01-12-2025
At KIRÙ, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, make a purchase, or interact with us.
1. Information We Collect
We collect the following types of personal data. Information you provide directly:
- Name
- Billing and shipping address
- Email address
- Phone number
- Payment details (processed securely through third-party providers)
- Order history
- Messages you send to our customer service team
When you visit our website, we automatically collect:
- IP address
- Device type
- Browser type
- Pages viewed
- Time spent on pages
- Cookies and tracking data
We may receive information from:
- Payment providers (Shopify Payments, PayPal, Klarna, etc.)
- Marketing platforms (e.g. Meta, Google)
- Delivery partners
2. How We Use Your Information
We process your data to:
- Fulfill and ship your orders
- Provide customer support
- Process payments and prevent fraud
- Send order confirmations and updates
- Improve our website performance and user experience
- Send newsletters and marketing messages (only with your consent)
- Comply with legal obligations
3. Legal Basis for Processing
We only use your data when we have a legal reason to do so:
- Contract: to process and deliver your order
- Consent: when you subscribe to our newsletter
- Legitimate interest: to improve our services or prevent fraud
- Legal obligation: keeping invoices and tax records
4. Sharing Your Information
We share your data only when necessary with service partners.
- Shopify (website hosting)
- Payment processors
- Logistics and delivery partners
- Email and marketing platforms
- Analytics tools (Google Analytics, Meta Pixel)
5. Cookies
We use cookies to:
- Keep items in your shopping cart
- Remember preferences
- Analyze website traffic
- Personalize marketing
6. Data Retention
We store your data only as long as necessary:
- Order information: 7 years (tax obligations)
- Customer account details: until you request deletion
- Marketing consent: until you unsubscribe
7. Your Rights
Under GDPR, you have the right to:
- Access your data
- Correct inaccurate information
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to marketing
- Request a copy of your data (data portability)
hello@bykiru.com
8. Security
We protect your data using:
- Encrypted payments (SSL)
- Shopify secure servers
- Limited access for staff
- Regular monitoring
9. International Transfers
Your data may be stored or processed outside the EU by trusted partners (such as Shopify). All transfers comply with GDPR requirements.
10. Changes to This Privacy Policy
We may update this policy from time to time. The latest version will always be posted on this page.