Data we use

We may use account and contact details, order and payment references, shipping information, support conversations, preferences, and security records. When needed for security, bot protection, language, or regional service availability, we may process IP address, device/browser details, and approximate region. With analytics consent, we record how each visit uses the website, to run and improve it: pages viewed, buttons and links clicked, checkout steps reached, error messages shown, add-to-cart, wishlist and chat actions, time on page and scroll depth, the referring site and campaign tags of the link you arrived from, device type (mobile or desktop), and approximate region derived from your time zone. A first-party cookie (kd_vid) links your visits for up to 13 months, visits are linked to your account when you are signed in, browser identifiers such as the Google Analytics client ID may be used, and an order is linked to the visit it came from. Without analytics consent none of this is recorded. Advertising click identifiers are used only with marketing consent. We never record what you type into forms or the search box, or your payment details. We do not need optional tracking consent to browse or place an order.

User Content: We collect Personal Data that you provide through our Services ("Content"), including messages or prompts and content you upload, such as files, images, and videos, depending on the features you use. When our Services allow you to interact with other users, such as by posting, commenting, or sending messages, we treat those interactions as Content too.

Communication Information: If you communicate with us, such as by email or through our pages on social media sites, we may collect Personal Data such as your name, contact information, and the contents of the messages you send ("Communication Information").

Why we use it

We use data to provide requested services, process and deliver orders, provide support, prevent abuse, secure the website, comply with legal obligations, and maintain business records. With analytics consent, we use our own visit measurement to find pages, buttons, and checkout steps that fail or make people leave, and to measure which campaigns bring visitors. Analytics, marketing, and personalization are separate optional purposes. Internal agent tools may use a customer's records only when the customer has explicitly enabled the internal-use choice in the privacy center.

Sharing and international processing

We share the minimum necessary information with service providers that support hosting, payments, delivery, customer support, email, bot protection, regional lookup, analytics, marketing, or internal operations. Providers may process data outside your country under the safeguards and contractual terms we are required to use. We do not sell personal information as a business practice.

Data Security

We implement appropriate security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. We use industry-standard encryption technology to safeguard sensitive data during transmission. However, please note that no method of data transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

• Other Information You Provide: We may collect other information you provide when participating in our events or surveys, or when you provide us or a vendor acting on our behalf with information needed to establish your identity or age.
• Log Data: Our systems may receive information that your browser or device sends when you use our Services, including your IP address, browser type and settings, request date and time, and interactions with our Services.
• Usage Data: With analytics consent, we collect the pages you view, buttons and links you click, checkout steps you reach, error messages shown, time zone, access dates and times, device type, user agent and version, and connection information, and may link your visits for up to 13 months. Without analytics consent we do not collect this.
• Location Information: We may determine the general area from which your device accesses our Services using information such as its IP address, for security, fraud prevention, language, and regional service availability. We do not use this information as precise GPS location.
• Cookies and Similar Technologies: We use necessary cookies and similar technologies to operate our Services, maintain preferences, authenticate users, and provide customer support. Optional analytics, marketing, and personalization technologies are used only according to your privacy choices.
• Information We Receive from Other Sources: We may receive information from trusted security, payment, delivery, and fraud-prevention partners to operate and protect our Services. We may receive information from marketing providers only where permitted by your privacy choices and applicable law.

Retention

We retain transaction, account, security, and support records for as long as needed for the stated purpose, legal obligations, dispute handling, and accounting. Website visit records are deleted after 13 months; only daily totals without identifiers are kept longer. The kd_vid cookie expires 13 months after your last visit and is removed when you withdraw analytics consent. We are adding deletion and retention procedures to the operational data schedule; contact us if you need a record-specific retention answer.

Your rights

Depending on your location, you may request access, correction, deletion, restriction, objection, portability, or information about processing, and withdraw consent for optional purposes. California residents may also use applicable know, delete, correct, opt-out, and non-discrimination rights. We will verify requests and respond within the period required by applicable law.

Additional U.S. State Disclosures

Some U.S. state privacy laws require specific disclosures. The table below summarizes the categories of Personal Data we collect and how we use and disclose that information.

We do not sell Personal Data or share Personal Data for cross-context behavioral advertising. We also do not process sensitive Personal Data to infer characteristics about a consumer.

Internal agent tools

Internal support and agent tools are a separate purpose. The MCP customer views use a default-deny filter: a customer is excluded unless an explicit internal-use grant is recorded. Withdrawing that choice stops future MCP view access; it does not erase order, tax, fraud, or other records that we must retain.

Contact and requests

Send privacy, access, deletion, correction, or objection requests to [email protected] .

We consider relevant obligations that may apply to our activities, including the GDPR and ePrivacy rules, California privacy rights under the CCPA/CPRA, Indonesia's Consumer Protection Law (UU No. 8 Tahun 1999), Personal Data Protection Law (UU No. 27 Tahun 2022), Electronic Information and Transactions Law (UU ITE No. 1 Tahun 2024), PP 71/2019, PP 80/2019, and the EU AI Act where its scope reaches our processing. We will update this notice when applicable requirements or our processing change.