Privacy Policy

• Name and delivery address
• Email address
• Phone number (optional)
• IP address and browser/device information
• Order history and purchase records
• Payment confirmation reference (we do NOT store card numbers — Stripe handles all card data)
• Cookies and website browsing behaviour on klyvras.shop

• To process and fulfil your orders
• To send dispatch confirmation and tracking information
• To handle customer support enquiries
• To comply with UK legal and tax obligations
• To detect and prevent fraud
• To improve website experience (analytics — only after consent)

• Contract performance: processing orders and delivering goods
• Legal obligation: tax record-keeping (7 years)
• Legitimate interests: fraud prevention, website security, analytics
• Consent: marketing emails, non-essential cookies

• Stripe Payments UK — payment processing (PCI Level 1)
• Royal Mail / DPD / Evri — delivery and tracking
• Supabase — database hosting (EU/UK servers)
• Google — Analytics via GTM, Maps embed on /contact

We do NOT sell, rent or share your data with third parties for their marketing purposes.

• Order records: 7 years (UK tax law requirement)
• Customer support records: 3 years from last contact
• Analytics data: anonymised, rolling 26 months
• Cookie consent records: 12 months

You have the right to:

• Access your personal data (Subject Access Request)
• Correct inaccurate data (Rectification)
• Have your data deleted ("Right to be Forgotten")
• Receive your data in a portable format (Portability)
• Restrict how we use your data
• Object to processing based on legitimate interests
• Withdraw consent at any time (for consent-based processing)

To exercise any right, email support@klyvras.shop. We respond within 30 days.

• 256-bit SSL on all pages
• Row-Level Security on all database tables
• Stripe PCI Level 1 for all payment data
• Klyvras never stores full card details
• Regular security review of codebase