Privacy policy
This Privacy Policy describes how ECOM K LTD (trading as "Kalm", “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from mykalm.co (the "Site") or otherwise communicate with us (collectively, the "Services").
For the purposes of applicable data protection laws (including the UK General Data Protection Regulation – UK GDPR), ECOM K LTD is the Data Controller of your personal information collected through the Services.
You can contact us at: contact@mykalm.co
Changes to This Privacy Policy
We may update this Privacy Policy from time to time for operational, legal or regulatory reasons. When we do, we will update the “Last Updated” date at the top of this page and publish the revised policy on this Site.
How We Collect and Use Your Personal Information
We collect personal information directly from you, automatically through cookies, and from third parties (such as Shopify and payment processors) to:
-Provide our services (e.g., process orders, manage your account)
-Communicate with you
-Send marketing and promotional materials (when legally permitted)
-Prevent fraud and ensure security
-Comply with legal obligations
The types of personal information we collect include:
-Name, email address, shipping and billing address, phone number
-Order history and payment confirmations
-Information from customer service interactions
-IP address, device/browser info, and usage data via cookies and similar technologies
You can find more about how Shopify uses cookies here: https://www.shopify.com/legal/cookies
How We Share Your Personal Information
We may share your data with trusted partners such as:
-Payment processors (to process transactions)
-Shopify (our e-commerce provider)
-Shipping and fulfillment partners
-Advertising and analytics services
-Legal or regulatory authorities when required
We do not sell your data. Any data shared with third parties is done so under contract and with respect to your privacy rights.
International Data Transfers
Your personal data may be transferred and processed outside the UK or EEA (e.g., in the United States). Where we do this, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions recognised by the UK Government.
Your Rights Under the UK GDPR
Depending on your location and applicable law, you may have the right to:
-Access the personal data we hold about you
-Request rectification of inaccurate data
-Request deletion ("right to be forgotten")
-Restrict or object to data processing
-Receive your data in a portable format
-Withdraw consent where processing is based on consent
-Lodge a complaint with a supervisory authority
You can exercise your rights by contacting us at contact@mykalm.co. We may ask you to verify your identity before responding.
Complaints – UK Customers
If you are located in the United Kingdom and are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
-Website: www.ico.org.uk
-Helpline: +44 303 123 1113
We always encourage you to contact us first so we can address your concerns directly.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements.
Children’s Privacy
Our Services are not intended for children under the age of 16. We do not knowingly collect data from minors. If you are a parent or guardian and believe your child has provided personal data, please contact us immediately.
Security
We take reasonable steps to protect your personal data. However, no method of transmission over the internet or electronic storage is 100% secure.
Contact Us
If you have any questions or would like to exercise your data rights, please contact us at: contact@mykalm.co