Legal
Privacy policy
This policy explains how Kasa Kulture, a trading name of KASA KULTURE LTD, collects, uses, stores and protects your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
Last updated: September 2026Effective from: September 2026
1. Data controller
The data controller responsible for your personal data is:
| Legal name | KASA KULTURE LTD |
| Company number | 16513798 |
| VAT number | GB496745921 |
| Registered address | 12 Peacock Close, Cottenham, Cambridge, Cambridgeshire, CB24 8BA, United Kingdom |
| info@kasakulture.co.uk |
For any questions about how we handle your data, or to exercise your rights under UK GDPR, please contact us using the details above.
2. What personal data we collect
We collect and process the following categories of personal data, depending on how you interact with our website and services.
When you place an order
Full name, email address, phone number, billing address, shipping address, payment information processed securely by our payment providers, we do not store your full card details, order history, and any communication relating to your order.
When you create an account
Name, email address, encrypted password, and any preferences you set within your account.
When you subscribe to our newsletter
Email address and, where provided, your name. You can unsubscribe at any time using the link in every email.
When you contact us
Name, email address, and any information you provide in your message, including order numbers and the details of your enquiry.
When you browse our website
IP address, browser type and version, operating system, device type, pages visited, time spent on pages, referring URLs and cookie data. See section 7 for details.
3. Lawful bases for processing
Under UK GDPR we must have a lawful basis for processing your personal data. We rely on the following.
| Lawful basis | When we use it |
|---|---|
| Contract | To process and fulfil your orders, manage your account, handle returns and refunds, and provide customer support relating to your purchases. |
| Legitimate interest | To improve our website and services, prevent fraud, maintain security, analyse how the site is used, and personalise your experience. We balance our interests against your rights. |
| Consent | To send marketing emails and newsletters. You can withdraw consent at any time by using the unsubscribe link in any email or by contacting us. |
| Legal obligation | To comply with tax, accounting and regulatory requirements, including keeping transaction records as required by HMRC. |
4. How we use your data
We use your personal data to process and fulfil orders, send order confirmations and dispatch notifications with tracking information, manage returns and refunds, respond to enquiries and support requests, send marketing communications where you have opted in, improve our website, prevent fraud and maintain security, and comply with our legal and regulatory obligations.
We will never sell, rent or trade your personal data to third parties for their own marketing purposes.
5. Third party service providers
We share your personal data with trusted third party service providers who process data on our behalf so that we can operate. These providers are contractually obliged to handle your data securely and only for the purposes we specify.
| Provider | Purpose | Privacy policy |
|---|---|---|
| Shopify | Ecommerce platform, hosting and order management | View |
| Shopify Payments | Card payment processing | View |
| PayPal | Alternative payment processing | View |
| Klarna | Buy now, pay later payment services | View |
| Royal Mail | Order delivery and shipment tracking | View |
| Klaviyo | Email marketing and newsletter delivery | View |
| Google Analytics | Website analytics and usage measurement | View |
Some of these providers may transfer data outside the United Kingdom. Where that happens we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office, to protect your data in accordance with UK GDPR.
6. Data retention
We keep your personal data only for as long as necessary for the purpose it was collected, or for as long as the law requires.
| Order and transaction data | 6 years from the date of the transaction, as required by HMRC for tax and accounting purposes. |
| Account data | For as long as your account is active. You can request deletion at any time. |
| Marketing and newsletter data | Until you unsubscribe or request deletion. |
| Customer support correspondence | 2 years from the last communication, unless it relates to an ongoing dispute or legal matter. |
| Cookie and analytics data | See section 7 for the retention period of each cookie type. |
7. Cookies
Our website uses cookies, small text files stored on your device, to provide and improve our services.
| Type | Purpose | Duration |
|---|---|---|
| Essential | Required for the website to work, including the basket, checkout and session management. | Session to 2 weeks |
| Analytics | Help us understand how visitors use the site. Data is anonymised where possible. | Up to 2 years |
| Marketing | Used to deliver relevant advertising and measure campaign performance. | Up to 2 years |
| Functional | Remember preferences such as currency and recently viewed products. | Up to 1 year |
You can manage your cookie preferences through your browser settings. Disabling essential cookies will affect how the website works, including adding items to your basket and completing checkout.
8. Your rights under UK GDPR
Under the UK General Data Protection Regulation you have the following rights.
Right of access
You can request a copy of the personal data we hold about you. This is known as a subject access request.
Right to rectification
You can ask us to correct personal data that is inaccurate or incomplete.
Right to erasure
You can ask us to delete your personal data, subject to legal exceptions such as data we must keep for tax records.
Right to restrict processing
You can ask us to limit how we use your data in certain circumstances.
Right to data portability
You can ask for your personal data in a structured, commonly used, machine readable format so it can be transferred elsewhere.
Right to object
You can object to processing based on legitimate interest, or to direct marketing. Where you object to marketing we will stop immediately.
Right to withdraw consent
Where we rely on consent, such as marketing emails, you can withdraw it at any time. This does not affect processing carried out before you withdrew it.
To exercise any of these rights, contact us at info@kasakulture.co.uk. We will respond within one calendar month, as UK GDPR requires. There is no charge for most requests, although we may charge a reasonable fee for requests that are manifestly unfounded or excessive.
9. Targeted advertising and your opt out rights
As described in this Privacy Policy, we collect personal information from your interactions with us and our website, including through cookies and similar technologies. We may also share this personal information with third parties, including advertising partners. We do this in order to show you ads on other websites that are more relevant to your interests, and for other reasons outlined in this policy.
Sharing of personal information for targeted advertising based on your interaction on different websites may be considered a sale, sharing, or targeted advertising under certain United States state privacy laws. Depending on where you live, you may have the right to opt out of these activities. If you would like to exercise this opt out right, please contact us at info@kasakulture.co.uk.
If you visit our website with the Global Privacy Control opt out preference signal enabled, then depending on where you are, we will treat this as a request to opt out of activity that may be considered a sale or sharing of personal information, or other uses that may be considered targeted advertising, for the device and browser you used to visit our website.
10. Data security
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction.
These measures include SSL encryption across the website, PCI compliant payment processing through Shopify Payments, access controls that limit data access to authorised people only, and regular review of how we handle data.
No method of transmission over the internet is completely secure. We encourage you to keep your account details confidential and to contact us immediately if you suspect unauthorised access to your account.
11. Children's privacy
Our website and services are not directed at anyone under the age of 16, and we do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has given us personal data, contact us at info@kasakulture.co.uk and we will delete it.
12. International data transfers
Some of our service providers operate outside the United Kingdom. Where your personal data is transferred outside the UK, we make sure appropriate safeguards are in place to protect it in accordance with UK GDPR.
Those safeguards include transfers to countries the UK government recognises as providing an adequate level of data protection, or the use of Standard Contractual Clauses approved by the Information Commissioner's Office.
13. Changes to this policy
We may update this policy from time to time to reflect changes in our practices, our services or the law. Any changes are posted on this page with an updated date at the top. Where a change is significant we may also notify you by email or with a notice on the website.
14. Complaints
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right.
Email: info@kasakulture.co.uk
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office, the UK's independent supervisory authority for data protection.
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
Independent retailer disclosure
KASA KULTURE LTD is an independent retailer. We are not affiliated with, authorised by, endorsed by, or officially connected to any of the brands listed on this website. All brand names and trademarks are the property of their respective owners and are used solely for product identification purposes.
KASA KULTURE LTD · Company No. 16513798 · VAT GB496745921
Registered in England and Wales · Verify on Companies House
Related policies