Privacy Policy

Who we are

KARAME is a beauty brand operated by [BUSINESS NAME], [SOLE TRADER OR REGISTERED COMPANY NUMBER], at [BUSINESS ADDRESS]. We are the data controller for the personal information described in this policy. You can contact us about privacy at [PRIVACY CONTACT EMAIL].

What we collect

• When you join our mailing list, we collect your email address.
• When you place an order, we collect your name, email address, delivery and billing address, phone number if you provide one, and details of what you bought.
• We do not collect or store your card details. Payments are processed by Shopify, and your card information goes directly to them.
• We also collect basic technical information needed to run the site, such as the contents of your basket.

How we use it

• To send you marketing emails, where you have asked us to.
• To take payment, fulfil your order and keep you updated about it.
• To handle returns, refunds and customer enquiries.
• To keep records we are required to keep, and to prevent fraud.

Our lawful bases

• Consent, for marketing emails. You can withdraw this at any time.
• Performance of a contract, for processing and delivering your order.
• Legal obligation, for keeping business and tax records.
• Legitimate interests, for fraud prevention and for running and improving our business, where this does not override your rights.

Who we share it with

• Shopify, who provide our shop, checkout and payment processing.
• Our delivery partners, so your order can reach you.
• Our email provider, so we can send the emails you have asked for.
• Professional advisers and authorities, where we are legally required to share information.
• We never sell your personal information.

International transfers

Some of our providers are based outside the UK. Where personal information is transferred outside the UK, it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Marketing contacts, until you unsubscribe or ask us to delete you.
• Order records, for as long as we are required to keep them for tax and accounting purposes, currently six years.

Your rights

You have the right to access the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy in a portable format, and to withdraw consent to marketing at any time. To exercise any of these, email [PRIVACY CONTACT EMAIL].

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

We may update this policy from time to time. The date at the top shows when it was last changed.