KingdomMerch Privacy Notice
Last updated: December 12, 2024
Your Privacy Matters
At KingdomMerch, we know that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly. This Privacy Notice describes how KingdomMerch and its affiliates collect and process your personal information through KingdomMerch websites, applications, and services that reference this Privacy Notice.
What Personal Information About Customers Does KingdomMerch Collect?
We collect your personal information in order to provide and continually improve our products and services.
Information You Give Us
You provide information when you:
- Search for products or services
- Place an order through KingdomMerch
- Provide information in your account
- Communicate with us by phone, email, or otherwise
- Complete a questionnaire, support ticket, or contest entry form
- Upload or stream images, videos, or other files
- Compile playlists, wishlists, or gift registries
- Participate in community features
Examples of information we collect include: name, email address, physical address, phone number, payment information, and purchase history.
Automatic Information
We automatically collect and store certain types of information about your use of KingdomMerch services, including information about your interaction with products, content, and services. Like many websites, we use cookies and other unique identifiers, and we obtain certain types of information when your web browser or device accesses KingdomMerch services and other content served by or on behalf of KingdomMerch on other websites.
Examples include: IP address, device identifiers, browser type, operating system, referring URLs, and information about your interactions with our services.
Information from Other Sources
We might receive information about you from other sources, such as updated delivery and address information from our carriers, which we use to correct our records and deliver your next purchase more easily.
For What Purposes Does KingdomMerch Use Your Personal Information?
We use your personal information to operate, provide, develop, and improve the products and services that we offer our customers. These purposes include:
Purchase and delivery of products and services
We use your personal information to take and fulfill orders, deliver products and services, process payments, and communicate with you about orders, products and services, and promotional offers.
Provide, troubleshoot, and improve KingdomMerch services
We use your personal information to provide functionality, analyze performance, fix errors, and improve the usability and effectiveness of KingdomMerch services.
Recommendations and personalization
We use your personal information to recommend features, products, and services that might be of interest to you, identify your preferences, and personalize your experience with KingdomMerch services.
Comply with legal obligations
In certain cases, we collect and use your personal information to comply with laws. For instance, we collect information from vendors about the place of establishment and bank account information for identity verification and other purposes.
Communicate with you
We use your personal information to communicate with you in relation to KingdomMerch services via different channels (e.g., by phone, email, chat).
Fraud prevention and credit risks
We use personal information to prevent and detect fraud and abuse in order to protect the security of our customers, KingdomMerch, and others. We may also use scoring methods to assess and manage credit risks.
3. Email Communications
We send transactional emails including:
- Welcome emails when you register
- Order confirmations after purchase
- Password reset codes
- Vendor application updates
These emails are sent via Amazon SES from info@kingdommerch.co.uk
4. Information Sharing and International Transfers
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
- Service providers who assist in operating our website (AWS, Vercel, Stripe)
- Payment processors to complete transactions (Stripe - PCI DSS compliant)
- Shipping companies to deliver your orders
International Transfers: Your data may be transferred to and processed in countries outside the UK/EU, including the United States (AWS servers). We ensure appropriate safeguards are in place through Standard Contractual Clauses and adequacy decisions.
5. Data Security and Retention
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure password hashing (bcrypt)
- Regular security audits
- Access controls and authentication
Data Retention: We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Account data is retained while your account is active. Order data is retained for 7 years for tax and legal purposes.
6. Cookies and Tracking
We use cookies and similar technologies to enhance your browsing experience. Types of cookies we use:
- Essential Cookies: Required for website functionality (authentication, cart)
- Performance Cookies: Help us understand how visitors use our site
- Functional Cookies: Remember your preferences
You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.
Legal Basis for Processing: We process your data based on consent, contract performance, legal obligations, and legitimate interests.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing of your data
- Right to Withdraw Consent: Withdraw consent at any time
To exercise any of these rights, contact us at info@kingdommerch.co.uk. We will respond within 30 days.
8. Children's Privacy
Our website is not intended for children under 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.
How Can You Contact KingdomMerch About Privacy Questions?
If you have questions or concerns about KingdomMerch's Privacy Notice or data processing, please contact us at:
Email: info@kingdommerch.co.uk
Website: www.kingdommerch.co.uk
Address: KingdomMerch, United Kingdom
Right to Lodge a Complaint: If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.
Conditions of Use, Notices, and Revisions
If you choose to use KingdomMerch services, your use and any dispute over privacy is subject to this Notice and our Terms of Service. If you have any concern about privacy at KingdomMerch, please contact us with a thorough description, and we will try to resolve it. Our business changes constantly, and our Privacy Notice will change also. You should check our websites frequently to see recent changes.