Kasiwaso : Privacy Policy

Welcome to the privacy policy of Kasiwaso. This document explains in detail how we process and handle your personal data at our e-commerce portal. Our goal is to provide complete transparency and ensure that you fully understand the practices concerning your privacy when interacting with our online store. Our privacy commitment is in line with the modern data protection framework enforced within the United Kingdom and its application of the Data Protection Act and the UK General Data Protection Regulation. By continuing to use our services, you acknowledge that you have read, understood, and agreed to the following policies and conditions regarding data processing and usage.

This policy is continually updated to reflect the current legal and technical requirements. It is effective as of 01.02.2025, and any changes made in the future will be published on our website. We encourage you to review this document periodically to stay informed.

Collection of Personal Data

At Kasiwaso, protecting your personal data is paramount. We collect information that you voluntarily provide when you register an account, place an order, subscribe to a newsletter, or interact through our customer service channels. The types of personal data collected may include, but are not limited to:

• Contact information such as your full name, email address, telephone number, and postal address;
• Payment and transaction data including credit card information and payment history;
• User behavior and browsing data including items viewed, search queries, and purchase history;
• Technical data such as your IP address, browser type, operating system, and device information.

We may also collect non-personal identification information that cannot be used to directly identify you or contact you. This information assists in improving our website functionalities and enhancing the overall user experience.

Utilization of Personal Data

Your personal data is primarily used for:

• Processing and fulfilling orders placed through our online store;
• Managing your account and communicating important updates regarding our policies, order statuses, and promotions;
• Enhancing our website performance, conducting analytics, and understanding user interactions;
• Ensuring a personalized shopping experience through recommendations and customized content;
• Responding to inquiries and providing efficient customer support.

Processing of data is conducted in strict accordance with the legal obligations and requirements laid out by the UK Data Protection Act and is regularly updated to reflect new regulatory demands. We ensure that data processing is handled with respect, fairness, and transparency.

Data Sharing and Third-Party Disclosures

Kasiwaso may share your personal data with trusted third-party service providers and partners who assist in the operation of our online store. This includes:

• Payment processing companies that handle credit card and banking transactions;
• Logistics and shipping companies that manage order fulfillment and delivery;
• Analytical service providers who help us understand website usage to optimize our user experience;
• Marketing and advertising partners who assist in delivering a tailored advertising experience, including compliance with advertising guidelines enforced by major platforms.

Any transfer of data to these third parties is done under strict contractual obligations to ensure that the security and confidentiality of your information are maintained at all times. We do not sell or exchange personal data with unaffiliated third parties without your express consent unless required by law.

Cookies and Tracking Technologies

Our website utilizes cookies and similar technologies to collect non-personal data that helps enhance user experience. Cookies are small text files that are stored on your device to enable essential website functionalities, facilitate authentic user sessions, and analyze usage data.

The cookies used at Kasiwaso include:

• Session cookies, which expire when you close your browser;
• Persistent cookies, which remain on your device for a set duration as defined by the applicable privacy laws;
• First-party cookies directly set by our site;
• Third-party cookies provided by our trusted service providers, all of which comply with stringent privacy standards.

By using our website, you acknowledge and agree that cookies are deployed to improve your experience. In most browsers, you have the option to disable cookies. However, we advise that disabling cookies may affect some functionalities of the site. Detailed information about our cookie usage policies can be reviewed within our cookie policy, which provides specific instructions for managing and controlling cookies on your device.

Data Security and Storage Practices

Protecting your personal data is a core commitment. We have implemented various technical and organizational measures to ensure that personal data is handled securely and is safeguarded against unauthorized access, future disclosure, accidental loss, misuse, or alteration. Our security procedures include:

• Encryption of sensitive data both during transmission and while at rest;
• Access control measures that restrict access to personal data to authorized personnel only;
• Regular monitoring and auditing of our systems to ensure compliance with the current state-of-the-art security practices;
• Data backup protocols that protect your information from loss or damage.

Data is stored only for as long as it is necessary to fulfill the purposes outlined in this privacy policy. Our retention schedule is borne out of a statutory necessity and legitimate controls, and once the data is no longer required, we take extensive steps to ensure it is permanently deleted or anonymized.

User Rights and Data Control

You have significant rights in relation to your personal data. In compliance with the data protection regulations applicable in the United Kingdom, you may:

• Access: Request a copy of the personal data we hold about you;
• Rectification: Request correction of any inaccurate or incomplete data;
• Deletion: Ask us to securely delete or remove your personal data in certain instances;
• Restriction: Request that we limit the processing of your personal data under specific circumstances;
• Portability: Request transfer of your personal data to another organization or directly to you in a structured, commonly used and machine-readable format;
• Objection: Object to the processing of your personal data when it is used for direct marketing or other legitimate purposes;
• Withdrawal of Consent: Withdraw consent at any time where your personal data is processed based on your consent.

To exercise any of these rights, please contact our customer support through the designated contact method on our website. Prior to processing your request, we may need to verify your identity to ensure that data is protected in accordance with the established security protocols. We strive to respond to all such requests within a reasonable timeframe as mandated by applicable law.

International Data Transfers

While our primary data processing activities occur within the United Kingdom, there are instances where personal data may be transferred to other jurisdictions for processing or storage purposes. When such transfers occur, we take all appropriate measures to ensure that your data is accorded the same level of protection as it is within our local environment.

Data transfers are performed via secure encryption channels and are governed by legally binding agreements. In cases where transfer is made to countries that do not have recognition of an adequate level of data protection, we implement additional safeguards such as standard contractual clauses or other appropriate mechanisms as required under current legal frameworks. We remain committed to safeguarding your privacy regardless of the data’s location.

Data Retention Policy

We only store personal data for as long as is necessary to achieve the purposes for which it was collected or to comply with legal obligations. Specific retention periods may vary depending on the nature of the data and the reason it was collected. In general, you can expect the following:

• Transactional data will be retained for the period required for record-keeping and ancillary financial or legal obligations;
• Account information and details provided by users may be retained for as long as your account remains active, or as necessary for the provision of the services you have requested;
• Certain communications and support-related data might be held for a defined period after a resolution, intended to improve our customer service operations.

Once no longer necessary, your personal data will be anonymized or securely disposed of in a manner that prevents any future retrieval.

Legal Basis for Data Processing

Our legal basis for processing your personal data stems from several grounds:

• Consent: Where you have provided explicit consent for data processing;
• Contractual Necessity: Where processing is required to execute the terms of our service contracts;
• Legal Obligation: Where processing is mandated by law and regulatory requirements;
• Legitimate Interests: Where the processing is necessary for our legitimate interests, provided these are not overridden by your fundamental rights and freedoms.

This comprehensive legal framework ensures that all data processing activities are compliant with applicable data protection laws within the United Kingdom.

Amendments to This Privacy Policy

We routinely review and update this privacy policy to reflect operational, legal, or regulatory changes. Any modifications to the policy will be clearly published on our website along with their effective dates. We encourage you to periodically review the policy to stay informed about how your information is being protected and processed.

If any significant changes are made, particularly those that might affect your rights or the way your data is handled, we will provide prominent notice through our website and, if necessary, through direct communications.

Contact and Support for Privacy Concerns

Your questions and concerns regarding this privacy policy are very important to us. If you need further clarification regarding any aspect of our data processing procedures or wish to exercise your rights under data protection laws, please refer to the appropriate contact methods provided on our website. Our dedicated support team is available to respond to all inquiries and ensure that your rights are fully respected.

Any requests for access, data modification, or deletion will be processed promptly and in accordance with the applicable legal requirement. We aim to provide a secure, balanced, and user-friendly process for all privacy-related matters.

Final Remarks

Kasiwaso values your privacy and endeavors to uphold the highest standards of data protection. We view this privacy policy as a cornerstone of our relationship with you and a testament to our commitment to your digital rights. Our ultimate goal is to ensure that every interaction with our e-commerce platform is as secure and transparent as possible, fostering trust and mutual respect.

Please take the time to familiarize yourself with our policies and understand the ways in which we work to protect your personal data. Your continued trust and business are pivotal to us, and we will continuously evolve our practices to remain fully compliant with the highest standards set forth by law and industry best practices.

Thank you for choosing Kasiwaso as your trusted online store. Your privacy and security remain our top priority.