KIMLUD PRIVACY POLICY

Last updated: September 10, 2026

KIMLUD operates this online store and website, including its related content, features, products, tools, and services (collectively, the “Services”).

This Privacy Policy explains how KIMLUD collects, uses, stores, and discloses personal information when you visit our website, use our Services, purchase our physical products or gift cards, create or use an account, communicate with us, subscribe to marketing communications, or otherwise interact with KIMLUD.

KIMLUD uses Shopify to operate and provide the Services. Shopify and other service providers may process personal information on our behalf as necessary to provide the Services.

This Privacy Policy also explains our use of cookies and similar technologies and how we handle email and SMS/text messaging information and marketing preferences.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our Services, we may collect or process the following categories of personal information:

Contact information: name, email address, telephone number, billing address, shipping address, and other contact information you provide.

Order and transaction information: products viewed, added to cart, purchased, returned, exchanged, cancelled, or otherwise associated with your transactions, including gift card purchases and related transaction information.

Payment information: payment method, payment status, transaction information, and related billing information. Payment card information is generally processed by payment providers rather than stored directly by KIMLUD.

Account information: account credentials, preferences, addresses, and other information associated with your customer account, where applicable.

Marketing information: email address, telephone number, marketing preferences, subscription status, and records of your marketing consent or opt-out preferences.

Communications: information you provide when contacting customer service or communicating with us.

Device and technical information: IP address, browser type, device type, operating system, network information, and other technical identifiers.

Usage information: information about how you browse, navigate, search, and interact with our website and Services.

Cookie information: information collected through cookies, pixels, tags, and similar technologies.

We seek to collect information that is reasonably necessary for the purposes described in this Privacy Policy or otherwise permitted by applicable law.

2. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

• Directly from you when you place an order, purchase a gift card, create an account, contact us, subscribe to marketing communications, enter your email address or telephone number, or otherwise provide information.
• Automatically when you browse or interact with our website through cookies and similar technologies.
• From Shopify and service providers that process information in connection with our Services.
• From payment processors, shipping and fulfillment providers, fraud-prevention services, analytics providers, advertising providers, messaging providers, and other business partners where permitted by law.
• From other sources where permitted by applicable law.

3. EMAIL MARKETING

If you voluntarily provide your email address and choose to receive marketing communications, we may use your email address to send promotional communications about KIMLUD, including:

• New arrivals and new products;
• Promotional offers;
• Discount codes;
• Special offers; and
• Other updates relating to the KIMLUD store.

Where consent is required by applicable law, we will obtain the appropriate consent before sending marketing communications.

Providing an email address does not by itself mean that you have consented to receive marketing communications where consent is legally required.

You may unsubscribe from promotional emails at any time by using the unsubscribe link provided in our marketing emails or by contacting us to update your preferences.

Opting out of marketing emails does not prevent us from sending necessary transactional or service-related communications, such as order confirmations, shipping notifications, security notices, or customer-service responses.

We may retain records of your marketing preferences and, where applicable, consent and opt-out requests in order to manage subscriptions and comply with applicable legal requirements.

4. SMS / TEXT MESSAGING AND MARKETING

If you voluntarily provide your telephone number and actively opt in to receive SMS/text messages from KIMLUD, we may use your telephone number to send the types of messages described at the time of opt-in, including promotional messages about new arrivals, special offers, promotions, and discount codes.

Your telephone number will not be treated as marketing consent solely because you provide it to us for an order, customer-service request, account, shipping, or other transactional purpose. Where consent is required by applicable law, we will obtain your affirmative consent before sending marketing SMS/text messages.

Depending on the messaging program, messages may be sent through a third-party messaging service provider acting on our behalf. That provider may process your telephone number, consent status, message-related information, and other information necessary to operate and maintain the messaging service.

Message frequency may vary. Standard message and data rates may apply depending on your mobile carrier and plan.

You may opt out of marketing SMS/text messages at any time by following the opt-out instructions provided in the messages, such as replying STOP where supported. You may also contact KIMLUD to request that your marketing messaging preferences be updated.

Opting out of marketing messages does not prevent KIMLUD from sending necessary transactional or service-related communications, such as order confirmations, shipping notifications, security notices, or responses to customer-service requests.

We may retain records of your SMS/text messaging preferences, including consent and opt-out information, as reasonably necessary to administer the messaging program, respect your choices, and comply with applicable legal requirements.

5. HOW WE USE PERSONAL INFORMATION

We may use personal information for purposes including:

• Processing and fulfilling orders.
• Processing gift card purchases and related transactions.
• Processing payments and preventing fraudulent transactions.
• Arranging shipping and delivery.
• Managing returns, refunds, and exchanges.
• Managing customer-service requests.
• Managing customer accounts and preferences.
• Sending marketing communications where permitted by law.
• Managing email and SMS/text marketing subscriptions and preferences.
• Providing information about new arrivals, promotions, offers, and discount codes.
• Measuring and improving marketing campaigns where applicable.
• Providing, maintaining, and improving our website and Services.
• Personalizing your shopping experience where permitted.
• Detecting, preventing, and investigating fraud, abuse, security incidents, and other harmful or unlawful activity.
• Communicating with you about orders, products, Services, and customer support.
• Complying with legal and regulatory obligations.
• Establishing, exercising, or defending legal claims.
• Protecting the rights, property, and security of KIMLUD, our customers, and others.

6. LEGAL BASES FOR PROCESSING — EEA, UK, AND OTHER APPLICABLE JURISDICTIONS

Where applicable, including for individuals in the European Economic Area (EEA) and United Kingdom, we process personal information on one or more of the following legal bases:

Contract: where processing is necessary to provide products or Services you have requested, including processing and fulfilling orders.

Legal obligation: where processing is necessary to comply with applicable laws or regulatory requirements.

Legitimate interests: where processing is necessary for purposes such as operating and improving our business, preventing fraud, maintaining security, and protecting our legal rights, provided those interests are not overridden by your rights.

Consent: where you have provided consent for a particular processing activity, including certain marketing communications or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies, including pixels, tags, and related technologies, to operate our website and provide our Services.

Cookies and similar technologies may be used to:

• Keep the website functioning properly.
• Remember preferences and settings.
• Maintain shopping-cart and checkout functionality.
• Understand how visitors use our website.
• Analyze website performance.
• Improve our Services.
• Support marketing and advertising activities where applicable.
• Measure advertising and marketing performance.
• Provide a more relevant shopping experience.

Some cookies are necessary for the operation of the website. Other cookies may be used for analytics, personalization, advertising, or similar purposes.

Where required by applicable law, we will request consent before using non-essential cookies or similar technologies.

You may manage available cookie preferences through our cookie consent tools and through your browser settings. Disabling certain cookies may affect website functionality.

Our cookie practices may change as we add, remove, or modify applications, analytics tools, advertising technologies, or other features on our website.

8. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary to operate our business and provide the Services, including to:

• Shopify and technology providers that operate or support our online store.
• Payment processors and financial service providers that process transactions.
• Shipping, logistics, and fulfillment providers that help deliver orders.
• Customer-service and communications providers.
• SMS/text messaging providers where applicable.
• Fraud prevention and security providers.
• Analytics and technology providers.
• Advertising and marketing providers, where applicable and permitted by law.
• Professional advisers, such as legal, accounting, insurance, or financial advisers.
• Government authorities, regulators, courts, or law enforcement, where required or permitted by law.
• Business transaction parties, where personal information is involved in connection with a merger, acquisition, restructuring, financing, sale of assets, bankruptcy, or similar transaction.
• Other parties at your direction or with your consent.

We do not disclose personal information to third parties except as described in this Privacy Policy, as otherwise permitted by law, or with your direction or consent.

9. SHOPIFY

Our online store is powered by Shopify.

Shopify provides the technology and infrastructure used to operate our store and may process personal information in connection with providing its services.

Shopify may also process information relating to interactions with Shopify-powered stores and services in accordance with its own privacy practices.

For more information about how Shopify processes personal information, please review Shopify's Privacy Policy:

https://www.shopify.com/legal/privacy

10. PAYMENT INFORMATION

Payments may be processed through third-party payment providers, including payment methods made available through Shopify or other payment processors.

KIMLUD generally does not store complete payment card numbers on its own servers. Payment information may be collected and processed directly by the applicable payment provider in accordance with its own privacy policy and security practices.

We may receive limited payment-related information, such as payment method, transaction status, transaction identifier, and other information necessary to process and manage your order.

11. INTERNATIONAL DATA TRANSFERS

Because we operate an international e-commerce business and use service providers located in different countries, your personal information may be transferred to, stored in, or processed in countries outside your country of residence.

Where required by applicable law, we use appropriate safeguards for international transfers, including recognized contractual protections or other legally permitted transfer mechanisms.

12. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide our Services and fulfill orders.
• Maintain business and transaction records.
• Manage marketing subscriptions and opt-out requests.
• Maintain records of marketing consent where required.
• Comply with legal, tax, accounting, and regulatory obligations.
• Resolve disputes.
• Prevent fraud and abuse.
• Establish, exercise, or defend legal claims.
• Enforce our agreements.

Retention periods may vary depending on the type of information and applicable legal requirements.

13. DATA SECURITY

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security of personal information.

Please do not send payment card numbers, passwords, or other highly sensitive information through unsecured communications.

14. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have rights regarding your personal information, including:

• The right to access personal information we hold about you.
• The right to request correction of inaccurate or incomplete information.
• The right to request deletion of personal information, subject to applicable legal exceptions.
• The right to request restriction of certain processing.
• The right to object to certain processing.
• The right to receive certain personal information in a portable format.
• The right to withdraw consent where processing is based on consent.
• The right to opt out of marketing communications.
• Additional rights provided under applicable privacy laws.

To exercise applicable rights, please contact us using the information provided below.

We may need to verify your identity before completing certain requests, as permitted or required by applicable law.

15. UNITED STATES PRIVACY RIGHTS

Certain U.S. states provide residents with additional privacy rights.

Depending on your state of residence and applicable law, these rights may include rights to access, correct, delete, or obtain personal information, as well as rights relating to certain targeted advertising, sale, or sharing activities.

The availability and scope of these rights vary by state.

If you are entitled to additional rights under applicable state privacy law, you may contact us using the information below to submit a request.

We will process eligible requests in accordance with applicable law.

Where required by applicable law, you may also have the right to appeal a decision regarding a privacy-rights request.

16. TARGETED ADVERTISING AND PRIVACY CHOICES

Depending on the technologies and services used on our website, we may use certain information to measure advertising effectiveness, understand customer activity, or provide advertising that may be more relevant to visitors.

Where required by applicable law, you may have the right to opt out of certain forms of targeted advertising, sale, or sharing of personal information.

Available privacy controls may vary depending on your location and the technologies active on our website.

Where legally required and technically supported, we may recognize applicable browser-based privacy signals, including Global Privacy Control (GPC).

17. CHILDREN'S PRIVACY

Our Services are not directed to children who are below the minimum age permitted to use the Services under applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us, please contact us so that we can review the situation and take appropriate action where required.

18. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, services, social media platforms, payment providers, messaging services, or other online resources.

We are not responsible for the privacy practices, security, or content of third-party websites or services.

We encourage you to review the privacy policies and terms of third parties before providing them with personal information or using their services.

19. EUROPEAN PRIVACY RIGHTS AND COMPLAINTS

If you are located in the EEA or United Kingdom, you may have additional rights under applicable data protection laws.

If you believe that we have not handled your personal information appropriately, please contact us first so that we have an opportunity to address your concern.

You may also have the right to lodge a complaint with the data protection supervisory authority in your country or region.

For customers in France, the relevant authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our Services, business practicesIf you have questions about this Privacy Policy, our use of cookies and similar technologies,, technologies, or legal requirements.

When we make changes, we will update the “Last updated” date at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice of material changes.

21. CONTACT US

If you have questions about this Privacy Policy, our use of cookies and similar technologies, email or SMS/text messaging, or wish to exercise an applicable privacy right, please contact us:

KIMLUD

Privacy: privacy@kimlud.com

Customer Service: support@kimlud.com

Contact: https://kimlud.com/pages/contact-us-customer-service

Phone: +33 06 52 89 85 56

For applicable data protection laws, KIMLUD acts as the controller of personal information where it determines the purposes and means of processing that information.

KIMLUD is based in France and serves customers internationally.