Privacy policy
Who we are
This privacy policy explains how Katie Kelly, trading as KellyKanine, of 82 Rashierigg Place, Longridge, Bathgate EH47 8AT ("we", "us") collects and uses personal data when you visit https://kellykanine.com or contact us. We are the data controller for that personal data.
Email: contact@kellykanine.com
The personal data we collect
We collect:
- Contact form: your name, email address and the message you send.
- Orders: your name, contact and delivery details, and records of what you bought. Payment card details go directly to our payment provider (Shopify Payments); we never see or store your full card number.
- Technical data: the IP address, browser type and pages visited that our hosting provider records in routine server logs.
- Cookies: see our cookie policy for exactly what is set and when.
How and why we use personal data
UK data-protection law requires a lawful basis for every use:
| What we use it for | What data | Lawful basis (UK GDPR Article 6) |
|---|---|---|
| Answering your enquiry | Identity, contact and message data | Taking steps at your request before a contract, and our legitimate interest in responding to people who contact us |
| Providing what you buy and administering orders | Identity, contact, order and delivery data | Performance of a contract |
| Understanding how the site is used | Usage and technical data | Your consent, given through the cookie banner |
| Keeping the site and our records secure | Technical and correspondence data | Our legitimate interest in running the business safely |
| Meeting legal obligations (tax, accounting, disputes) | Order, invoice and correspondence records | Legal obligation |
Analytics
We use Google Analytics 4 to understand how the site is used. It runs only after you consent through the cookie banner, and you can withdraw that consent at any time. See our cookie policy.
Who we share personal data with
We use carefully chosen service providers who process personal data on our instructions under contract:
| Provider | What they do for us | Where they process data |
|---|---|---|
| Shopify | store, checkout and payments | Ireland/Canada/US |
| Google Analytics | US | |
| IONOS | business email | UK/EU |
| LaingLogic | website and the reviews feed | UK |
We may also share personal data with our professional advisers, and with authorities where the law requires it. We do not sell your personal data.
Content from Google Maps
This site shows reviews and other content from Google Maps. Your use of that content is subject to the Google Maps/Google Earth Additional Terms of Service (maps.google.com/help/terms_maps) and the Google Privacy Policy (policies.google.com/privacy).
Our store platform (Shopify)
This site's store and checkout run on Shopify. Shopify hosts the store and processes personal data on our instructions so that we can show you the store, take your order and complete your payment. It is our processor for that data, under contract, and we remain the data controller.
Shopify also uses some of the data from your visit for its own purposes, such as keeping the platform secure and improving it; for those uses Shopify is a controller in its own right and its own privacy policy applies. You can read it, and exercise the rights it gives you, through Shopify's published consumer privacy policy and privacy portal.
Shopify processes data outside the UK. Those transfers rely on the safeguards described below, and nothing in this section reduces the rights you have against us as controller, including the right to contact us at contact@kellykanine.com about any data Shopify holds for us.
Transfers outside the UK
Some of our providers process data outside the UK. When that happens we make sure a lawful safeguard is in place: a UK adequacy decision covering the destination, or the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
Transfers to providers in the United States rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the IDTA or the UK Addendum.
How long we keep personal data
We keep personal data only as long as we need it:
- Enquiry correspondence: kept while we deal with your enquiry and for a reasonable period afterwards, then deleted.
- Records we must keep for tax and accounting: generally six years, as the law requires.
- Everything else: only as long as needed for the purpose we collected it for, then deleted or anonymised.
Your rights
Under UK data-protection law you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased in many circumstances
- restrict or object to how we use it (including objecting to direct marketing, which we always honour)
- receive the data you gave us in a portable format
- withdraw any consent you have given, at any time
To exercise any of these, email contact@kellykanine.com. We will respond within one month and will not charge a fee unless the law allows one. We may need to confirm your identity first.
If you are unhappy with how we handle your personal data, please complain to us first at contact@kellykanine.com. We will acknowledge your complaint within 30 days and deal with it without undue delay, as UK law requires. You also have the right to complain to the Information Commission (the ICO) at ico.org.uk, helpline 0303 123 1113.
Automated decision-making
We do not make any decision about you based solely on automated processing that would have a legal or similarly significant effect on you.
Changes to this policy
We may update this policy from time to time; the date at the top shows when it last changed. Significant changes will be highlighted on the site.