Privacy policy
Effective date: September 18, 2026
Last updated: October 14, 2026
This Privacy Policy explains how Kenzen Limited ("KENZEN", "we", "us" or "our") collects, uses, discloses and protects personal information when you visit or make a purchase from kenzen.shop (including any KENZEN store hosted on Shopify under that name), interact with our customer service, sign up for our emails, or otherwise communicate with us (together, the "Services").
Kenzen Limited is the company that operates kenzen.shop and sells the products offered on it. KENZEN is an Icelandic-designed activewear and lifestyle brand. Other KENZEN websites are covered by their own privacy policies.
The Services are hosted by Shopify. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.
Please read this Privacy Policy carefully. By using the Services you acknowledge that you have read and understood it. If you do not agree with our practices, please do not use the Services.
Contents
- Summary of key points
- Personal information we collect
- Where we get personal information
- How we use personal information
- How we disclose personal information
- Cookies, pixels and similar technologies
- Targeted advertising, "sales" and "sharing" of personal information, and how to opt out
- Marketing emails and text messages
- Notice of financial incentive
- Children's privacy
- How long we keep personal information
- How we protect personal information
- International data transfers
- Your privacy rights and how to exercise them (all customers)
- Additional information for United States residents
- Additional information for residents of the EEA, United Kingdom and Switzerland
- Additional information for other regions (Canada, Australia and others)
- Automated decision-making and profiling
- Third-party websites and social media
- Changes to this Privacy Policy
- How to contact us
1. Summary of key points
- What we collect: contact and delivery details, order and payment information, account details, customer-service communications, device and browsing information, and marketing preferences.
- Why: to process and deliver your orders, run our store, provide customer service, prevent fraud, send marketing you have opted into, and improve our products and Services.
- Who we share it with: Shopify (our commerce platform), payment providers (Airwallex and Klarna), our third-party fulfillment partner and its warehouse, shipping carriers, our email marketing platform, advertising and analytics partners (Meta, TikTok and Google), and professional advisers and authorities where the law requires it. We do not sell your personal information for money.
- Targeted advertising: we use advertising cookies and pixels that may be treated as a "sale" or "sharing" of personal information under some U.S. state laws. You can opt out at any time via our Your Privacy Choices page or by enabling the Global Privacy Control in your browser.
- Your rights: depending on where you live you can access, correct, delete or obtain a copy of your personal information, and opt out of targeted advertising and marketing. We extend the core rights described in section 14 to every customer, wherever you live. Email kenzen@kenzen.shop to make a request.
- Children: the Services are not directed to children under 13, and we do not knowingly sell or share the personal information of anyone under 16.
2. Personal information we collect
"Personal information" means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with you or your household. It does not include de-identified or aggregated information that cannot reasonably be linked to you. Depending on how you interact with the Services, we may collect the following categories of personal information. (The category names in parentheses correspond to the categories listed in the California Consumer Privacy Act.)
| Category | Examples of what we collect |
|---|---|
| Identifiers and contact details (Identifiers) | Name, email address, phone number, shipping and billing address, account username, IP address, device and cookie identifiers, order number. |
| Customer records (Personal information categories listed in Cal. Civ. Code §1798.80(e)) | The contact details above, plus payment details (see below) and records of your orders, returns and exchanges. |
| Payment information (Financial information) | Payment method, the last four digits and brand of your card, billing address, transaction amount and confirmation. Full card numbers are collected and processed directly by our payment providers (Shopify's checkout, Airwallex, and Klarna) and are never stored on our systems. |
| Account information | Login details, saved addresses, preferences and order history when you create a customer account. |
| Commercial information | Products you view, add to your cart, purchase, return or exchange; the value and frequency of your orders; discount codes used; sizes purchased. |
| Communications | The content of emails, social-media direct messages, reviews, survey responses and any other communication you send us, together with our replies. |
| Device, internet and network activity (Internet or other electronic network activity) | Browser type and version, operating system, device type, screen resolution, language, referring URL, pages viewed, time spent, clicks, searches, and interactions with our emails and advertisements, collected through cookies, pixels and server logs. |
| Approximate location (Geolocation data) | Country, region and city inferred from your IP address, used to show the right currency, shipping options and content. We do not collect precise GPS location. |
| Photos and videos you share with us (Audio, electronic, visual or similar information) | If you tag us, send us photos or videos, or give us permission to feature your content, we may collect and use that content and your social-media handle. |
| Marketing preferences | Whether you have subscribed to or unsubscribed from our emails, and your engagement with them. |
| Inferences | Preferences and characteristics we derive from the information above, such as the product categories, colors or sizes you are likely to be interested in. |
Sensitive personal information. We do not ask for and do not intend to collect sensitive personal information (such as government identification numbers, precise geolocation, racial or ethnic origin, religious beliefs, health data, sexual orientation, or genetic or biometric data). The only sensitive information involved in using the Services is your account password and your payment card details, which are collected and secured by Shopify and our payment providers to log you in and process your payment. We do not use or disclose sensitive personal information for any purpose other than those permitted by law, and we do not use it to infer characteristics about you.
Information about other people. If you give us personal information about someone else (for example a gift recipient's name and address), you confirm that you are permitted to do so and that they may be informed of this Privacy Policy.
3. Where we get personal information
- Directly from you when you place an order, create an account, subscribe to our emails, enter a promotion, contact us, leave a review, or otherwise provide information to us.
- Automatically from your device through cookies, pixels, SDKs and server logs when you visit the Services or open our emails (see section 6).
- From service providers that process information on our behalf, such as Shopify, our payment providers, fulfillment and shipping partners, and our email and analytics providers.
- From advertising and social-media platforms such as Meta (Facebook and Instagram), TikTok and Google, for example when you interact with our ads or content on those platforms, subject to their privacy policies and your settings.
- From fraud-prevention and payment partners (for example Shopify's fraud analysis, Airwallex and Klarna) who may provide us with risk signals about a transaction.
4. How we use personal information
We use personal information for the following purposes ("business purposes"):
- To provide the Services and fulfil your orders: to process payments, confirm and ship orders, handle returns, exchanges and refunds, provide order updates, and manage your account.
- Customer service: to respond to your questions, complaints and requests, and to keep records of our communications.
- Personalization: to remember your preferences and cart, show you relevant products, sizes and content, and tailor the Services to you.
- Marketing: to send you news, offers and product updates by email where you have subscribed or where otherwise permitted by law, and to show you KENZEN advertisements on other websites, apps and social-media platforms based on your interests and your activity on the Services (see sections 7 and 8).
- Analytics and improvement: to understand how the Services are used, measure the performance of our products, campaigns and website, test new features, and develop new products.
- Security and fraud prevention: to verify your identity and payment, detect and prevent fraudulent, unauthorized or illegal activity, protect the Services and our customers, and enforce our Terms of Service.
- Legal and compliance: to comply with applicable laws (including tax, accounting, consumer-protection, customs and export requirements), respond to lawful requests from authorities, establish or defend legal claims, and to audit our compliance.
- Business operations: for accounting, reporting, planning, insurance, and in connection with any actual or proposed merger, acquisition, financing or sale of all or part of our business.
We may also create de-identified or aggregated information from personal information and use it for any lawful purpose, and we commit to maintaining and using such information only in de-identified form.
5. How we disclose personal information
We disclose personal information to the following categories of recipients for the purposes described above. Where recipients act as our service providers or processors, they are contractually required to use personal information only on our instructions and to protect it.
| Recipient | What they receive and why |
|---|---|
| Shopify (Shopify Inc., Canada, and its affiliates) | Our commerce platform. Shopify hosts the Services, processes your checkout, customer accounts, order and payment data, provides fraud analysis and the "Your Privacy Choices" tools, and supports our marketing and advertising. See "Our relationship with Shopify" below. |
| Payment providers — Airwallex and Klarna | Your payment details, billing address, order amount and, for Klarna, the information Klarna needs to decide whether to offer you its payment options and to manage your Klarna account. Klarna acts as an independent controller and its privacy notice applies to its use of your data. |
| Fulfillment and logistics — our third-party fulfillment partner and the warehouse it operates for us, our order-management system, our returns portal provider, and shipping carriers (for example USPS, UPS, FedEx, DHL and their local delivery partners) | Your name, delivery address, phone number, email address and order contents, so that your order can be picked, packed, shipped, tracked and delivered, returns and exchanges can be processed, and so that customs declarations can be completed where required. |
| Email marketing platform | Your email address, name, order history and on-site activity, so that we can send you the emails you have subscribed to, abandoned-cart and post-purchase messages, and measure engagement. |
| Advertising and analytics partners — Meta (Facebook and Instagram), TikTok, Google (including Google Analytics and Google Ads), and Shopify's advertising features | Cookie and device identifiers, hashed email address, IP address, pages and products viewed, cart and purchase events, so that we can measure our advertising, show you KENZEN ads on those platforms, reach people similar to our customers, and analyze how the Services are used. See section 7 for how to opt out. |
| Affiliates — companies under common ownership or control with us | Information needed for group-level administration, reporting and customer service, used only in accordance with this Privacy Policy. |
| Professional advisers — accountants, auditors, lawyers, insurers, IT and security providers | Information needed for them to provide their services to us. |
| Authorities and other parties where required by law | Courts, regulators, tax and customs authorities, law enforcement, and others where we believe disclosure is required by law, necessary to protect our rights, property or safety or those of our customers or others, or necessary to enforce our Terms of Service. |
| A buyer or successor | In connection with any merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business or assets, personal information may be transferred as one of the business assets, subject to this Privacy Policy. |
| With your direction or consent | For example when you use a social-media widget or ask us to share information with a third party. |
Our relationship with Shopify. The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside. In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features (such as Shop Pay, Shop app, Shopify Audiences and fraud analysis) that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information at the Shopify Privacy Portal.
6. Cookies, pixels and similar technologies
We and our partners use cookies (small text files placed on your device), pixels and tags (tiny images or code embedded in web pages and emails), local storage and similar technologies ("cookies") to run the Services, remember your choices, understand how the Services are used, and deliver and measure advertising. We use the following categories:
- Strictly necessary: required to run the store, keep you logged in, maintain your cart, process checkout, remember your privacy choices and protect against fraud. These cannot be switched off.
- Functional: remember your preferences such as language, region and currency.
- Analytics and performance: help us understand how visitors use the Services so that we can improve them (for example Shopify analytics and Google Analytics).
- Advertising and social media: set by our advertising partners to build a profile of your interests, show you KENZEN ads on other sites and apps, and measure whether those ads led to a visit or purchase (for example the Meta Pixel, TikTok Pixel and Google Ads tags).
Typical cookies used on the Services include:
| Cookie | Set by | Purpose | Category | Typical duration |
|---|---|---|---|---|
| _shopify_essential, _shopify_s, _secure_session_id | Shopify | Session and checkout functionality | Necessary | Session to 30 minutes |
| cart, cart_currency, cart_sig, cart_ts, keep_alive | Shopify | Shopping cart and currency | Necessary | Up to 2 weeks |
| _tracking_consent | Shopify | Stores your cookie and privacy choices | Necessary | 1 year |
| localization | Shopify | Remembers your country and language | Functional | 2 weeks |
| _shopify_y, _orig_referrer, _landing_page | Shopify | Store analytics, referring page | Analytics | 2 weeks to 1 year |
| _ga, _gid, _gcl_au | Google Analytics and Google Ads measurement | Analytics / Advertising | _ga 2 years, _gid 24 hours, _gcl_au 3 months | |
| _fbp, _fbc, fr | Meta | Meta Pixel advertising and measurement | Advertising | Up to 3 months |
| _ttp, _tt_enable_cookie | TikTok | TikTok Pixel advertising and measurement | Advertising | Up to 13 months |
| __kla_id | Klaviyo (our email marketing platform) | Links on-site activity to your email subscription | Advertising / Functional | Up to 2 years |
The exact cookies may change as we update the Services and our partners update their technologies.
How to manage cookies. You can control cookies in the following ways:
- Use our Your Privacy Choices page to opt out of advertising cookies and the "sharing" of your information for targeted advertising.
- Where a cookie banner is shown (for example if you visit from the EEA, UK or Switzerland), you can accept or reject non-essential cookies and change your choice at any time from the banner or page footer.
- Enable the Global Privacy Control (GPC) in a supported browser or extension. We treat a GPC signal as a valid request to opt out of targeted advertising and the sale or sharing of personal information for the browser and device sending it, and where we can link that browser to your account, for your account as well.
- Adjust your browser settings to block or delete cookies. Blocking necessary cookies may prevent checkout from working.
- Opt out of interest-based advertising from participating companies at aboutads.info/choices (Digital Advertising Alliance) and optout.networkadvertising.org (Network Advertising Initiative), and in your Meta, TikTok and Google ad settings.
- Opt out of Google Analytics using the Google Analytics opt-out browser add-on.
Opt-outs made through cookies are specific to the browser and device you use and will be lost if you clear your cookies, so you may need to renew them.
Do Not Track. Other than the Global Privacy Control, we do not respond to "Do Not Track" signals, because there is no common industry standard for them.
7. Targeted advertising, "sales" and "sharing" of personal information, and how to opt out
We do not sell personal information in exchange for money. However, we work with advertising partners (Meta, TikTok, Google and Shopify's advertising features) who use cookies, pixels and hashed identifiers to show you KENZEN advertisements on other websites, apps and platforms based on your activity on the Services. Under the laws of California and several other U.S. states, this kind of disclosure for cross-context behavioral or "targeted" advertising may be considered a "sale" or "sharing" of personal information.
In the twelve months before the effective date of this Privacy Policy, we have "sold" or "shared" the following categories of personal information for this purpose: identifiers (cookie and device identifiers, IP address, hashed email address), commercial information (products viewed, added to cart and purchased), internet or other electronic network activity, and inferences drawn from them. The recipients are the advertising and analytics partners described in section 5.
You can opt out at any time by:
- visiting our Your Privacy Choices page (also linked in our website footer as "Your Privacy Choices" or "Do Not Sell or Share My Personal Information");
- enabling the Global Privacy Control in your browser (see section 6); or
- emailing kenzen@kenzen.shop with the subject line "Opt out of targeted advertising".
After you opt out we will stop sharing your information with advertising partners for targeted advertising from that browser and device (and, where we can link it, your account). You may still see KENZEN ads, but they will not be based on your activity on the Services, and we will continue to use necessary and analytics cookies as described above. We do not knowingly sell or share the personal information of consumers under 16 years of age.
8. Marketing emails and text messages
Email. If you subscribe to our emails, create an account, or make a purchase, we may send you marketing emails about KENZEN products, launches, offers and content through our email marketing platform. You can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of any marketing email, by updating your preferences in your account, or by emailing kenzen@kenzen.shop. We will process unsubscribe requests within 10 business days. After you unsubscribe we may keep your email address on a suppression list so that we do not email you again, and we will still send you non-marketing emails such as order confirmations, shipping updates, account notices and responses to your requests.
Text messages. We do not currently send marketing text messages. If you provide a mobile number at checkout, you may receive transactional text messages about your order (such as shipping and delivery notifications) from Shopify or our carriers. Message and data rates may apply. You can stop these notifications by replying STOP to the message or by updating your notification preferences in your order status page or account. If we introduce marketing text messages in the future, we will only send them with your express prior consent and will update this Privacy Policy.
Abandoned cart reminders. If you enter your email address at checkout but do not complete your purchase, we may send you a reminder about the items you left in your cart. You can opt out using the link in the reminder.
9. Notice of financial incentive
We do not currently offer discounts, gifts or other benefits in exchange for your personal information. If we introduce one in the future (for example a discount for signing up to our emails), we will describe its material terms here, including what we collect, how to opt in and withdraw, and how we value your data, before you sign up. Participation will always be voluntary.
10. Children's privacy
The Services are intended for adults. You must be at least 18 years old (or the age of majority where you live) to make a purchase, and you may only use the Services if you are 13 or older. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us with personal information, please contact us at kenzen@kenzen.shop and we will delete it promptly.
11. How long we keep personal information
We keep personal information only for as long as necessary for the purposes described in this Privacy Policy, including to satisfy legal, accounting, tax and reporting requirements, resolve disputes and enforce our agreements. Our typical retention periods are:
| Type of information | Retention period |
|---|---|
| Order, invoice, payment and refund records | 7 years from the end of the financial year of the transaction, as required by applicable tax and accounting laws. |
| Customer account | For as long as your account is active. If you ask us to delete your account, we delete it within 45 days, except for records we must keep by law. |
| Marketing subscription data | Until you unsubscribe, after which we keep your email address on a suppression list. Inactive subscribers who have not opened or clicked an email for 24 months may be removed. |
| Customer-service communications | 3 years from the last communication, or longer if needed for an ongoing dispute or claim. |
| Website analytics and advertising data | For the cookie lifetimes described in section 6; aggregated analytics may be kept indefinitely. |
| Fraud-prevention and security records | Up to 5 years, or longer where needed to investigate or defend a claim. |
| Privacy-rights requests | At least 24 months, as required by California law. |
When information is no longer needed we delete it or de-identify it. Copies may remain in secure backups for a limited period before being overwritten.
12. How we protect personal information
We use technical, administrative and physical safeguards designed to protect personal information against unauthorized access, loss, misuse or alteration, including encryption of data in transit (TLS), access controls and least-privilege access for our team, use of a PCI DSS Level 1 certified commerce platform and payment providers so that we never store full card numbers, and contractual security obligations for our service providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your account password confidential and contact us immediately if you suspect any unauthorized use of your account. If a security incident affects your personal information we will notify you and the relevant authorities as required by applicable law.
13. International data transfers
We and our service providers operate in several countries. Your personal information may therefore be transferred to, stored and processed in countries other than the one you live in, including the United States and Canada (where Shopify and our advertising, analytics and email providers process data) and the countries in which we and our fulfillment, logistics and shipping partners operate. The data-protection laws of these countries may differ from those of your country, and may not provide the same level of protection.
Where we transfer personal information from the European Economic Area, the United Kingdom or Switzerland to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), the EU-U.S. Data Privacy Framework where the recipient is certified, or another lawful transfer mechanism. You may request a copy of the relevant safeguards by contacting us.
14. Your privacy rights and how to exercise them (all customers)
Privacy laws in different places give people different rights. Rather than limit these to particular jurisdictions, we extend the following rights to every customer, subject to the exceptions and verification requirements permitted by the law that applies to you:
- Right to know / access: to confirm whether we process your personal information and to receive a copy of it, together with the categories of information, the sources, the purposes, and the categories of third parties with whom it has been disclosed.
- Right to correct: to have inaccurate or incomplete personal information corrected. You can also update most of your details in your account.
- Right to delete: to have your personal information deleted, subject to exceptions (for example where we must keep transaction records for tax purposes, need the information to complete your order, or to detect fraud and defend legal claims).
- Right to data portability: to receive your personal information in a portable, machine-readable format.
- Right to opt out of targeted advertising and the sale or sharing of personal information: see section 7.
- Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not carry out such profiling (see section 18).
- Right to limit the use of sensitive personal information: we only use sensitive personal information for the limited purposes permitted by law (section 2), so this right does not currently require any action from you.
- Right to opt out of marketing: see section 8.
- Right to non-discrimination: we will not deny you goods or services, charge you a different price, or provide a different level of service because you exercised any of these rights, except as permitted by law in connection with a financial incentive (section 9).
How to make a request. Email kenzen@kenzen.shop with the subject line "Privacy request". Please tell us which right you want to exercise, the email address you used with us, and the country or U.S. state you live in. You can also manage some information yourself in your account, and exercise rights relating to Shopify's own processing through the Shopify Privacy Portal.
Verification. To protect your information we must verify your identity before acting on a request to know, correct or delete. We will usually do this by matching the details you give us with the information we hold (for example your email address, recent order number or shipping address) and, where necessary, by sending a confirmation link to the email address on file. We may ask for additional information if the request concerns particularly sensitive information. We will only use the information you provide for verification to verify your request. We will not require you to create an account to make a request.
Authorized agents. Where permitted by law, you may authorize another person or business to make a request on your behalf. We will ask the agent for proof of your written authorization (or a power of attorney) and may also ask you to verify your identity with us directly.
Timing. We will confirm receipt of your request within 10 business days and respond within 45 days. If we need more time (up to a further 45 days) we will tell you why. We will respond free of charge, unless requests are manifestly unfounded, excessive or repetitive, in which case we may charge a reasonable fee or decline the request. We may decline requests where the law permits, and will explain why.
Appeals. If we decline all or part of your request, you may appeal by replying to our response or emailing kenzen@kenzen.shop with the subject line "Privacy appeal" within 60 days. A different member of our team will review the appeal and respond in writing within 45 days (60 days where permitted), explaining the outcome. If your appeal is denied, we will tell you how to contact the attorney general or data-protection authority for your state or country.
15. Additional information for United States residents
This section supplements the rest of this Privacy Policy for residents of U.S. states that have enacted comprehensive consumer privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and any other state that adopts a similar law. Some of these laws only apply to businesses above certain size thresholds; whether or not they apply to us, we honor the rights in section 14 for all U.S. residents.
15.1 California (CCPA / CPRA) disclosures
Categories of personal information collected, disclosed, sold or shared in the preceding 12 months.
| Category (Cal. Civ. Code §1798.140) | Collected? | Disclosed for a business purpose to | Sold or shared for targeted advertising? |
|---|---|---|---|
| A. Identifiers | Yes | Shopify; payment providers; fulfillment and shipping partners; email marketing platform; advertising and analytics partners; affiliates; advisers | Yes (cookie and device IDs, IP address, hashed email) |
| B. Customer records (§1798.80(e)) | Yes | Shopify; payment providers; fulfillment and shipping partners; affiliates; advisers | No |
| C. Protected classifications | No (we do not request them; gender may be inferred from product choices) | — | No |
| D. Commercial information | Yes | Shopify; payment providers; fulfillment partners; email marketing platform; advertising and analytics partners; affiliates | Yes (products viewed, carted and purchased) |
| E. Biometric information | No | — | No |
| F. Internet or other electronic network activity | Yes | Shopify; email marketing platform; advertising and analytics partners | Yes |
| G. Geolocation data (approximate, from IP address) | Yes | Shopify; advertising and analytics partners | Yes (as part of device data) |
| H. Audio, electronic, visual or similar information | Only if you send us photos, videos or chat messages | Shopify; social-media platforms where you have agreed to be featured | No |
| I. Professional or employment information | No | — | No |
| J. Education information | No | — | No |
| K. Inferences | Yes | Shopify; email marketing platform; advertising partners | Yes |
| L. Sensitive personal information (account credentials; payment card details) | Yes, processed by Shopify and payment providers only | Shopify; payment providers | No |
The sources of each category are described in section 3, and the business and commercial purposes in section 4. We retain each category for the periods in section 11.
Your California rights are the rights to know, delete, correct, opt out of sale or sharing, limit the use of sensitive personal information, and non-discrimination, each as described in sections 7 and 14. You may make a request to know up to twice in a 12-month period. Requests can be made by email as described in section 14, or through the "Your Privacy Choices" page for opt-outs. Because we operate exclusively online and deal with you directly, email is our designated method for receiving requests.
Shine the Light (Cal. Civ. Code §1798.83). California residents may request, once per calendar year, information about any personal information we disclosed to third parties for their own direct-marketing purposes in the preceding year. We do not disclose personal information to third parties for their own direct-marketing purposes. To make a request, email us with the subject line "Shine the Light request".
Minors. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
15.2 Other U.S. states
Residents of the other states listed above have the rights to access, correct, delete and obtain a copy of their personal information, to opt out of targeted advertising, the sale of personal data and profiling in furtherance of decisions that produce legal or similarly significant effects, and to appeal a denied request, each as described in sections 7 and 14. Oregon residents may additionally request a list of the specific third parties to which we have disclosed their personal data. We do not process personal data for profiling that produces legal or similarly significant effects, and we do not sell personal data for money. We do not process sensitive data without consent. Where your state's law treats a consumer under 16 (or under 13) as requiring parental consent for targeted advertising or sale, we comply.
15.3 Nevada
Nevada residents may direct a business not to sell certain covered information for monetary consideration. We do not sell covered information for money. You may still submit a "Nevada Do Not Sell" request to kenzen@kenzen.shop and we will record it in case our practices change.
16. Additional information for residents of the EEA, United Kingdom and Switzerland
If you are in the European Economic Area, the United Kingdom or Switzerland, the EU General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Act on Data Protection apply, and this section provides the additional information they require.
Controller. Kenzen Limited is the controller of your personal data and can be contacted at kenzen@kenzen.shop.
Legal bases. We process your personal data on the following bases:
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, managing your account, customer service | Performance of a contract with you (Art. 6(1)(b)) |
| Accounting, tax, customs and consumer-law obligations | Compliance with a legal obligation (Art. 6(1)(c)) |
| Fraud prevention, security, enforcing our terms, business reporting and transfers, group administration, product improvement | Our legitimate interests (Art. 6(1)(f)), which we have balanced against your rights |
| Email marketing to existing customers about similar products | Legitimate interests (Art. 6(1)(f)) with an opt-out in every message, where permitted by national law; otherwise consent |
| Email marketing to non-customers, and analytics and advertising cookies | Your consent (Art. 6(1)(a)), which you may withdraw at any time |
Your rights. In addition to the rights in section 14, you have the right to object to processing based on legitimate interests (including direct marketing, which we will always honor), to restrict processing in certain circumstances, to withdraw consent at any time without affecting the lawfulness of processing before withdrawal, and not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We respond to requests within one month, extendable by two further months for complex requests. You also have the right to lodge a complaint with your supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in Switzerland, the FDPIC; or the authority of the EU member state where you live or work.
Cookies. Non-essential cookies are only set after you have given consent through our cookie banner, and you can change your choice at any time.
Transfers outside the EEA, UK and Switzerland are described in section 13.
17. Additional information for other regions
Canada. We collect, use and disclose personal information with your consent or as otherwise permitted by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. You may withdraw consent (subject to legal and contractual restrictions), request access to and correction of your personal information, and complain to the Office of the Privacy Commissioner of Canada. Your information may be processed outside Canada, including in the United States, and may be subject to the laws of those countries.
Australia. We handle personal information in accordance with the Australian Privacy Principles. You may request access to or correction of your personal information and complain about our handling of it by contacting us; if you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner.
Other countries. If you live elsewhere, we handle your personal information as described in this Privacy Policy and in accordance with the local laws that apply to you. Contact us if you have questions about the rights available to you.
18. Automated decision-making and profiling
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Two limited forms of automated processing do occur: (1) Shopify's fraud analysis assigns a risk indicator to orders, which a member of our team reviews before any order is cancelled; and (2) if you choose to pay with Klarna, Klarna makes its own automated decision about whether to offer you its payment options, as its independent controller, and its privacy notice explains your rights in relation to that decision. Our marketing personalization (for example recommending products based on what you have viewed or bought) is profiling that does not produce legal or similarly significant effects, and you can opt out as described in sections 7 and 8.
19. Third-party websites and social media
The Services may contain links to websites, apps and services operated by third parties, and we maintain pages on social-media platforms such as Instagram, TikTok and Facebook. We are not responsible for the privacy practices or content of those third parties, and this Privacy Policy does not apply to them. Information you post publicly (for example a comment on our social-media page or a public review) can be viewed and used by others. Please review the privacy policies of any third-party service before providing personal information to it.
20. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we do, we will post the updated policy on the Services and change the "Last updated" date at the top. If the changes are material, we will provide additional notice as required by law, for example by email or a notice on our homepage. Your continued use of the Services after an update means that the updated policy applies.
21. How to contact us
If you have questions, concerns or complaints about this Privacy Policy or our handling of your personal information, or wish to exercise your rights, please contact us:
Kenzen Limited
Attn: Privacy
Email: kenzen@kenzen.shop
If you need to contact us by post, email us and we will provide a mailing address.
We aim to acknowledge every privacy inquiry within 10 business days. If we are unable to resolve your complaint, you may be able to escalate it to the privacy regulator in your state or country as described above.