Your privacy is as precious to us as the moments of calm we strive to create through our collection. At Kallos — Golden Hour, we are committed to protecting your personal data and ensuring that your trust in us is well-placed. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We believe in absolute transparency regarding your digital footprint.
1. Information Collection and Personal Data
We collect information that you provide directly to us when you browse our boutique, create an account, or complete a purchase. This includes your name, email address, delivery address, phone number, and payment preferences. The rationale for collecting this data is purely functional: we need these details to process your orders, communicate with you about your delivery, and provide a personalised shopping experience that reflects your tastes.
In addition to the data you provide, we also collect certain technical information automatically, such as your IP address, browser type, and how you interact with our website. This is done through cookies and similar technologies. The legal basis for this collection is our "legitimate interest" in maintaining a secure and efficient website, as well as your explicit consent for marketing and analytical cookies. We ensure that the data collected is the minimum necessary to achieve these purposes.
We do not knowingly collect data from children under the age of 16. If we discover that such information has been inadvertently collected, we will take immediate steps to delete it from our servers. Protecting the privacy of the vulnerable is a core part of our ethical commitment. We treat your data with the same level of care and sophistication that we apply to our physical products.
2. Purpose of Using Collected Data
The primary reason we use your data is to fulfil the contract of sale between you and Kallos — Golden Hour. This includes processing payments, arranging delivery, and providing customer support. Without this information, we would be unable to provide the high level of service that our brand promises. The rationale is to ensure a seamless and professional journey from the moment you click "add to basket" until the parcel arrives at your door.
We also use your information to improve our boutique. By analysing how our customers use the site, we can refine our curation, improve the website's layout, and ensure our marketing is relevant to your interests. If you have opted in to our newsletter, we will use your email address to send you updates on new arrivals and exclusive offers. You can withdraw your consent for marketing at any time by clicking the "unsubscribe" link in any email.
The legal basis for these activities is a combination of "contractual necessity," "legitimate interest," and "consent," as defined by the UK GDPR. We never use your data for purposes that are incompatible with the reasons it was originally collected. Your information is used to enhance your lifestyle, not to intrude upon it. We value the relationship we have with you and respect the boundaries of your digital life.
3. Secure Sharing with Third Parties
Kallos — Golden Hour does not sell, rent, or trade your personal data to third parties for their marketing purposes. We only share your information with trusted service providers who are essential to our operations. This includes payment processors (to handle your transactions), delivery companies (to bring your parcel to you), and IT service providers (who help us maintain a secure website). The rationale is that these partners are extensions of our own team, helping us deliver the Kallos experience.
All our third-party partners are contractually obligated to protect your data and use it only for the specific tasks we have assigned to them. They are not permitted to use your information for their own purposes. We conduct regular reviews of our partners' security practices to ensure they meet the high standards required by the Data Protection Act 2018. This ensures that your data remains safe even when it leaves our immediate control.
In rare circumstances, we may be required to disclose your information by law, such as to comply with a court order or to prevent fraud. In such cases, we will only provide the information that is legally required and will always strive to protect your privacy to the fullest extent possible. Our commitment to your security is unwavering, even in the face of legal complexities.
4. Data Retention, Storage, and Security
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, we keep order information for several years to comply with UK tax laws. The rationale is to maintain a complete and accurate record of our business activities while respecting your right to be forgotten once the data is no longer needed.
Your data is stored on secure servers that use industry-standard encryption and firewall protections. We implement strict access controls, ensuring that only authorised personnel can view your information. The consequence of these robust security measures is a significantly reduced risk of data breaches or unauthorised access. We invest heavily in our digital infrastructure to ensure that your "Golden Hour" remains private and secure.
While no method of transmission over the internet is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours, as required by the UK GDPR. We believe in taking immediate and transparent action to protect our community.
5. Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience. Cookies are small text files that are stored on your device when you visit a website. They help us remember your preferences, keep track of the items in your basket, and understand how you use our site. The rationale is to provide a more intuitive and personalised service, making your visit to Kallos as smooth and enjoyable as possible.
We use different types of cookies: "Essential Cookies" (necessary for the site to function), "Analytical Cookies" (which help us understand site performance), and "Marketing Cookies" (which allow us to show you relevant content on other platforms). In accordance with the Privacy and Electronic Communications Regulations (PECR), we will always ask for your consent before placing non-essential cookies on your device. You can manage your cookie preferences through our cookie banner at any time.
You can also choose to disable cookies through your browser settings; however, please be aware that this may affect the functionality of our website. For example, you may not be able to use the basket or complete a purchase. We recommend keeping essential cookies enabled to ensure you can enjoy the full Kallos experience. We use these technologies responsibly to improve our service, never to track you in an intrusive manner.
6. Your Rights under UK GDPR
Under the UK GDPR, you have significant rights regarding your personal data. These include the right to access the information we hold about you, the right to correct any inaccuracies, and the right to request the deletion of your data (the "right to be forgotten"). You also have the right to object to the processing of your data for certain purposes and the right to data portability. The rationale for these rights is to give you complete control over your digital identity.
To exercise any of these rights, please contact us at support@kallosgoldenhour.co.uk. We will respond to your request within one month, as required by law. We do not charge a fee for these requests, unless they are clearly unfounded or excessive. We are committed to helping you understand and exercise your rights, providing clear and helpful information at every stage. Your privacy is a fundamental right, and we treat it with the respect it deserves.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. However, we would appreciate the chance to resolve any concerns with you directly first. We take all privacy matters very seriously and will work tirelessly to ensure your data is handled with the highest level of sophistication and care.
7. International Data Transfers
As a modern boutique, we use service providers located in various parts of the world. This means that your data may sometimes be transferred to, and stored in, a country outside of the UK. When we do this, we ensure that your data receives the same level of protection as it would within the UK. The rationale is to allow us to use the best global tools to serve you, without compromising your privacy or security.
We use legal mechanisms such as "Standard Contractual Clauses" (SCCs) or the "International Data Transfer Agreement" (IDTA) to ensure that our international partners adhere to UK data protection standards. We also conduct "Transfer Impact Assessments" to evaluate the laws of the destination country. This rigorous approach ensures that your data is never sent to a jurisdiction where it would be at risk. We maintain a global perspective with a local commitment to your privacy.
By using our website and providing your information, you acknowledge that your data may be transferred internationally as described. We are transparent about these transfers because we believe you should know exactly how and where your data is being processed. Our goal is to provide a world-class service that respects the boundaries of international law and personal privacy.
8. Policy Updates and Privacy Contact
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make significant changes, we will notify you by posting the updated policy on our website and, where appropriate, sending you an email. The rationale is to keep you informed and ensure that our privacy practices remain transparent and up-to-date. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact our Data Protection Lead at support@kallosgoldenhour.co.uk. We have a dedicated team ready to assist you with any privacy-related enquiries. We believe that open communication is the best way to build and maintain the trust that is so essential to our brand.
Thank you for choosing Kallos — Golden Hour. We are honoured to be a part of your daily rituals and we take our responsibility to protect your privacy very seriously. Your data is safe with us, allowing you to focus on the beauty and sophistication of the Golden Hour. We look forward to continuing our journey together with transparency and respect.