Privacy Policy

Last updated: 13 October 2026

Kitanesque Ltd (company number 17442810, registered in England & Wales; registered office: Unit 16, Canalside Offices, Lowesmoor Wharf, Worcester, WR1 2RS; registered with the Information Commissioner’s Office as a data controller, registration number ZC244693) (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website kitanesque.co.uk (the “Site”).

1. Information We Collect

Personal Data You Provide

We may collect personal information that you voluntarily provide to us, including but not limited to:

  • Name and contact details (email address, phone number, postal address)
  • Payment information (processed securely via our payment provider — we never store full card details)
  • Account login credentials (encrypted)
  • Order history and preferences

Automatically Collected Data

When you visit our Site, we automatically collect certain information, including IP address, browser type, operating system, referring URLs, device information, and browsing patterns via cookies and similar tracking technologies.

2. How We Use Your Information

We use the information we collect to:

  • Process and fulfil your orders
  • Send order confirmations, shipping updates, and customer service communications
  • Improve our Site, products, and services
  • Send marketing communications (with your consent — you may opt out at any time)
  • Comply with legal obligations, including HMRC record-keeping
  • Detect and prevent fraud

3. Legal Basis for Processing (UK GDPR)

We rely on the following legal bases under the UK GDPR:

  • Contract: Processing necessary to fulfil your purchase contract
  • Consent: Marketing communications, non-essential cookies
  • Legitimate Interests: Site analytics, fraud prevention, inviting buyers to review us on Trustpilot
  • Legal Obligation: Tax records, regulatory compliance

4. Data Sharing

We do not sell your personal data. We share it only with the service providers below, each for the purpose stated and nothing else:

  • Payments — WooPayments (by Automattic) and Stripe process card, Apple Pay and Google Pay payments and screen them for fraud; Klarna and Clearpay process your payment if you choose them at checkout (they act as controllers in their own right for their credit and identity checks). We never see or store full card details.
  • Delivery — Sendcloud (our shipping-label and tracking platform), Royal Mail and InPost receive your name, delivery address, email address and phone number so they can deliver your order and send you tracking updates.
  • Address lookup — Ideal Postcodes receives the postcode you type at checkout, to suggest your address.
  • Email — order and account emails are sent from our own mail server. If you sign up to our newsletter, Brevo stores your email address and sends the newsletter for us; you can unsubscribe at any time.
  • Google (Google Customer Reviews) — only if you choose to take part after an order: your email address, order number, delivery country and expected delivery date, so Google can email you one short survey about your experience with us. It is optional and you can ignore the invitation.
  • Reviews (Trustpilot) — when an order is completed, we copy our order email to Trustpilot’s Automatic Feedback Service, so Trustpilot receives your name, email address and order number and can invite you to review your purchase. We do this on the basis of our legitimate interests in collecting genuine reviews from real buyers. The invitation is optional and you can ignore it; you can also object to this use of your details by emailing privacy@kitanesque.co.uk. Trustpilot handles your data under its own privacy policy.
  • Login with Google — only if you choose to sign in or create your account with Google: Google shares your name and email address with us so we can open your account. We never receive your Google password, and nothing is shared with us if you do not use this option.
  • Analytics (only with your consent) — Google Analytics and Microsoft Clarity tell us how visitors use the Site (pages viewed, clicks, scrolling, device type).
  • Advertising (only with your consent) — Google Ads, Meta (Facebook and Instagram) and Microsoft Advertising receive information that you visited the Site and what you viewed or bought, so we can measure our adverts and show them to people likely to be interested.
  • Messaging — if you contact us on WhatsApp, WhatsApp (Meta) handles your messages under its own terms.
  • Hosting and backups — Hosterion hosts the Site on servers in London; backups of the Site are kept with Google (Google Drive) and Apple (iCloud).
  • Our accountant — order and payment records, for bookkeeping and tax returns.
  • HMRC and law enforcement — when legally required.

5. International Transfers

Some of our service providers may be located outside the UK. Where we transfer your data internationally, we ensure appropriate safeguards (UK adequacy decisions or Standard Contractual Clauses).

6. Your Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability — receive your data in a machine-readable format
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements (typically 6 years for HMRC records).

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including SSL encryption, secure payment processing, and access controls.

9. Contact

For any privacy-related questions or to exercise your rights, contact us at: privacy@kitanesque.co.uk