Privacy Policy

This policy explains how ShopKydara collects, uses, shares and protects personal information. We aim to provide enough detail for customers to understand the processing without publishing commercially sensitive information about our internal systems or service arrangements.

Information we collect

• Identity and contact information, including name, billing address, delivery address, email address and telephone number.
• Order and transaction information, including products, prices, payment status, refunds, returns and support history.
• Technical and security information, including IP address, browser, device, cookie identifiers, login activity and fraud-prevention signals.
• Communications, reviews, photographs, videos and other evidence voluntarily supplied during support, delivery or return enquiries.

How we use information

We use information to operate the website, process payment, manage orders, arrange delivery, provide customer support, administer returns, prevent fraud, secure accounts, comply with tax and legal obligations, improve service performance and manage legal claims.

Lawful bases

• Contract: processing needed to take steps at the customer’s request, fulfil an order, arrange delivery and provide after-sales support.
• Legal obligation: processing required for tax, accounting, consumer-protection, product-safety and lawful-authority requirements.
• Legitimate interests: security, fraud prevention, claim management, service improvement and protection of the business, balanced against individual rights.
• Consent: optional marketing and non-essential cookies where consent is required. Consent may be withdrawn.

Who receives information

We share information only where reasonably necessary with categories of service providers supporting website infrastructure, security, payment processing, order fulfilment, delivery, communications, analytics, marketing used with appropriate controls, customer support and professional advice.

For an order, these services receive only the information reasonably required to process payment, pack, dispatch, track, deliver or resolve that order. We do not publish the names of every operational service provider because those arrangements can change, but we remain responsible for giving the categories, purposes and safeguards required by law.

International transfers

Some service providers may process information outside the United Kingdom. Where required, we use recognised safeguards or another lawful transfer mechanism. International processing does not authorise unrestricted or unrelated use of customer information.

Payment information

Full payment-card information is normally entered into and processed by a specialist payment service rather than stored by us. We may receive transaction references, payment status, limited card details and fraud-prevention results needed to manage the order.

Retention

Order, payment and tax records are retained for the period required by legal and accounting obligations, commonly up to six years. Support, security, fraud-prevention and dispute records may be retained for a proportionate period based on the nature of the issue and the applicable limitation period.

Information is deleted, anonymised or restricted when it is no longer reasonably required, subject to backups and legal holds.

Cookies and similar technologies

Essential technologies support basket, checkout, account and security functions. Optional analytics or advertising technologies should be used only with the required choice or consent. Available controls may include the site cookie interface and browser settings.

Individual rights

Depending on the circumstances, individuals may have rights of access, correction, erasure, restriction, objection and portability, and the right to withdraw consent. These rights are not absolute. We may retain or restrict information where necessary for legal obligations, fraud prevention, security, payment disputes or legal claims.

Requests can be sent to support@shopkydara.com. We may request proportionate identity verification before disclosing or changing personal information.

Automated checks

We may use automated signals to identify unusual transactions, account misuse or security risk. A flagged transaction may be delayed or referred for human review. We do not rely solely on automated processing to make a decision producing a legal or similarly significant effect unless permitted by law and accompanied by the required safeguards.

Complaints

Please contact us first so we can investigate. Individuals may also complain to the UK Information Commissioner’s Office if they believe data-protection law has been breached.

Security and policy changes

We use proportionate technical and organisational measures, but no online system is completely risk-free. We may update this policy when our services, processing activities or legal obligations change. The latest version is identified by the updated date shown on the page.