Privacy Policy

1. Introduction and Scope

Kaiya Knots ("we," "us," "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you visit our website, purchase our products, or interact with our services. This policy applies to all users worldwide and complies with applicable data protection laws including GDPR and other international privacy regulations. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

Personal Information: We collect information you provide directly, including full name, email address, phone number, billing address, shipping address, payment information (credit card details, PayPal account), and account credentials when you create an account or make a purchase.

Order Information: Purchase history, product preferences, custom order specifications, communication preferences, and transaction details.

Technical Information: IP address, browser type and version, device information, operating system, referring URLs, pages viewed, time spent on pages, click patterns, and cookies/tracking technologies data.

Communication Data: Records of correspondence when you contact customer service, feedback, reviews, survey responses, and social media interactions.

Location Data: General geographic location based on IP address for shipping estimates and regional content customization.

3. How We Collect Information

Direct Collection: Information you provide when creating an account, placing orders, subscribing to newsletters, contacting customer support, participating in surveys, or engaging with our social media.

Automated Collection: Through cookies, web beacons, analytics tools (Google Analytics), and similar technologies that track your browsing behavior and interactions with our website.

Third-Party Sources: Payment processors, shipping carriers, social media platforms (if you connect your accounts), and marketing partners.

4. How We Use Your Information

We use collected information for the following purposes:

• Order Processing: Fulfill orders, process payments, arrange shipping, send order confirmations and updates
• Customer Service: Respond to inquiries, resolve issues, provide support, handle returns and exchanges
• Account Management: Create and maintain your account, save preferences, track order history
• Marketing Communications: Send promotional emails, newsletters, special offers, new product announcements (with your consent)
• Personalization: Customize your shopping experience, recommend products, display relevant content
• Analytics and Improvement: Analyze website usage, improve products and services, conduct market research, optimize user experience
• Security and Fraud Prevention: Detect and prevent fraudulent transactions, protect against security threats, verify identity
• Legal Compliance: Comply with legal obligations, enforce terms of service, respond to legal requests

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information with:

Service Providers: Trusted third-party companies that assist with payment processing (Stripe, PayPal), shipping and logistics (DHL, FedEx, local couriers), email services (Mailchimp), website hosting, analytics (Google Analytics), and customer support tools. These providers are contractually obligated to protect your data and use it only for specified purposes.

Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.

Legal Requirements: When required by law, court order, subpoena, or government request; to enforce our terms; to protect our rights, property, or safety; or to prevent fraud or illegal activities.

With Your Consent: Any other disclosure will be made only with your explicit consent.

6. Data Security Measures

We implement comprehensive security measures to protect your personal information:

• Encryption: All sensitive data is encrypted using 256-bit SSL/TLS encryption during transmission
• Secure Storage: Data is stored on secure servers with restricted access and regular security audits
• Payment Security: We do not store complete credit card information; payment processing is handled by PCI-DSS compliant providers
• Access Controls: Limited employee access to personal data on a need-to-know basis with authentication requirements
• Regular Updates: Security protocols, software, and systems are regularly updated to address vulnerabilities
• Monitoring: Continuous monitoring for suspicious activity and potential security breaches

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience:

Essential Cookies: Required for website functionality, shopping cart, checkout process, and security features.

Performance Cookies: Collect anonymous data about website usage, page views, and navigation patterns to improve performance.

Functional Cookies: Remember your preferences, language settings, and customization choices.

Marketing Cookies: Track your browsing across websites to deliver targeted advertisements and measure campaign effectiveness.

You can control cookie preferences through your browser settings. Disabling cookies may affect website functionality. We also use Google Analytics, Facebook Pixel, and similar tools—you can opt out through browser extensions or platform settings.

8. Your Privacy Rights

Depending on your location, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data ("right to be forgotten"), subject to legal obligations
• Portability: Request transfer of your data to another service provider in a structured format
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to processing based on legitimate interests or for direct marketing purposes
• Withdraw Consent: Withdraw previously given consent at any time
• Opt-Out: Unsubscribe from marketing communications via email links or account settings

To exercise these rights, contact us at contact@kaiyaknots.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Account information: Until you request deletion or account closure, plus 1 year
• Order and transaction data: 7 years for tax and accounting purposes
• Marketing data: Until you unsubscribe or request deletion
• Technical data: 2 years for analytics purposes

After retention periods expire, we securely delete or anonymize your information.

10. International Data Transfers

Our business operates from Bangladesh, and your information may be transferred to, stored, and processed in Bangladesh or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements, to protect your information during international transfers.

11. Children's Privacy

Our website and services are not intended for children under 13 years of age (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

12. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by Kaiya Knots.

13. Marketing Communications

With your consent, we may send promotional emails about new products, special offers, events, and company news. You can opt out at any time by clicking the "unsubscribe" link in emails, adjusting your account preferences, or contacting us directly. Even if you opt out of marketing communications, we will still send transactional emails related to your orders and account.

14. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, contact us at contact@kaiyaknots.com with "CCPA Request" in the subject line.

15. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those outlined in Section 8. Our legal basis for processing your data includes: performance of contract, legitimate interests, legal compliance, and your consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

16. Changes to Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date, and for significant changes, we may send email notifications. Your continued use of our services after changes become effective constitutes acceptance of the updated policy. We encourage you to review this policy regularly.

17. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify affected users and relevant authorities as required by applicable law, typically within 72 hours of discovering the breach. Notifications will include the nature of the breach, types of data affected, steps we are taking, and recommendations for protecting yourself.

18. Contact Us

For privacy-related questions, concerns, or to exercise your rights, please contact us:

Email: contact@kaiyaknots.com
Phone: +88-01760 100 774
Address: Rajbari District, Dhaka, Bangladesh
Response Time: We aim to respond to all inquiries within 48 hours