Privacy Policy for Kingdom of Simplicity
1. Introduction
At Kingdom of Simplicity, accessible at kingdomofsimplicity.com (the “Website”), your privacy and the protection of your personal data are of paramount importance to us. We are committed to upholding the highest standards of confidentiality, transparency, and compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), in the collection, use, and safeguarding of your personal information. This Privacy Policy outlines how we handle your personal data to foster trust and accountability, demonstrating our privacy-first approach to service and operation.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users of the Website and covers the processing of personal data by Kingdom of Simplicity. For the purposes of applicable data protection legislation, Kingdom of Simplicity acts as the data controller responsible for the personal data collected via kingdomofsimplicity.com.
As the controller, Kingdom of Simplicity determines the purpose and manner in which personal information is processed. For any questions related to this Privacy Policy or the practices described herein, you may contact us at [email protected].
3. Categories of Data Processed
We collect and process the following categories of personal data for various legitimate business and operational needs:
a. Usage Data
This includes information collected automatically through your use of the Website, such as your IP address, browser type, operating system, referring URLs, pages viewed, access dates/times, and session duration.
b. Account Data
Personal information you voluntarily provide when creating an account or subscribing to services, including your full name, mailing address, email address, phone number, and other identifying details.
c. Profile Data
Information related to your user profile, including communication preferences, purchase history, saved items, and behavior patterns.
d. Communication Data
Records of correspondence or interactions via customer support or other communication features, including inquiries, complaints, feedback, and support history.
e. Technical Data
Device specifications (e.g., model, operating system, hardware identifiers) and system configurations collected to optimize compatibility and Website performance.
f. Transaction Data
Details necessary for processing payments and fulfilling orders, such as payment card information (processed securely through third-party providers), billing address, shipping address, and order details.
g. Preference Data
User-specified interests in products, services, and optional marketing preferences or opt-in consents.
4. Legal Bases for Processing
We process personal data under the following lawful bases, depending on the specific processing activity:
– Consent: Where required by law, we obtain informed and freely given consent (e.g. marketing emails, cookies).
– Contractual Necessity: To fulfill our obligations under contracts with you, such as delivering products or managing your account.
– Legitimate Interests: For operational efficiency, fraud prevention, Website optimization, and improving customer service, provided such interests are not overridden by your data protection rights.
– Legal Obligation: When required to comply with applicable laws or regulatory requirements.
5. Your Rights
Subject to applicable laws, you have the following rights regarding your personal data:
– Right of Access – You may request access to the personal data we hold about you.
– Right of Rectification – You may request corrections to inaccurate or incomplete data.
– Right of Erasure – Also known as the “right to be forgotten,” you can request deletion of your data under qualifying circumstances.
– Right to Restrict Processing – You may request restrictions on how we use your data.
– Right to Data Portability – You are entitled to receive personal data you provided in a structured, commonly used, and machine-readable format.
– Right to Object – You may object to processing based on legitimate interests or direct marketing.
– Right to Withdraw Consent – Where processing is based on consent, you may revoke such consent at any time.
To exercise any of these rights, please contact us at [email protected]. We may require identity verification to fulfill such requests.
6. Security Measures
We implement robust technical and organizational safeguards designed to ensure a high level of data security, including but not limited to:
– Encryption of personal and transactional data during transmission and storage.
– Access control protocols, limiting data access to authorized personnel only.
– Regular backups and disaster recovery mechanisms.
– Staff training on data privacy obligations and best practices.
– Continuous monitoring and vulnerability management procedures.
7. International Data Transfers
Where personal data is transferred outside of your jurisdiction, including to countries that may not provide the same level of data protection, we ensure appropriate safeguards are in place. These may include the use of Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions where applicable. We maintain compliance with both GDPR cross-border requirements and relevant local data protection regulations.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:
– Usage Data: Up to 12 months for analytics and security.
– Account and Profile Data: Retained as long as you maintain an active account, and up to 6 years thereafter per legal retention requirements.
– Communication Data: Retained for up to 3 years from final correspondence.
– Transaction Data: Retained for a minimum of 7 years to comply with financial and tax obligations.
– Preference and Marketing Data: Retained while your preferences remain active or until consent is withdrawn.
9. Cookie Policy
We use cookies and similar technologies to enhance your experience, improve Website functionality, and analyze usage. Cookies on kingdomofsimplicity.com may include:
– Essential Cookies: Required for Website operation.
– Functional Cookies: Enable enhanced features and personalization.
– Analytics Cookies: Track site usage for performance metrics.
– Performance Cookies: Measure performance to optimize content and usability.
Cookies may also be set by third-party service providers used on our Website.
10. Cookie Management and Compliance
Upon your first visit to kingdomofsimplicity.com, you are presented with cookie consent options in compliance with GDPR and CCPA. You may modify your cookie preferences at any time via our cookie settings interface or by adjusting your browser settings. You may also request “do not sell or share” capabilities as per CCPA where relevant.
11. Children’s Privacy
Our Website is not directed to children under the age of 13, and we do not knowingly collect personal data from children. If you are a parent or guardian who becomes aware that your child has provided us with personal information without your consent, please contact us at [email protected] and we will take prompt steps to remove the information and, if applicable, deactivate the account.
12. Policy Updates
We reserve the right to make changes or updates to this Privacy Policy to reflect new legal or regulatory obligations, changes in our business practices, or technical developments. Where legally required, we will notify users of material changes and obtain consent as appropriate. Users are expected to review the policy periodically to stay informed.
13. Contact
If you have any questions, concerns, or requests in relation to this Privacy Policy or our handling of your personal data, please contact us at:
Email: [email protected]
We are committed to full compliance with privacy and data protection requirements. If you believe your data rights have been violated, we encourage you to contact us directly. You also have the right to lodge a complaint with your local data protection authority.