Menu
Account

Privacy Policy

Privacy Policy

Last updated: 2026.

This Privacy Policy explains how KESTREL COMMERCE LTD (trading as "KingRide", referred to here as "we", "us", or "our") collects, uses, shares, and protects your personal information when you visit or make a purchase from kingride.shop. We comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the ePrivacy Directive, and applicable national data protection laws.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

  • Company name: KESTREL COMMERCE LTD (trading as "KingRide")
  • Company type: UK Private Limited Company
  • Registered address: Office 15300, Initial Business Centre, Manchester, M40 8WN, United Kingdom
  • Trading website: kingride.shop
  • Data protection contact: support@kingride.shop

As a UK-based company serving customers in the EU, EEA, UK, and other countries, we comply with both the UK GDPR and the EU GDPR. Where your local data protection law provides stronger protection, that law applies.

2. Information We Collect

A. Device Information (collected automatically when you visit):

  • IP address, browser type and version, operating system, time zone
  • Pages viewed, referring URL, time spent on each page, click patterns
  • Cookie identifiers (see Section 7)

Collected via: cookies, server log files, web beacons, pixels, and tags.

B. Order Information (collected when you make or attempt a purchase):

  • Full name
  • Email address
  • Phone number
  • Billing and shipping addresses
  • Payment information (processed by our payment providers — we do not store full card numbers)
  • Order history and product preferences

C. Communications: When you email us or use our contact forms, we receive the content of your messages.

D. Marketing data: If you opt in to our newsletter, we collect your email and track opens/clicks to improve content relevance.

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data on the following legal grounds:

  • Contract performance (Art. 6(1)(b)): to process and fulfil your order, arrange delivery, handle returns, and provide customer support.
  • Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and consumer protection laws (e.g., retaining invoices for the statutory period).
  • Consent (Art. 6(1)(a)): for marketing emails, analytics cookies, and advertising cookies. You can withdraw consent at any time.
  • Legitimate interest (Art. 6(1)(f)): for fraud prevention, site security, and improving our products and services. We balance these interests against your privacy rights.

4. How We Use Your Information

We use the data we collect to:

  • Process and fulfil your orders
  • Send order confirmations, shipping notifications, and invoices
  • Communicate with you about your orders, returns, and warranty claims
  • Screen for potential fraud or payment risk
  • Send marketing emails about new products and offers (only if you opted in)
  • Analyse site usage and improve our website (with consent for non-essential analytics)
  • Comply with our legal obligations

5. Third Parties We Share Data With

We share specific personal data with the following service providers, each only for the purposes listed:

  • Shopify Inc. (Canada) — E-commerce platform hosting. Order and account data. Shopify Privacy
  • Klarna Bank AB (Sweden) — Payment processing for installments and pay-later options. Name, email, address, order total. Klarna Privacy
  • PayPal (Europe) S.à r.l. (Luxembourg) — Payment processing. Name, email, transaction details. PayPal Privacy
  • Shopify Payments / Stripe — Card payment processing. Card details (tokenised) and billing address.
  • DPD / DHL — Order delivery. Name, shipping address, phone number, email.
  • Meta Platforms Ireland Ltd. (Facebook Pixel + Conversions API) — Advertising and conversion measurement, only with your consent. Hashed email, page views, purchase events. Meta Privacy
  • Google LLC (Google Analytics, Google Ads) — Analytics and advertising, only with your consent. Anonymised IP, browsing behaviour, conversion events. Google Privacy
  • Judge.me Pte. Ltd. (Singapore) — Customer reviews collection and display. Email (for review requests), name, review content. Judge.me Privacy

We may also share data with public authorities to comply with applicable laws, respond to subpoenas, or protect our legal rights.

We do not sell your personal data.

6. International Data Transfers

Some of our service providers (Shopify, Meta, Google, Judge.me) process data outside the UK / EU / EEA, including in the United States, Canada, and Singapore. For these transfers, we rely on:

  • The UK and European Commission's Adequacy Decisions where applicable (e.g., for Canada under PIPEDA, for US under EU-US Data Privacy Framework)
  • Standard Contractual Clauses (SCCs) approved by the UK ICO and the European Commission
  • Where appropriate, supplementary technical and organisational measures

7. Cookies

We use cookies and similar tracking technologies, organised into three categories:

  • Strictly Necessary Cookies — Required for the site to function (shopping cart, checkout, security). These cannot be disabled.
  • Analytics Cookies — Help us understand how visitors use our site (Google Analytics). Only loaded with your consent.
  • Marketing & Advertising Cookies — Used to show you relevant ads and measure their performance (Meta Pixel, Google Ads). Only loaded with your consent.

You can manage your cookie preferences any time using the cookie consent banner on our site. You can also control cookies via your browser settings. For general information about cookies, visit www.allaboutcookies.org.

8. Your Rights (UK GDPR / EU GDPR Articles 15–22)

If you are a resident of the UK, EEA, or Switzerland, you have the following rights:

  • Access — request a copy of the personal data we hold about you (Art. 15)
  • Rectification — request correction of inaccurate or incomplete data (Art. 16)
  • Erasure ("right to be forgotten") — request deletion of your data, subject to legal retention requirements (Art. 17)
  • Restriction of processing — request we pause processing in certain circumstances (Art. 18)
  • Data portability — receive your data in a structured, machine-readable format (Art. 20)
  • Objection — object to processing based on legitimate interests, including direct marketing (Art. 21)
  • Withdraw consent — for any processing based on consent, at any time
  • Not be subject to automated decision-making — we do not use automated decision-making or profiling that produces legal effects on you (Art. 22)

To exercise any of these rights, email support@kingride.shop with your request. We will respond within 30 days as required by GDPR.

Right to lodge a complaint:

  • UK residents: Information Commissioner's Office (ICO) — ico.org.uk
  • EU/EEA residents: Your national data protection authority — find yours at edpb.europa.eu

9. Data Retention

We retain your personal data only as long as necessary for the purposes described above:

  • Order data & invoices: 10 years (required by UK and EU tax and accounting laws)
  • Customer account data: Until you delete your account, or 3 years after your last order if you don't have an account
  • Marketing data: Until you withdraw consent or unsubscribe
  • Cookie data: Per individual cookie lifetimes (see cookie banner for details)
  • Support communications: 3 years after the last interaction
  • Fraud prevention records: Up to 7 years for legitimate interest in preventing repeat fraud

10. Data Security

We implement technical and organisational measures to protect your data, including:

  • SSL/TLS encryption for all data in transit (HTTPS site-wide)
  • Encryption at rest for sensitive data via Shopify infrastructure
  • Access controls limiting employee access to personal data
  • Regular security audits and patches
  • Card details handled only by PCI-DSS certified payment processors — we never store full card numbers

11. Minors

Our services are not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated by email to active customers and by a notice on this page. The "Last updated" date at the top reflects the latest revision.

13. Contact Us

For any questions, requests, or concerns about this Privacy Policy or our handling of your personal data:

  • Email: support@kingride.shop
  • Postal address: KESTREL COMMERCE LTD, Office 15300, Initial Business Centre, Manchester, M40 8WN, United Kingdom
  • Response time: Within 30 days as required by GDPR, typically within 1–3 business days