1. Introduction Our Identity and Purpose of this Privacy Notice

This document serves to inform you about how Kacogifts, along with its affiliates (together known as “Kacogifts,” “we,” “us,” or “our”), manages your personal information collected through our website. This encompasses data provided by you when subscribing to our newsletter, purchasing products, or registering an account. Please be aware that our website is not designed for children, and we do not intentionally gather children’s data. For a comprehensive understanding of our data practices, we recommend reading this notice in conjunction with any other specific privacy or data processing notifications issued on certain occasions. This privacy notice is intended to complement, not replace, those notices.

Data Management Role Under the European Union General Data Protection Regulation (GDPR), Kacogifts acts both as a controller and a processor of your personal data. Our corporate group includes various entities such as Kacogifts Incorporated in the USA and Kacogifts United Kingdom Limited in England. The term Kacogifts in this document refers to the specific entity within our group handling your data. Questions, including requests to exercise legal rights, should be directed to us as outlined below.

How to Reach Us Our contact details are:

For direct handling of your concerns, please reach out to us at [email protected]. Additionally, EU citizens may contact the Information Commissioner’s Office (ICO) in the UK for data protection issues, while US citizens can approach the attorney general’s office in their state for complaints.

Policy Modifications Note that we may modify this policy periodically. All changes will be updated on this webpage, with the date of the most recent revision indicated at the top of this policy.

External Links Our website may feature links to third-party sites, plug-ins, and applications. Engaging with these links may allow third parties to collect or share your data. We have no control over these external websites and their privacy policies, and we advise reading their privacy notices upon visiting.

2. The Information We Collect About You Types of Data Collected

Your personal data, or personal information, refers to any details that identify you as an individual. It excludes anonymous data, where personal identity is removed. We collect, use, store, and transfer various types of personal data, which include:

  • Identity Data: This comprises your names, usernames, or similar identifiers.
  • Contact Data: This includes your addresses, email, and phone numbers.
  • Financial Data: Details like bank and payment card information are part of this.
  • Transaction Data: This covers details about your payments and purchased products.
  • Technical Data: We gather data such as your IP address, browser type, location, and other technology used to access our site.
  • Profile Data: Your account details, including username, password, and purchase history, are included.
  • Usage Data: Information on how you interact with our site and services.
  • Marketing and Communications Data: Your marketing preferences and communication choices fall under this category.

We might also produce and utilize Aggregated Data (like statistics or demographic information) for any purpose. Although this doesn’t directly identify you, if it’s combined with your personal data, it is treated as such under this privacy notice.

No Collection of Sensitive Data We do not collect sensitive personal data (regarding your race, beliefs, health, etc.) or information about criminal convictions and offenses.

Consequence of Not Providing Data Failure to provide necessary personal data when required by law or for contractual purposes may hinder our ability to fulfill our contract with you (like processing your order). We’ll notify you in such instances.

3. Methods of Collecting Your Personal Data

Direct Interactions

You might provide us with your Identity, Contact, and Financial Data through various means including:

  • Ordering our products;
  • Registering an account on our site;
  • Subscribing to our newsletters;
  • Requesting promotional material;
  • Providing feedback.

Through Automated Technologies

When you use our website, we automatically gather Technical Data about your devices and browsing habits using cookies and similar technologies. We may also get Technical Data from other websites that use our cookies. For more details on cookies, refer to the relevant section below.

From Third Parties or Public Sources

Your personal data might also come from external third parties, including:

  • Analytics providers like Google (outside the EU) for Technical Data;
  • Service providers (inside or outside the EU) for Contact, Financial, and Transaction Data;
  • Data brokers or aggregators for Identity and Contact Data;
  • Publicly accessible sources (inside the EU) like Companies House and the Electoral Register for Identity and Contact Data.

4. Utilization of Your Personal Data

We adhere to legal stipulations for using your personal data. Common uses include:

  • Fulfilling our contract with you;
  • Serving our legitimate interests, ensuring they don’t override your rights;
  • Complying with legal or regulatory directives, including law enforcement demands;
  • In transactions involving the sale of a business or asset.

We generally don’t base our processing of your personal data on consent, except for sending third-party direct marketing via email or text. You can withdraw marketing consent anytime by contacting us.

Purpose and Usage of Your Personal Data

Below is a table outlining how we intend to use your personal data, the legal grounds for these uses, and, where applicable, our legitimate interests (see paragraph 10 (Glossary) for “legitimate interest” definition). We may process your data based on more than one legal ground depending on the specific purpose. For details on the specific legal basis we use for your personal data, feel free to contact us.

Our Promotional Activities

How We Use Your Data

We analyze your Identity, Contact, Technical, Usage, and Profile Data to understand your preferences and interests. This helps us determine suitable products and offers for you, a process we refer to as marketing. You’ll receive our marketing communications if you’ve either requested information or bought something from us, provided you haven’t opted out of such communications.

Marketing from Others

Before we share your personal data with external companies for their marketing purposes, we’ll obtain your explicit agreement.

Your Choice to Opt-Out

Feel free to request that we or third parties discontinue sending you marketing messages at any time. Opting out of marketing communications does not affect the use of your personal data for non-marketing-related transactions like purchases or warranty registrations.

Understanding Cookies

Adjusting Your Cookie Settings
You have the option to configure your browser to either reject certain types of cookies or notify you when cookies are being used. Be aware that disabling cookies might affect the functionality and accessibility of parts of our website.
What Are Cookies?
Cookies are small files stored on your browser, facilitating server-browser interactions. Depending on their type – “persistent” or “session” – cookies stay on your browser for varying durations. Although cookies don’t usually contain personal identifying information, they can be linked to the personal information we hold about you. They’re used for tracking user activities and preferences on a website.
Our Use of Cookies
We use both session and persistent cookies for various functions like navigation tracking, shopping cart facilitation, website usage analysis, security enhancement, website personalization, and targeted advertising. Notably, the specific cookies we use include names like _utma, _utmb, _utmc, and _utmz.
Analytics and Third-Party Cookies
We employ Google Analytics, which uses cookies to generate statistical data on our website usage, and Google AdSense, which utilizes cookies to customize advertisements based on your interests across different websites. You can manage or opt out of these cookies through specific web settings and tools, including the Google Ads Settings and the NAI’s opt-out mechanism. Remember, opting out via browser settings might require specific plug-ins to maintain those preferences.

For details on Google’s privacy policy, visit: Google Privacy Policy.

5. Sharing Your Personal Information

We might need to disclose your personal information to various entities as outlined in the previously mentioned section (see paragraph 4). This includes internal parties like our staff or officers, and legal entities within kacogifts. External parties can include IT specialists, suppliers, subcontractors essential for website and application functioning, and any agreements made with them or you. This list includes but isn’t limited to companies like CCH, Avalara, and shipping firms (UPS, Fedex, DHL, Royal Mail, Interlink) for order delivery, payment processing entities like CyberSource, Authorize.Net, and platforms like Ariba and Coupa. Additionally, in the event of a business sale, transfer, merger, or acquisition, your personal information may be shared. New owners will adhere to this privacy policy in handling your data. We ensure that all third parties maintain the confidentiality and security of your data, using it solely for specified, lawful purposes under our direction.

6. International Data Transfers

Your personal data might be shared among kacogifts members or transferred internationally. Some countries outside the European Economic Area (EEA) may not offer the same data protection level as within the EEA. However, we often use European Commission-approved contractual safeguards to protect your data akin to European standards. For more information or specifics on the data transfer mechanisms we employ, particularly out of the EEA, please get in touch with us.

7. Safeguarding Your Data

We have implemented robust security protocols to prevent accidental loss, unauthorized access, alteration, or disclosure of your personal data. Access is restricted to personnel and third parties who need to know this data for work purposes, bound by confidentiality agreements. Procedures are in place to address any data breaches, and we’ll inform both you and the necessary regulators as legally required in such instances.

8. Retention of Your Data

We retain your personal data only as long as needed for the purposes it was collected, including meeting any legal, accounting, or reporting obligations. Factors determining this duration include the data’s nature and sensitivity, potential risks from unauthorized use or disclosure, processing purposes, and legal requirements. Personal data from our mailing list subscribers is retained for a maximum of 7 years, after which we will reconfirm your consent for data storage and continued communication.

9. Your Rights Over Personal Data

Under data protection laws, you hold various rights regarding your personal data:

Marketing Choices

You’ll be informed if your data is intended for marketing, and we’ll only proceed with your explicit consent.

Correcting Data

If our records are incomplete or incorrect, inform us, and we will update the information promptly.

Deleting Your Data

You can request the deletion of your data, especially if it’s no longer necessary for the purposes collected or if you withdraw previously given consent. We’re obligated to erase your data unless legal grounds mandate its retention.

Objections to Data Processing

You have the right to object to data processing based on our legitimate interests, direct marketing, or anything impacting your fundamental rights and freedoms.

Restricting Data Processing

You can ask us to pause processing your personal data under certain conditions, such as data inaccuracy or unlawful processing.

Accessing Your Data

You’re entitled to access your personal data, generally free of charge, in a requested format. Charges may apply for additional copies.

Data Portability

You have the right to obtain and reuse your personal data for your own purposes across different services.

For exercising these rights, please contact us directly.

Fee for Services

Access to your personal data is usually free. However, for baseless or excessive requests, a reasonable fee might be charged, or the request could be denied.

Withdrawing Consent

You can withdraw consent at any time, without affecting the legality of prior processing. Withdrawal might affect our ability to offer specific services, which we will advise upon at the time of withdrawal.

Verifying Your Identity

To access your data or exercise your rights, we may request specific information for identity confirmation. We may also seek additional details to expedite our response.

Response Timelines

We aim to respond to legitimate requests within one month. Complex or multiple requests may take longer, about which we will notify and keep you updated.

10. Legal Bases for Processing

Legitimate Interest: We process your data when it’s necessary for our business operations, balancing any potential impact on you and your rights. Performance of Contract: We process data as needed to fulfill our contractual obligations with you or take preliminary steps at your request before a contract. Legal Obligations: We process data when it’s necessary to comply with a legal or regulatory obligation.

11. Seasonal Shipping Notice

Please be aware that from December 1st to 30th, due to high demand around Christmas and New Year, there may be slight delays in order processing and delivery. We appreciate your understanding and patience during this busy period.

Best regards!