Privacy Policy

The data controller responsible for your personal information is:

Klyvras
Unit 2 Southgate
Morecambe LA3 3PB
United Kingdom

For all privacy enquiries please email support@klyvras.shop or call +44 7512 379452. We respond to data subject requests within one calendar month, as required by UK GDPR.

We only collect data we genuinely need to operate this website and fulfil your orders:

Information you provide

• Order details: full name, delivery address, billing address, email address and phone number.
• Account information (optional): password (hashed) and saved address book.
• Communications: messages you send via email, our contact form, or by phone.
• Returns & refunds: order references and, where a refund is owed for a Cash on Delivery purchase, your UK bank details for the transfer.

Information collected automatically

• Device & browser data: IP address, browser type, operating system, screen size and language.
• Usage data: pages visited, products viewed, referring URL and approximate location (country/region).
• Cookies & similar technologies: see our Cookie Policy.

We process your data on the following lawful bases (UK GDPR Art. 6):

We never sell your personal data. We share it only with trusted processors who help us run the business:

• UK delivery couriers (e.g. Royal Mail, DPD, Evri, Yodel) — strictly to deliver your order.
• Cloud hosting and email providers — to host the website and send transactional emails.
• Payment processors — when card payments are introduced, they will handle your card data directly under their own privacy terms.
• Authorities — only when legally required (HMRC, courts, law enforcement).

All processors are bound by written agreements requiring them to protect your data and only use it for the agreed purpose.

Our primary infrastructure is based in the UK and EU. Where data is transferred outside the UK, we rely on UK adequacy decisions or the UK International Data Transfer Agreement (IDTA) to ensure your data is protected to UK standards.

We keep your personal data only as long as necessary:

• Order records, invoices and accounting data: 6 years after the end of the relevant tax year (HMRC requirement).
• Customer support correspondence: up to 3 years.
• Marketing consent records: until you withdraw consent, plus 12 months for audit.
• Website analytics: 14 months in aggregated form.

You have the right to:

• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where no overriding legal basis applies.
• Restrict or object to processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, where consent is the lawful basis.
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

To exercise any right, email support@klyvras.shop. We may ask you to verify your identity before acting on a request.

We take security seriously. Technical and organisational measures include:

• HTTPS/TLS encryption across the entire site.
• Hashed passwords using industry-standard algorithms.
• Strict access controls — only authorised staff handle order data, and only as needed.
• Regular backups and monitoring of our hosting infrastructure.

No system is 100% secure. If you suspect unauthorised access to your account, contact us immediately.

Our website is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us and we will delete it.

We may update this policy from time to time. The "Last updated" date at the top of the page always reflects the latest version. Material changes will be communicated via a prominent notice on the website or by email where appropriate.