Privacy Policy

Identifiability: Legal name, authenticated email, and verified contact numbers required for contractual fulfillment.

Commerce Metadata: Granular order history, SKU preferences, and fulfillment status used for operational continuity.

Network Intelligence: IP addresses, geolocated region, and device fingerprinting used primarily for security and DDoS mitigation.

Behavioral Analytics: Anonymous clickstream data used to optimize platform performance and navigation paths.

Contractual Necessity: Processing required to deliver the goods and services you have purchased.

Legitimate Interests: Activities like fraud prevention, network security, and internal business analytics.

Legal Obligation: Retention of financial and tax records as mandated by the relevant authorities.

Consent: Optional processing for newsletters and targeted marketing where you have explicitly opted-in.

Logistics Partners: Sharing shipping details with carriers to facilitate physical delivery.

Payment Orchestrators: Secure hand-off of transaction tokens to PCI-compliant gateways.

Infrastructure Providers: Storage of encrypted data on secure cloud servers (e.g., AWS, GCP).

We strictly vet all sub-processors to ensure they maintain data protection standards equivalent to our own.

Cross-Border Transfers: Your data may be processed in regions outside your residence, subject to strict safeguard mechanisms.

Standard Contractual Clauses: We use approved legal frameworks to ensure data protection follows the information, regardless of geography.

Data Residency: Where required by law, certain datasets are stored locally within specified jurisdictions.

Right to Erasure: The 'Right to be Forgotten'—requesting total deletion of non-essential records.

Right to Rectification: Correcting inaccurate or outdated personal information.

Right to Object: Halting processing based on legitimate interests or direct marketing.

Data Portability: Requesting your data in a structured, machine-readable format.

The platform is not directed at individuals under the age of 16 (or the legal minimum in your jurisdiction).

We do not knowingly collect personal data from children without verifiable parental consent.

If we detect unauthorized data collection from a minor, we will purge the records with immediate effect.

For complex inquiries or formal complaints, you may contact our DPO directly at dpo@kitstechsolutions.com.

We commit to acknowledging all privacy-related requests within 48 hours and resolving them within 30 days.