Privacy Policy

Kindral is the data controller for the personal information described in this policy. This policy explains how we collect and use that information when you shop with us or use kindralshop.com, and should be read alongside our Terms of Service.

If you have any question about it, or want to exercise any of the rights set out below, email [email protected].

Information you give us: your name, email address, delivery and billing address, phone number where you provide one, and the contents of any message you send us.

Information about your orders: what you bought, order value, delivery method and order status. Your card details are entered directly with our payment provider and never reach our servers.

Information collected automatically: IP address, approximate country, device type, browser, the pages you view and the site you arrived from.

To take and fulfil your order, handle returns and provide customer support. Lawful basis: performance of a contract with you.

To send you order confirmations, dispatch and delivery updates. Lawful basis: performance of a contract.

To send marketing emails, where you have asked us to. Lawful basis: your consent, which you can withdraw at any time using the unsubscribe link in any marketing email or by emailing us.

To keep the site secure, prevent fraud, understand how the site is used and improve it. Lawful basis: our legitimate interests in running and protecting the business.

To meet our legal duties, including keeping records of sales for tax purposes. Lawful basis: compliance with a legal obligation.

We set a small number of first party cookies that are necessary for the site to work: one that remembers your basket and signed in session, one that remembers which regional storefront you chose, and one that gives your visit an anonymous session identifier so a single visit is not counted repeatedly.

We use Google Analytics 4 and Microsoft Clarity to understand how the site is used, and Google Ads to measure and target our advertising, including remarketing. These set third party cookies and share data with Google and Microsoft, which may process it outside the UK.

If you are in the UK, the European Economic Area, South Africa or Canada, these stay off until you accept them in the cookie banner. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

We also record a basic server side record of each page view (country, device type, browser, referring site) so we can see traffic levels without relying on a third party.

A first party cookie remembers, for up to 90 days, how you reached the site: the referring website, the page you landed on, and any campaign tag or advertising click identifier in the link. If you place an order, this is saved with it so we can tell which adverts and listings lead to sales. It holds no name, email or payment details.

Payments are processed by Stripe and PayPal, who act as independent controllers of the payment data you give them. We receive confirmation of payment and the billing details needed to fulfil and account for your order. We never see or store your full card number.

We share personal information only with the providers who help us run the store: our payment providers, our delivery partners, our email provider, our hosting and analytics providers, and our suppliers where they ship an item to you directly.

Some of these providers are based outside the UK. Where information is transferred abroad we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy decision.

We do not sell your personal information, and we will only disclose it where we are legally required to.

Order and transaction records are kept for six years after the end of the accounting period they fall in, as UK tax law requires.

Account details are kept while your account is open, and for 12 months after you ask us to close it.

Marketing consent records are kept until you withdraw consent, and for 12 months afterwards so we can show we honoured your request. Analytics data is retained for 14 months.

If you are in the UK, the European Economic Area, South Africa (under the Protection of Personal Information Act) or Canada (under PIPEDA and, in Quebec, Law 25), data protection law gives you the right to ask for a copy of the personal information we hold about you, to have it corrected or erased, to object to or restrict how we use it, to receive it in a portable format, and to withdraw consent where our use is based on consent.

To exercise any of these, email [email protected]. We will respond within one month. You will not be charged, and you do not have to give a reason.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. In South Africa you can also complain to the Information Regulator at inforegulator.org.za, and in Canada to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

If you live in a US state with a consumer privacy law (including California, Colorado, Connecticut, Virginia and others), you can ask us what personal information we hold about you, ask us to correct or delete it, and opt out of targeted advertising and of the "sale" or "sharing" of your personal information as those laws define them.

We do not sell personal information for money. Our advertising cookies (Google Ads) may count as "sharing" for cross-context behavioral advertising. You can opt out at any time with the "Your privacy choices" link at the bottom of every page, and we treat a Global Privacy Control signal from your browser as that opt-out automatically.

To make a request, email [email protected] from the address you used with us, or have an authorized agent do so on your behalf. We will confirm your request and respond within 45 days, and we will not treat you differently for using these rights.

If we make a material change to how we use your information we will update this page and change the date above. Where the law requires it, we will contact you directly.