Privacy policy

1. Who is responsible for your data

[Registered company name], trading as Kit Empire, of [Street, City, Postcode, Country], is the controller of the personal data described here. For anything in this policy, contact teams@kitempire.com.

2. What we collect

• Order data — name, email, delivery and billing address, phone number, and what you ordered.
• Payment data — handled by our payment provider. We receive a confirmation and the last four digits of the card; we never see or store the full card number.
• Account and contact data — anything you send us by email, and your marketing preferences if you opt in.
• Technical data — IP address, device and browser type, and pages viewed, collected through cookies and similar technologies. See our cookie policy.

Your shopping bag is stored in your own browser’s local storage, not on our servers, until you check out.

3. Why we use it, and on what basis

• To perform our contract with you — taking payment, fulfilling and delivering your order, handling returns and support.
• To meet legal obligations — keeping tax and accounting records.
• For our legitimate interests — preventing fraud, securing the site, and understanding aggregate usage so we can improve it, balanced against your rights.
• With your consent — marketing email and any non-essential cookies. You can withdraw consent at any time.

4. Who we share it with

We share data only with providers who need it to run the store: our payment processor, our shipping and fulfilment partners, our email provider, and our hosting and analytics providers. They act on our instructions and may not use your data for their own purposes. We do not sell your personal data.

We may also disclose data where the law requires it, or to establish or defend legal claims.

5. International transfers

Some providers are outside your country. Where data is transferred across borders, we rely on an adequacy decision or on standard contractual clauses to protect it.

6. How long we keep it

• Order and transaction records: as long as tax and accounting law requires.
• Support correspondence: up to 3 years after the matter is closed.
• Marketing consent records: until you withdraw consent, plus a short period to evidence the withdrawal.
• Analytics data: retained in aggregate, or as stated in our cookie policy.

7. Your rights

Subject to the law that applies to you, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can also withdraw consent and opt out of marketing at any time — every marketing email has an unsubscribe link.

Email teams@kitempire.com and we will respond within the period the law allows. If you are not satisfied, you may complain to your local data protection authority.

8. Security

The site is served over HTTPS and payment data is handled by a PCI-DSS compliant provider. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

9. Children

This store is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes

If we make a material change to this policy we will update the date at the top of this page and, where required, notify you directly.