Privacy Policy

Kohenor Ltd (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website kohenor.com and make purchases from our online store.

This policy complies with the UK Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), and applicable privacy laws in jurisdictions where we operate, including the United States.

1. Information We Collect

A. Information You Provide Directly

Account Information: When you create an account, we collect:

• Name and email address
• Password (encrypted and never stored in plain text)
• Phone number (optional)

Order Information: When you make a purchase, we collect:

• Billing name and address
• Shipping name and address
• Email address and phone number
• Payment information (processed securely by our payment processors; we never store complete credit card numbers)
• Order history and product preferences

Communication Information: When you contact us, we collect:

• Your name, email address, and phone number
• Contents of your messages, inquiries, or feedback
• Support ticket history

B. Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, links clicked, search queries
• Location Data: Approximate geographic location based on IP address (used for currency/language preferences)
• Cookies and Similar Technologies: See Section 7 for details

C. Information from Third Parties

We may receive information from:

• Payment Processors: Transaction confirmations from PayPal, Stripe, etc.
• Shipping Carriers: Delivery confirmation and tracking updates
• Social Media: If you interact with us on social platforms (public information only)
• Marketing Partners: Aggregated demographic data for advertising purposes

2. How We Use Your Information

We use your personal information for the following purposes:

A. Order Processing & Fulfillment

• Process and complete your orders
• Arrange shipping and delivery
• Send order confirmations and shipping updates
• Handle returns, refunds, and exchanges
• Provide customer support

B. Account Management

• Create and manage your account
• Store order history and preferences
• Enable faster checkout for future purchases
• Send account-related notifications

C. Communication

• Respond to inquiries and support requests
• Send transactional emails (order confirmations, shipping updates, etc.)
• Send marketing communications (only with your consent; you can opt out anytime)
• Conduct surveys and request feedback

D. Website Improvement & Personalization

• Analyze website usage and performance
• Personalize your shopping experience
• Recommend products based on browsing/purchase history
• Optimize website design and functionality

E. Legal & Security

• Prevent fraud and protect against security threats
• Comply with legal obligations (tax, customs, consumer protection laws)
• Enforce our Terms & Conditions
• Resolve disputes and investigate complaints

F. Marketing & Analytics

• Send promotional offers and product updates (opt-in required)
• Conduct market research and analysis
• Measure effectiveness of marketing campaigns
• Display targeted advertising (see Section 7)

3. Legal Basis for Processing (GDPR)

For users in the UK and EU, we process your personal data under the following legal bases:

4. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We only share your data in the following circumstances:

A. Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: PayPal, Stripe (for secure payment processing)
• Shipping Carriers: Royal Mail, DHL, FedEx, USPS (for order fulfillment)
• E-commerce Platform: Hosting and website infrastructure providers
• Email Services: Mailchimp, SendGrid (for transactional and marketing emails)
• Analytics: Google Analytics (for website performance tracking)
• Customer Support: Help desk software providers

All service providers are contractually required to protect your data and use it only for the purposes we specify.

B. Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Respond to government requests
• Enforce our Terms & Conditions
• Protect the rights, property, or safety of Kohenor, our users, or the public

C. Business Transfers

If Kohenor is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before any such transfer.

D. With Your Consent

We may share information with third parties when you explicitly consent (e.g., sharing reviews on social media).

5. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law:

• Account Data: Retained while your account is active, plus 3 years after account closure (for legal/tax compliance)
• Order History: Retained for 7 years (UK/EU tax and accounting requirements)
• Marketing Data: Retained until you unsubscribe or request deletion
• Support Communications: Retained for 3 years after last contact
• Website Analytics: Aggregated/anonymized data retained indefinitely; identifiable data retained for 26 months (Google Analytics standard)

After retention periods expire, we securely delete or anonymize your data.

6. Your Privacy Rights

A. For UK & EU Residents (GDPR Rights)

You have the following rights regarding your personal data:

B. For California Residents (CCPA Rights)

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information
• Opt-out of the “sale” of personal information (note: we don’t sell your data)
• Non-discrimination for exercising your privacy rights

C. How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@kohenor.com (best method)
• Subject line: “Data Privacy Request”
• Include: Your full name, email address, order number (if applicable), and specific request

We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA).

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and serve personalized content.

Types of Cookies We Use:

Essential Cookies (Required): Necessary for website functionality (e.g., shopping cart, login sessions). Cannot be disabled.

Performance Cookies: Collect anonymous data about how you use our site (e.g., Google Analytics). Help us improve website performance.

Functional Cookies: Remember your preferences (e.g., currency, language, saved addresses).

Marketing Cookies: Track your browsing to display relevant ads on third-party websites (e.g., Facebook Pixel, Google Ads). Require your consent.

Managing Cookies:

You can control cookies through:

• Cookie Consent Banner: Manage preferences when you first visit our site
• Browser Settings: Most browsers allow you to block or delete cookies
• Opt-Out Tools: Digital Advertising Alliance, Your Online Choices (EU)

Note: Disabling essential cookies may limit website functionality.

For more details, see our separate Cookie Policy.

8. Data Security

We take data security seriously and implement industry-standard measures to protect your information:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted
• Secure Payment Processing: PCI-DSS compliant payment gateways (we never store full credit card numbers)
• Access Controls: Strict employee access policies; data accessible only to authorized personnel
• Regular Security Audits: Ongoing monitoring for vulnerabilities
• Secure Data Storage: Encrypted databases with regular backups
• Firewalls & Intrusion Detection: Network security measures to prevent unauthorized access

However: No method of internet transmission or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Responsibility: Use a strong, unique password and never share your login credentials. If you suspect unauthorized account access, contact us immediately.

9. International Data Transfers

Kohenor operates globally and serves customers in the UK, EU, USA, and beyond. Your personal data may be transferred to and processed in countries outside your own, including countries that may not have the same data protection laws.

Safeguards for International Transfers:

• UK to EU: Adequacy decision ensures equivalent protection
• EU to Non-EU Countries: We use Standard Contractual Clauses (SCCs) approved by the European Commission
• Service Providers: All international service providers contractually commit to GDPR-level protections

For specific details about where your data is processed, contact us at privacy@kohenor.com.

10. Children’s Privacy

Our website and products are not directed at children under the age of 18. We do not knowingly collect personal information from minors.

If you are under 18, please do not use our website or provide any personal information. If you are a parent/guardian and believe your child has provided us with personal data, contact us immediately at privacy@kohenor.com and we will delete the information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.

When we make changes:

• We will update the “Last Updated” date at the top of this page
• For significant changes, we will notify you via email or prominent website notice
• Continued use of our website after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us

This Privacy Policy is effective as of February 1, 2025 and applies to all users of kohenor.com