Privacy policy

1. Who we are

This Privacy Policy explains how Kimilight ("we," "us") collects, uses, shares, and protects your personal information when you visit www.kimilight.store or purchase from our store.

Questions at any time? Email support@kimilight.store.

2. Information we collect

2.1 Information you give us. When you place an order or contact support, you provide your name, email address, phone number, billing and shipping addresses, and payment details. Payment card data is processed by our payment providers — our systems never store your full card number.

2.2 Information collected automatically. When you browse the store, we automatically collect device and usage information: browser type and version, operating system, IP address, time zone, pages viewed, search terms, referring links, and time spent on pages. We use cookies, server logs, and web pixels for this. You can block or delete cookies in your browser settings at any time; the site will keep working, though some features may be limited.

3. How we use your information

- Processing and delivering your orders, including payment verification, shipping, and order-status emails

- Customer service, returns, exchanges, and warranty support

- Fraud prevention and account security

- Understanding how the site is used, so we can improve our products and pages (aggregated analytics)

- Marketing emails — only if you opt in, with an unsubscribe link in every message

We never sell, rent, or trade your personal information. We do not use your photos or order information in advertising without your explicit permission.

4. Legal bases for processing

Where required by law, we rely on these bases to process your data:

- Consent — for marketing communications and optional cookies

- Contract performance — to process orders, payments, shipping, returns, and support

- Legitimate interests — fraud prevention, site security, and aggregated analytics

- Legal obligation — tax, accounting, and lawful requests from authorities

5. Who we share information with

- Shopify — our e-commerce platform, which hosts checkout and order management

- Google Analytics — website analytics, governed by Google's privacy standards

- PayPal and payment processors — payment verification, fraud screening, and settlement (PCI DSS compliant)

- UPS and FedEx — delivery of your order (name, delivery address, and phone number only)

- Legal authorities — only when required by law, such as a valid court order or subpoena

Every service provider is contractually bound to protect your data and to use it only to perform services for us.

6. Cookies and Do Not Track

Cookies keep the store working and help us understand how it is used. We honor your browser's cookie settings. Like most websites, our site does not change its behavior in response to "Do Not Track" browser signals.

7. Data security

All traffic between your device and our store is encrypted with SSL/TLS. Payment data is handled exclusively by PCI DSS-certified processors. No online system is perfectly secure, but we review our safeguards regularly and act quickly if an issue is found.

8. Your rights

If you are a California consumer (under the CCPA), or a resident of another U.S. state with similar laws, you have the right to:

- Access the personal information we hold about you

- Correct inaccurate or incomplete information

- Delete your personal information, subject to legal retention requirements

- Opt out of marketing communications at any time

To exercise any of these rights, email support@kimilight.store. We respond within a reasonable time frame, and we never charge a fee.

9. Data retention

We keep order records only as long as needed for accounting, tax, warranty, and dispute-resolution purposes. If you ask us to delete your data, we remove it unless the law requires us to keep a record. Browsing data is kept only in anonymized, aggregated form.

10. Children

Our store is intended for customers 18 years and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, email us and we will delete it after verification.

11. Changes to this policy

We may update this policy from time to time. The current version is always posted on this page with its "Last updated" date. We recommend revisiting this page occasionally so you stay informed.