Privacy Policy

This Privacy Policy explains how Kindred Vitality Ltd ("we", "us", "our"), operating the website at powerpolish.world (the "Site"), collects, uses, stores and shares your personal data when you visit the Site or place an order. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data we collect

We may collect the following categories of personal data:

• Identity data: name.
• Contact data: email address, telephone number, delivery address.
• Transaction data: order details, product selections, payment method choice (we do not store full card numbers).
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, device identifiers, pages visited, referral source.
• Usage data: information about how you use the Site, including pages viewed and actions taken.
• Marketing and communications data: your preferences for receiving marketing from us and your communication preferences.
• Cookie data: see Section 7 and our Cookie Policy for details.

We do not collect any special category data (health, race, religion, biometric, etc.). If you voluntarily include health-related information in a message to us, we will treat it as confidential and use it only to respond to your enquiry.

2. How we collect your data

• Directly from you: when you complete the order form, contact form, or communicate with us by email.
• Automatically: via cookies and similar technologies as you browse the Site (see Section 7).
• Third parties: analytics providers (Google Analytics), advertising partners (Google Ads), and payment processors.

3. Legal bases for processing

4. How we use your data

• To process and fulfil your order and communicate order status to you.
• To respond to your enquiries submitted via the contact form or by email.
• To comply with our legal and regulatory obligations, including tax and consumer protection law.
• To analyse Site usage and improve Site performance (analytics, with your consent).
• To deliver relevant advertising if you have consented to marketing cookies.
• To detect and prevent fraud and abuse of the Site.

We will not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Data sharing and third parties

We do not sell your personal data. We may share your data with:

• Delivery and fulfilment partners: to ship your order (name and delivery address only).
• Payment processors: to handle secure payment (they receive payment data directly; we do not store card details).
• Google LLC: for Google Analytics (usage statistics) and Google Ads (advertising), subject to your cookie consent. Google may transfer data to the USA under Standard Contractual Clauses. See Google's Privacy Policy.
• Legal and regulatory authorities: where required by law, court order or to protect our legal rights.
• Professional advisers: lawyers, accountants and insurers, under confidentiality obligations.

All third-party processors are required to process your data only on our documented instructions and in accordance with UK GDPR.

6. International transfers

Where your data is transferred outside the UK or EEA (for example, to Google servers in the USA), we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses, or we rely on an adequacy decision where applicable.

7. Cookies

We use cookies and similar tracking technologies. You can manage your cookie preferences via the banner displayed when you first visit the Site, or at any time via your browser settings. For full details of every cookie we use, see our Cookie Policy.

We operate Google Consent Mode v2. Analytics and advertising cookies are set only after you grant consent. Essential cookies (necessary for the Site to function) are always active.

8. Data retention

• Order data: retained for 7 years from the date of transaction for tax and accounting purposes.
• Contact enquiry data: retained for 2 years from the date of last correspondence, then securely deleted.
• Analytics data: retained per Google Analytics default settings (up to 14 months), subject to your consent.
• Cookie consent records: retained for 12 months.

9. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): to request deletion of your data where there is no lawful basis to continue processing it.
• Right to restriction: to ask us to restrict processing of your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Rights related to automated decision-making: we do not carry out solely automated decision-making with legal or significant effects.

To exercise any of these rights, please contact us at info@powerpolish.world. We will respond within one calendar month. We may need to verify your identity before fulfilling a request.

10. Right to lodge a complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concern before you contact the ICO, so please contact us first.

11. Data security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include encrypted data transmission (HTTPS/TLS), restricted internal access and regular security reviews. However, no internet transmission is completely secure and we cannot guarantee absolute security.

12. Children

Our Site and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

13. Links to third-party sites

Our Site may contain links to third-party websites (such as external reference sources). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Where changes are material, we will take reasonable steps to inform you (for example, via a notice on the Site). Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

15. Contact us

For any questions about this Privacy Policy or our data practices, please contact:

Kindred Vitality Ltd
14 Harley Gardens, London, SW10 9SH, United Kingdom
Email: info@powerpolish.world