Privacy Policy

1. Introduction

Kharleonghikphun ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website kharleonghikphun.world and use our services.

We comply with the UK GDPR, the Data Protection Act 2018, and other applicable data protection laws. Where consent is required, we will ask for it explicitly; otherwise we rely on another lawful basis described below.

2. Data Controller

The data controller responsible for your personal data is:

Kharleonghikphun
Alnwick Station, Alnwick NE66 2NP
United Kingdom
Email: business@kharleonghikphun.world

3. Information We Collect

We may collect and process the following categories of personal data:

Identity Data: Full name as provided in our order form.
Contact Data: Email address and optionally phone number.
Communication Data: Messages and correspondence you send to us.
Technical Data: IP address, browser type, device information, operating system, and browsing patterns on our website.
Usage Data: Information about how you use our website and services.
Cookie Data: Data collected through cookies and similar technologies (see our Cookie Policy).

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you have given explicit consent for processing (e.g., marketing communications).
Contract: When processing is necessary to fulfil a contract with you or take pre-contractual steps at your request.
Legal Obligation: When processing is necessary to comply with legal requirements.
Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights.

5. How We Use Your Information

We use the collected data for the following purposes:

To process and fulfil your orders
To communicate with you about your orders and enquiries
To send order confirmations and shipping updates
To improve our website and services
To analyse website usage and trends
To comply with legal obligations
To detect and prevent fraud

6. Direct Marketing and Advertising

We do not send marketing emails or use advertising cookies unless you have provided the required consent where applicable. You can opt out of marketing communications at any time using the unsubscribe instructions in the message or by contacting us.

If we use advertising partners, they may process limited technical and usage data to measure campaign performance and prevent advertising fraud.

7. Data Sharing and Disclosure

We may share your personal data with:

Service Providers: Third-party companies that assist us in operating our website, processing payments, and delivering orders.
Legal Authorities: When required by law or to protect our legal rights.
Business Transfers: In connection with any merger, sale of company assets, or acquisition.

We do not sell your personal data to third parties for marketing purposes.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK and European Economic Area. When such transfers occur, we ensure appropriate safeguards are in place, including the UK International Data Transfer Agreement (IDTA), UK Addendum to EU SCCs, or adequacy regulations.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Order and transaction data: 7 years (for legal and accounting purposes)
Communication records: 3 years after last contact
Website analytics data: 26 months
Marketing preferences: Until you withdraw consent

10. Your Rights

Under GDPR and UK data protection law, you have the following rights:

Right of Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your data ("right to be forgotten").
Right to Restriction: Request limitation of processing.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details provided below.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

SSL/TLS encryption for data transmission
Secure storage systems with access controls
Regular security assessments
Staff training on data protection

12. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about our data processing practices, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk