Last Updated: 26 June 2025
1. Introduction
Welcome to Kalea Arrangements (“we”, “us”, “our”). We value your privacy and are committed to safeguarding your personal data. This policy explains:
- What personal data we collect
- How and why we use it
- Your rights under UK data protection law
- How to contact us
2. Data We Collect
We collect the following categories of personal data to provide and improve our services:
- Identity and Contact Information: This includes your name, email address, phone number, and mailing address. We use this data to process orders and communicate with you.
- Transactional Information: This refers to your order history and payment confirmations (provided securely via our payment provider). It helps us with order fulfilment, handling refunds, and addressing queries.
- Technical Information: We collect data such as your IP address, browser type, device information, and referring URLs. This helps us maintain website performance and security.
- Marketing Preferences: This includes your subscription status for newsletters and any preferences you've indicated (e.g., opting out). We use this data for email marketing, only with your consent.
Note: We do not store your payment or card details directly. All payments are processed securely through our trusted payment provider.
3. How We Collect Your Data
We collect your data through the following means:
- Directly from you: when you place an order, register, subscribe, or contact us
- Automatically: through cookies and tracking technologies (see Section 7)
4. Legal Bases for Processing
We rely on the following legal grounds to process your data:
- Contract – To fulfil your order and deliver our services
- Consent – For sending marketing emails (you may withdraw consent at any time)
- Legal Obligation – For maintaining financial and tax records
- Legitimate Interests – For purposes such as improving our site and fraud prevention
5. How We Use & Share Your Data
We use your data to provide and improve our services. We may share your data with:
- Payment Providers – To process transactions securely
- Shipping & Logistics Partners – To fulfil and track your order
- Customer Messaging Platforms – To support customer service inquiries
- Marketing Platforms – To manage newsletters (with your consent)
- Legal Authorities – If required by law
We never sell your data to third parties.
6. Data Retention
We retain data as follows:
- Order & Transactional Data: up to 7 years (for legal and accounting compliance)
- Marketing Preferences: up to 1 year after unsubscribing
- Technical/Analytics Logs: up to 2 years
7. Cookies & Tracking Technologies
We use cookies to enhance your browsing experience:
- Essential Cookies – Enable core site functionality
- Analytics Cookies – Help us understand site usage and performance
- Marketing Cookies – With your consent, used to personalise advertising
You can manage your preferences through our cookie banner or your browser settings.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Access – Request a copy of your personal data
- Rectification – Request corrections to inaccurate data
- Erasure – Request deletion of your data (where legally permissible)
- Restriction – Limit how we use your data in certain circumstances
- Portability – Receive your data in a structured, portable format
- Objection – Object to processing (e.g., for marketing purposes)
- Withdraw Consent – At any time, for activities based on consent
- Lodge a Complaint – With the Information Commissioner’s Office (ICO)
To exercise your rights, contact us at: info@kaleaarrangements.com
We will respond within 1 month (or up to 3 months for complex requests).
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- SSL/TLS encryption
- Secure access controls
- Regular system updates and monitoring
10. International Data Transfers
Your data may be stored or processed outside the UK. In such cases, we ensure that:
- The country has an approved adequacy decision, or
- We use approved safeguards, such as Standard Contractual Clauses (SCCs)
11. Children’s Privacy
Our website is not intended for children under 13. We do not knowingly collect personal data from children under this age. Please contact us if you believe we have collected such data inadvertently.
12. Changes to This Policy
We may update this policy from time to time (e.g., due to legal changes or new services). Updates will be reflected in the “Last Updated” date above. Significant changes will be announced on our website or via email.
13. Contact Information
If you have any questions or wish to exercise your rights, please contact:
Email: info@kaleaarrangements.com
Kalea Arrangements – ensuring your trust and privacy, today and always.