalls.
5.4. Strict policies are followed to ensure personal data is accessed only by trusted personal on request and records are kept for such access.
7.1. We may update this Policy at any time, with the changes becoming effective immediately. Any changes will be reflected in this online page.
7.2. We advise you to review this Policy periodically for any changes.
8.1. If you have any questions regarding this Policy, please contact us at email@example.com.
8.2. Should you have further questions or feel your case requires external evaluation, you have the right to file a complaint with the relevant data protection body in your country of residence.
Version 2021.1 (last updated on 13/10/2021)