Privacy policy

Last updated: 27 July 2026

Kaia Kini Limited, trading as Kaia Kini (“Kaia Kini”, “we”, “us” or “our”), operates this website and online store. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit our website, place an order, create an account, join a waitlist, subscribe to marketing, contact us, or otherwise interact with us.

For the purposes of applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Kaia Kini Limited is the controller of your personal information.

1. Personal information we collect

Depending on how you interact with us, we may collect or process:

Contact information, such as your name, billing address, delivery address, email address and telephone number.

Order and transaction information, such as products viewed, added to your basket, purchased, returned or exchanged, order history, delivery information, refunds and related transaction records.

Payment information, such as payment method, billing details, payment status and fraud-prevention information. Full payment-card details are processed by our payment providers and are not stored directly by us.

Account information, such as account details, saved preferences and customer-account activity.

Communications, such as messages sent by email, contact forms, customer support channels or social media.

Marketing and preference information, such as mailing-list and waitlist sign-ups, marketing preferences, consent records, product interests and email engagement.

Device and technical information, such as IP address, browser type, device type, operating system, network information, identifiers and security logs.

Website usage information, such as pages and products viewed, links clicked, basket activity, checkout activity and interactions with our website.

Analytics and advertising information, such as information collected through cookies, pixels, tags, local storage and similar technologies, subject to your choices and applicable law.

2. How we collect personal information

We may collect personal information:

Directly from you, for example when you place an order, create an account, subscribe to marketing, join a waitlist, submit a form, request a return or contact us.

Automatically, when you use our website, including through server logs, cookies, pixels, tags and similar technologies.

From Shopify and service providers, including ecommerce, checkout, payment, fraud-prevention, analytics, marketing, fulfilment, shipping, returns, reviews and customer-support providers.

From advertising, analytics and social-media platforms, where you interact with our content or where those services are connected to our website, subject to applicable law and your consent choices.

3. How we use personal information

We may use personal information to:

Provide our products and services, including operating our website, processing orders and payments, arranging delivery, sending order updates, managing accounts, handling returns and exchanges, responding to enquiries and providing customer support.

Operate and improve our business, including maintaining our website, understanding customer needs, improving products and services, troubleshooting, conducting internal reporting and developing the customer experience.

Personalise your experience, including remembering choices and showing relevant content or product recommendations where permitted.

Send marketing communications, including launch updates, promotions, offers and brand news, where permitted by law. You can unsubscribe at any time using the link in our emails or by contacting us.

Measure and support advertising, including measuring campaigns, building audiences and displaying or measuring ads through providers such as Meta, Google, TikTok and Pinterest, where used and where permitted by law.

Protect our business and customers, including detecting, preventing and investigating fraud, misuse, security incidents and unlawful activity.

Meet legal and regulatory obligations, including tax, accounting, consumer-protection, record-keeping and lawful disclosure requirements, and to establish, exercise or defend legal claims.

4. Lawful bases for processing

Where UK GDPR or EU GDPR applies, we rely on one or more of the following lawful bases:

Contract — where processing is necessary to provide products or services you request, including taking payment, fulfilling orders, arranging delivery, processing returns or exchanges and managing customer accounts.

Consent — where you have given consent, including for certain marketing communications, analytics, personalisation and advertising technologies. You may withdraw consent at any time.

Legal obligation — where processing is necessary to comply with legal requirements, including tax, accounting, consumer-protection and lawful disclosure obligations.

Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This may include operating and improving our business, securing our systems, preventing fraud, managing customer relationships, handling administration and carrying out proportionate business analysis. Where consent is required by law, we rely on consent instead.

5. How we disclose personal information

We may disclose personal information to:

Shopify, which hosts our store and provides ecommerce, checkout, account, security, analytics and related platform services.

Payment and fraud-prevention providers, to process payments, refunds, chargebacks and security checks.

Delivery, fulfilment and returns providers, to deliver orders, provide tracking and process returns or exchanges.

Email and customer-communication providers, including Klaviyo where used, to manage mailing lists and send transactional or marketing communications.

Analytics and advertising providers, including Shopify, Google, Microsoft Clarity, Meta, TikTok, Pinterest and similar providers where used, subject to applicable law and consent choices.

Reviews, loyalty, referrals, customer support and business-service providers, where used to support our store and customers.

Professional advisers, such as accountants, lawyers, insurers and other advisers.

Authorities and other recipients, where required by law or where reasonably necessary to protect our rights, customers, business or others.

Parties to a business transaction, such as a merger, financing, restructuring, sale of assets or transfer of all or part of our business.

We do not sell personal information in the ordinary meaning of “sell”. Certain privacy laws may use broader definitions of “sale”, “sharing” or “targeted advertising”. Where applicable, we provide the required choices through our privacy controls.

6. Shopify

Our store is hosted by Shopify. Shopify processes personal information to provide, secure, improve and support the ecommerce services used by our store. Shopify may also process certain information for its own purposes, depending on the Shopify features and services enabled.

You can learn more through Shopify’s Consumer Privacy Policy and exercise certain rights relating to Shopify’s processing through the Shopify Privacy Portal.

7. Cookies and similar technologies

We use cookies, pixels, tags, local storage and similar technologies to operate and secure our website, remember preferences, understand website usage, improve our services and support marketing and advertising.

These technologies may be grouped as:

Required — necessary for essential functions such as security, basket, checkout, account access and remembering privacy choices.

Personalisation — used to remember choices and provide a more tailored website experience.

Analytics — used to understand how visitors interact with our website and how it performs. This may include Shopify analytics, Google Analytics and Microsoft Clarity where enabled.

Marketing — used to measure campaigns, build advertising audiences and display or measure ads through providers such as Meta, Google, TikTok, Pinterest and Klaviyo where enabled.

Where required by law, non-essential technologies are not activated unless you consent. You can accept, decline or customise these technologies through our cookie banner and can change your choices later through the cookie-preference tool available on our website.

For more detail, please read our Cookie Policy.

8. Third-party websites and services

Our website may contain links to third-party websites or services. Their privacy and security practices are governed by their own policies. We are not responsible for third-party websites or services that we do not control.

9. Children’s information

Our website is intended for a general audience and is not directed specifically at children under 13. We do not knowingly collect personal information from children under 13 in circumstances where parental consent would be required. If you believe that a child has provided personal information unlawfully, please contact us so that we can take appropriate action.

10. Security

We use reasonable technical and organisational measures designed to protect personal information. However, no internet transmission or electronic-storage method is completely secure, and we cannot guarantee absolute security.

11. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining business and transaction records, complying with legal obligations, resolving disputes, preventing fraud and enforcing agreements.

Retention periods vary by information type and purpose. For example, order and transaction records may be retained for tax, accounting, legal and record-keeping purposes. Marketing information may be retained until you unsubscribe or withdraw consent, although we may retain limited information to record your preference and prevent further marketing.

12. International transfers

Our service providers may process personal information in countries outside the United Kingdom or European Economic Area, including the United States and Canada.

Where required, we use or rely on recognised safeguards for international transfers, such as adequacy regulations or decisions, the UK International Data Transfer Agreement, the UK Addendum to the European Commission’s Standard Contractual Clauses, the Standard Contractual Clauses or other lawful mechanisms.

13. Your rights and choices

Depending on your location and the circumstances, you may have rights to:

access personal information we hold about you;

ask us to correct inaccurate or incomplete information;

ask us to erase personal information;

ask us to restrict certain processing;

object to certain processing, including direct marketing and some processing based on legitimate interests;

receive certain information in a portable format;

withdraw consent at any time where processing relies on consent; and

complain to a data-protection authority.

These rights are not absolute and may be subject to legal conditions or exemptions. We may need to verify your identity before responding.

To exercise your rights, contact us using the details below. You may also use Shopify’s privacy controls where available.

14. Marketing communications

If you subscribe to our mailing list, waitlist, launch alerts or other marketing, we may send emails about Kaia Kini products, launches, promotions, offers, content and updates.

We may use Klaviyo or a similar provider to manage subscriptions, send emails and measure engagement. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

Unsubscribing from marketing does not prevent us from sending transactional or service messages, such as order confirmations, delivery updates, account notifications, returns information or customer-support responses.

15. Complaints

Please contact us first if you have concerns about how we use personal information.

If you are in the United Kingdom, you may also complain to the Information Commissioner’s Office. If you are in the European Economic Area, you may complain to your local data-protection supervisory authority.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our business, services, technology, legal obligations or privacy practices. We will post the revised version on this page and update the “Last updated” date. Where required by law, we will provide additional notice of material changes.

17. Contact us

For questions, complaints or rights requests, contact:

Email: hello@kaiakini.com

Kaia Kini Limited, trading as Kaia Kini
61 Bridge Street
Kington
HR5 3DJ
United Kingdom

Company registration number: 17008225