This Privacy Notice explains how we collect, store, use and protect personal data about you when you access www.kirlox.com (the "Website"), shop with us in-store or otherwise provide your personal data to us including via our social media platforms. This website is owned and run by Kirlox LLC. If you are using our Services or the Website, Kirlox LLC. is the controller of your personal data.

This notice should also be read in conjunction with and shall form part of any Terms and Conditions on our Website.

When we refer to “Kirlox”, or “we,” “us,” or “our,” in this Privacy Notice, we are talking about Kirlox LLC, including its subsidiaries, affiliates and their respective parent and subsidiary companies.

The sections below outline what we use your information for, why we do it and what allows us to do so legally:

WHEN YOU VISIT OUR WEBSITE OR CONTACT US DIRECTLY, WE COLLECT THE FOLLOWING INFORMATION:

What we do	Why we do it	Why we can do it (legally)
Deliver items to your address	Ensure that you receive the items you have paid for.	When you buy something from us you enter into a contract of sale. We need your personal details to fulfill this contract.
Process your payment information	To ensure we get paid for the items you buy; to be able to give you a refund when you return something.	We need this information to fulfill our sales contract with you.
Allow you to register an account with us	To save your preferences and make it easier for you to shop with us.	It’s important for us as a business to make your shopping experience as easy as possible.
Manage cookies on our Website	We use cookies to improve the experience of visitors to our Website, analyze site usage, and assist in our marketing efforts.	We ask for your consent to use cookies.
Respond to queries and complaints	We want to ensure that we give you the best possible service.	It is important to us as a business that you get the best experience.
Review your previous orders	To help us respond to queries and complaints.	It is important to us as a business that you get the best experience.
Receive accident and incident reports	To investigate accidents and incidents and keep a record of them.	It is important to us as a business that we do this.
Respond to Data Subject Rights Requests	Your data protection rights are important to us and we want to help you execute them.	We have a legal obligation to do this.
Record your details when you contact us on social media	To help provide assistance in securing an item or service or when you are unhappy with our products/services	It is important for us as a business to do this.
Customer address mapping and location analysis (using data from 3rd Party)	So that we can see which stores are located closest to our customers and to understand shopping patterns.	It is important for us as a business to do this.
Customer Analysis	To reward customer loyalty, to analyse the business performance and to improve customer satisfaction.	It is important for us as a business to do this.
Customer Consent Management	To ensure our records are up to date with your consent preferences	It is important for us as a business to do this.
Email, Direct Mail and SMS Marketing	To inform our subscribers about Kirlox, our promotions and new services.;	We get your consent to send you marketing information.
Analyse Website browsing behaviour and ad effectiveness, including on 3rd Party websites.	To show you more relevant ads and to measure how well our advertising campaigns are working.	It is important for us as a business to do this.
Run social media competitions	To raise brand awareness.	It is important to us as a business to raise our brand awareness.
Social media analysis	To improve the product recommendations we give you and to help when you are unhappy with our products / services.	We ask for your consent to use your information for marketing and/or sentiment analysis.
Investigate complaints and handle legal and insurance claims	To resolve your complaint, ensure the same complaint doesn’t arise again, to provide legal advice and to protect ourselves against fraudulent claims.	We have a legal obligation to do this and it is important to us as a business to do it.

We use your information for customer insight and marketing purposes. In some cases we will purchase information from 3rd Parties, but this usually aggregates data and does not normally directly identify you. We will also keep a record of your social media account name and information you make available to us via your social media account settings when you connect your social media account to ours, by messaging us, liking or following a page, tagging us in post or commenting on our posts.

Sometimes, we use your personal data such as your browsing history, username and purchases to personalize our Websites, online media and communications so they’re more relevant to you, giving you a better online experience. We do this through our use of Cookies and, where appropriate, information we have gathered about you from other interactions (e.g. products you buy or browse, or links that you have clicked on) or other sources. For example, we may greet you by name, show search results that reflect things most likely to be of interest to you and show you content that’s more relevant to you and the things you have previously shown an interest in.

Yes, but we believe it’ll result in your online experience being less personal and relevant to you. The content and search results you see will be generic rather than related to your interests. Personalizing your online experience doesn’t affect the marketing options you have selected, it’s to offer you a service personalized to your needs. If you have an account, you can email the contact details given below with your request. If you’re not a registered customer, information held in our Cookies may be used to select content that we feel is more relevant for you. To prevent this, you can clear your cookies.

When we process information on the basis that it is important for us as a business to do it, we will consider your interests also. We will weigh up our business interests with your interests to ensure they are fairly balanced. You can contact us for further information on this.

We take great care to ensure the security of our Websites and your personal information. To ensure that we keep your information secure we use technical security measures such as encryption, access controls, firewalls and logging, and organizational security controls such as security policies and procedures, awareness training for employees and 3rd party vendor assessments.

To take full advantage of all security features you should use an up-to-date browser. To further ensure your personal information is safe, please note, we will never ask a customer to confirm any debit or credit card details via email.

We’ll always conduct a full review of our suppliers’ processes and procedures including storage solutions for our data. To ensure adequacy when sending your data outside of the UK and EEA, we put in place contracts based on the standard EU model contract clauses to guarantee adequacy, we also use alternative safeguards where standard EU model contract clauses are not suitable.

Our products and services may be provided using resources and servers located in various countries around the world. It is possible that your personal data may be transferred across international borders including to countries outside the European Economic Area (EEA) that do not have laws providing specific protection for personal data or that have different legal rules on data protection. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your personal data. To address concerns about transfers from the UK or EEA to countries not considered adequate by the European Commission, we have implemented appropriate measures to protect your personal data. For example, we use standard contractual clauses adopted by the European Commission and binding corporate rules and we require the use of appropriate technical and organizational information security measures. As your data is stored safely and securely both inside and outside of the EEA, we cannot offer an alternative storage solution if you wish to object to having your data stored outside of the EEA. To do this, you’ll need to close your account with Kirlox.

Your personal information may be processed with automated methods to understand which Kirlox outlet you usually shop at, whether you have been shopping recently or not, and which products you purchase or which you might be interested in hearing about in future. This data may include things like your age, gender and purchasing history or preferences. When your Personal Data is processed in this way it is used in summarized (by which we mean anonymised and aggregated) business reports, or to tailor news, offers and promotions we feel you will find most relevant. For example, to advise you of a promotion, event or product launch at a store that you shop at. This processing could determine whether or not you are included in tailored promotions or offers, or advised of Kirlox news, events or product launches.

Kirlox’s products and services are not intended for use by children. If you are under the age of majority in your place of residence, you may use Kirlox products and services only with the consent of or under the supervision of your parent or legal guardian. We may ask a User to verify its date of birth before collecting any personal information from them. If the User is under the age of 13, the Service will be either blocked or redirected to a parental consent process. Consistent with the requirements of the US Children’s Online Privacy Protection Act (COPPA), if we learn that a child under age 13 has provided personal data to or through the products or services without first receiving their parent’s verified consent, we will dispose of such personal data. If you believe we may have collected any information from a child under age 13, please Contact us.

You also have a right to lodge a complaint with a supervisory authority in your country. You can find contact details for relevant supervisory authority for your country of residence.

We do not sell your personal information for monetary consideration. However, California law may characterize our sharing of personal information with companies that provide services to us, such as companies that help us to market or advertise our products and services to you, as "sales”. We may “sell” or may have “sold” the following categories of personal information for valuable consideration to the third parties listed below:

We may offer you various financial incentives such as discounts and special offers when you provide us with contact information and identifiers such as your name and email address. When you sign-up for our loyalty or professional programs, email list or other discounts and special offers, you opt-in to a financial incentive. You may withdraw from a financial incentive at any time by opting out from our emails or closing your loyalty or professional member account. Generally, we do not assign monetary or other value to personal information, however, California law requires that we assign such value in the context of financial incentives. In such a context, the value of the personal information is related to the estimated cost of providing the relevant financial incentive(s) for which the information was collected.

From time to time we may provide links to other sites. This privacy Notice only covers our Website and any website that we own and control. It does not cover links to other sites nor information collected by parties that own and control those sites or their use of cookies when you visit another site. This notice does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any Website or service to which our services link. The inclusion of a link on our services sites does not imply endorsement of the linked site or service by us or by our affiliates. In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM, or any other application developer, application provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any personal data you disclose to other organizations through or in connection with the applications or our social media pages.

We use third-party advertising companies to place advertisements regarding goods and services that may be of interest to you when you access and use our services and other Websites or online services. You may receive advertisements based on information relating to your access to and use of our services and other Websites or online services on any of your devices, as well as on information received from third parties. These companies place or recognise a unique cookie on your browser (including using pixel tags). They also use these technologies, along with information they collect about your online use, to recognise you across the devices you use, such as a mobile phone and a laptop.

The LAST UPDATED text at the top of this privacy notice indicates when it was last revised. Kirlox may change this notice at any time with or without notice. Any changes will become effective when we post the revised privacy notice on this site’s home page. We recommend that you revisit this notice from time to time to learn of any such changes. If this notice is changed in a material way, Kirlox will add text advising of such change at the beginning of this notice and on this site's home page for 30 days.