Privacy policy
Privacy Notice
Who We Are
This Privacy Notice is issued by Kennon Wong, trading as Kenvoire. Our postal address is 40 Ashbeach Drove, Huntingdon, PE26 2TG, United Kingdom. For any privacy-related queries, please contact us at kenvoire@outlook.com. We are the data controller responsible for your personal data.
Last Updated: May 2026
What Data We Collect
- Identity Data: name, title
- Contact Data: email address, phone number, delivery address, billing address
- Transaction Data: order history, payment details (processed by third-party payment providers — we do not store card numbers)
- Technical Data: IP address, browser type and version, device type, operating system, time zone, Shopify session data
- Usage Data: pages visited, products viewed, time spent on pages, referral source
- Marketing Data: your preferences for receiving marketing communications and your communication preferences
How and Why We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing and fulfilling your orders | Identity, Contact, Transaction | Performance of a contract |
| Managing payments | Transaction | Performance of a contract |
| Sending order confirmations and updates | Contact | Performance of a contract |
| Fraud prevention and security | Technical, Transaction | Legitimate interest |
| Improving our website and services | Technical, Usage | Legitimate interest |
| Sending marketing communications (only with consent) | Contact, Marketing | Consent |
| Complying with legal obligations (e.g., tax records) | Identity, Transaction | Legal obligation |
Who We Share Your Data With
- Shopify Inc. (our e-commerce platform provider — processes orders, hosts our store)
- Payment processors (e.g., Shopify Payments, PayPal — to process your payments)
- Delivery partners (e.g., Royal Mail, DHL — to deliver your orders)
- Advertising/Analytics partners: Meta Pixel (Facebook/Instagram), Google Ads conversion tracking, TikTok Pixel
We require all third parties to respect the security of your data and to treat it in accordance with the law. We do not transfer your personal data to third parties for their own marketing purposes without your specific consent. We share your data only with the processors listed above and only as necessary to provide our services.
International Transfers
Some of our service providers (including Shopify) are based outside the UK. Where we transfer your data outside the UK, we ensure appropriate safeguards are in place, including:
- UK International Data Transfer Agreement (IDTA) — for transfers under UK GDPR Article 46
- Standard Contractual Clauses (as supplemented by the UK Addendum to the EU SCCs)
- Or transfers to countries with a UK adequacy decision (e.g. EEA, Switzerland)
Data Retention
- Order data: retained for 6 years (HMRC tax record-keeping requirements under section 12B Taxes Management Act 1970)
- Marketing data: until you withdraw consent
- Technical/analytics data: 26 months
- Account data: until you request deletion
We will securely delete or anonymise your data when it is no longer needed.
Your Rights
Under UK GDPR you have the right to:
- Access your personal data (Subject Access Request — UK GDPR Article 15)
- Rectification of inaccurate data (Article 16)
- Erasure ("right to be forgotten" — Article 17)
- Restriction of processing (Article 18)
- Data portability (Article 20)
- Object to processing based on legitimate interests (Article 21)
- Rights related to automated decision-making and profiling (Article 22)
- Withdraw consent (where consent is our legal basis)
To exercise any of these rights, please contact us at kenvoire@outlook.com. We will respond within one month, as required by UK GDPR Article 12.
Cookies and PECR
Our use of cookies and similar tracking technologies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR), as supplemented by the UK GDPR. For details, please see our Cookie Policy.
Complaints to the ICO
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
We would appreciate the chance to address your concerns before you contact the ICO, so please contact us first.
Changes to This Notice
We may update this Privacy Notice from time to time. The Last Updated date at the top of this page indicates when it was last updated.