Privacy policy

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. INTRODUCTION

IDAKIM LTD ("we", "us", "our") operates the online store at
www.idakimi.com. This Privacy Policy explains what personal data we
collect, why we collect it, how we use it, and your rights.

We are registered in England & Wales (Company No. 16678130) with a
registered office at 71-75 Shelton Street, London, WC2H 9JQ, United
Kingdom.

2. DATA WE COLLECT

2.1 Information You Provide
• Identity & contact: name, email address, phone number, shipping
and billing address
• Payment: credit/debit card details or payment-provider tokens
(processed by Stripe; we do not store full card numbers)
• Communications: emails, support messages, survey responses

2.2 Information Collected Automatically
• Device & browser: IP address, browser type and version, operating
system, device identifiers
• Usage: pages visited, time on page, referring URL, click paths
• Cookies & similar technologies (see Section 7)

2.3 Information from Third Parties
• Shopify (store platform)
• Stripe (payment processing)
• Google Analytics (site analytics — if you consent)
• Fulfillment partners (order processing and shipping)
• Shipping carriers (delivery status updates)

3. HOW WE USE YOUR DATA

Purpose Legal basis (UK GDPR)
─────────────────────────────────────────────────────
Fulfill and ship your order Contract performance
Process payments Contract performance
Send order confirmations & Contract performance
shipping updates
Respond to support requests Legitimate interest
Prevent fraud Legitimate interest
Comply with legal obligations Legal obligation
Improve our site and services Legitimate interest
Marketing emails (only with Consent
your opt-in)

4. DATA SHARING

We share personal data only with:
• Shopify Inc. — hosting and order management
• Stripe — payment processing
• Third-party fulfillment providers — order processing, packaging,
and shipping (name, shipping address, and phone number required
for delivery)
• Shipping carriers — delivery of your order
• Google LLC — analytics (anonymized, consent-based)
• Legal authorities — when required by law or court order

We do not sell, rent, or trade your personal data to third parties
for their marketing purposes.

5. INTERNATIONAL TRANSFERS

Your data may be processed in the United States (Shopify, Stripe,
Google) and other countries where our fulfillment and logistics
partners operate. Where data is transferred outside the UK, we rely
on Standard Contractual Clauses or the service provider's
certification under an adequate framework.

6. DATA RETENTION

• Order data: 6 years from the date of purchase (UK tax and
accounting obligations)
• Account data: until you request deletion
• Analytics data: 14 months (Google Analytics default)
• Marketing consent records: until you unsubscribe, plus 1 year
for compliance evidence

7. COOKIES

Cookie / Technology Purpose Duration
──────────────────────────────────────────────────────
Shopify session Cart, login, security Session
Shopify persistent Store preferences 1 year
_ga, _gid (Google) Analytics Up to 2 years
Stripe Payment fraud check Session

You can control cookies through your browser settings. Declining
analytics cookies does not affect your ability to shop.

8. YOUR RIGHTS

Under the UK GDPR and, where applicable, the California Consumer
Privacy Act (CCPA), you have the right to:
• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (without affecting prior processing)
• (California residents) Know what data is collected and opt out of
its sale — we do not sell personal data

To exercise any right, email info@idakimi.com with "Privacy Request"
in the subject line. We will respond within 30 days.

9. CHILDREN

We do not knowingly collect data from anyone under 16. If you believe
a child has provided us personal data, contact us and we will delete
it promptly.

10. SECURITY

We use HTTPS/TLS encryption, Stripe PCI-DSS compliant payment
processing, and restrict data access to authorized personnel. No
system is 100% secure; we cannot guarantee absolute security but we
take commercially reasonable measures.

11. CHANGES

We may update this policy. Material changes will be posted on this
page with an updated "Last updated" date. Continued use of the site
after changes constitutes acceptance.

12. CONTACT

Data Controller: IDAKIM LTD
Email: info@idakimi.com
Address: 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom

If you are unsatisfied with our response, you may lodge a complaint
with the UK Information Commissioner's Office (ICO) at ico.org.uk.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Your cart is empty

Privacy policy