Privacy policy
Last updated: 29 October 2026
We take the protection of your personal data seriously. This privacy policy explains which data we process when you visit our online shop and place an order, why we do so and on what legal basis, who we share data with and what rights you have. It is based on the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). If you live in Canada, section 21 explains how the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canadian provincial privacy laws apply.
1. Who is responsible for your data
The controller of your personal data is:
Ecom Essence, sole trader (eenmanszaak)
Owner: Rayell Chavez Ramcharan
Irislaan 28, 2651 PR Berkel en Rodenrijs, Netherlands
Registered with the Netherlands Chamber of Commerce (KvK), no. 94983682
VAT no. NL005122897B40
Email: support@kezaro.com
Phone: +44 7853 785319
Opening hours: Monday to Friday, 8am to 4pm (UK time)
Kezaro is a trading name of Ecom Essence. Full details are in our Legal notice.
We have not appointed a data protection officer, as we are not required to. For any question about data protection, please contact us using the details above.
2. Key terms
Personal data is any information that relates to an identified or identifiable living person. Processing means anything done with that data, such as collecting, storing, using, sharing or deleting it.
Giving us your data is generally voluntary. To make and carry out a contract of sale, however, we need certain details, such as your name, delivery address and email address. Without them we cannot fulfil your order.
3. Hosting and running the website
Our online shop runs on the platform of Shopify Inc. Shopify provides hosting, content delivery through a content delivery network, the shop software and the technical handling of orders. In doing so, it processes the data you enter on the website and technical connection data. We have a data processing agreement with Shopify in line with Article 28 UK GDPR.
Our legal basis for using a hosting provider is our legitimate interests (Article 6(1)(f) UK GDPR) in running our online shop securely, reliably and efficiently. Where processing is needed to prepare or perform a contract, the legal basis is Article 6(1)(b) UK GDPR.
3.1 Server log files
Each time you visit our website, your browser automatically sends us data:
- IP address of the device making the request
- date and time of access
- name and URL of the page visited
- amount of data transferred and whether the request was successful
- browser type, browser version and operating system
- the page you came from (referrer)
We do not link this data to a specific customer. We process it to deliver the website, keep it stable and secure, and investigate misuse. The legal basis is Article 6(1)(f) UK GDPR.
3.2 SSL and TLS encryption
Our website uses encryption throughout. You can see this from the address bar of your browser, which starts with "https", and from the padlock symbol. This means third parties cannot easily read the data you send us.
4. What data we process
| Type of data | Examples |
|---|---|
| Identity and contact data | first name and surname, email address, phone number, billing and delivery address |
| Contract and order data | items ordered, order number, order date, order value, order history |
| Payment data | payment method chosen, payment status, transaction reference. Only the payment providers process full card or account details. |
| Delivery and customs data | delivery address, tracking number, details needed for customs declarations such as description and value of the goods |
| Cancellation and returns data | name, email address, order number, items concerned, reason if you give one, refund amount |
| Communication data | content of your messages to our customer service, date and time, contact channel |
| Usage data and metadata | IP address, device and browser information, pages visited, click and scroll behaviour, referrer, cookie identifiers |
5. Purposes and legal bases
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Making and carrying out the contract of sale, delivery, invoicing | Article 6(1)(b), contract |
| Handling cancellations, returns, refunds and faulty goods claims | Article 6(1)(b), contract, and Article 6(1)(c), legal obligation |
| Customs and import handling of your parcel | Article 6(1)(c), legal obligation |
| Customer service and answering your questions | Article 6(1)(b), contract, and Article 6(1)(f), legitimate interests |
| Fraud prevention, IT security, preventing misuse | Article 6(1)(f), legitimate interests |
| Keeping invoice and order records | Article 6(1)(c), legal obligation under tax and accounting law |
| Measuring visitor numbers and analysing how the shop is used | Article 6(1)(a), consent, together with PECR |
| Newsletter, advertising and measuring ad campaigns | Article 6(1)(a), consent, together with PECR |
| Establishing, exercising or defending legal claims | Article 6(1)(f), legitimate interests |
6. Processing your order
When you order from us, we process the details you give during checkout to make and carry out the contract. This includes checking and confirming your order, passing your delivery details to our logistics partners, processing your payment through the provider you choose, and sending order, dispatch and service emails.
The legal basis is Article 6(1)(b) UK GDPR. Keeping invoice and accounting records is also based on Article 6(1)(c) UK GDPR.
6.1 Customer account
You can order as a guest or create a customer account. In your account, we store your details and order history so that you can view your orders and check out faster next time. The legal basis is Article 6(1)(b) UK GDPR. You can ask us to delete your account at any time. Legal retention obligations still apply.
6.2 Payment methods
Depending on the payment method you choose, we pass the data needed for the payment to the relevant payment provider. These providers are independently responsible for processing your payment data and do so under their own privacy policies. The legal basis is Article 6(1)(b) UK GDPR, and for credit checks carried out by the provider also Article 6(1)(f) UK GDPR.
| Payment method | Provider |
|---|---|
| Credit and debit card, Apple Pay, Google Pay, Shop Pay | Shopify Payments, processed by Stripe |
| PayPal | PayPal |
| Klarna, pay later and instalments | Klarna |
We do not store full card or account details on our servers.
6.3 Delivery, customs and import
To deliver your order, we pass your name, delivery address and, where needed for delivery, your email address or phone number to our sourcing and logistics partners and the courier. Because our products ship from international partner warehouses, import into the UK or Canada requires a customs declaration with details such as the recipient's name, address, a description of the goods and their value. You pay nothing on delivery.
The legal basis is Article 6(1)(b) UK GDPR for delivery and Article 6(1)(c) UK GDPR for customs obligations.
6.4 Cancellations, returns and refunds
If you email returns@kezaro.com or send us the model cancellation form, we process your name, email address, order number, the items concerned and any reason you give. We need this to match your request to your order, arrange the return and make the refund.
The legal basis is Article 6(1)(b) UK GDPR together with the Consumer Contracts Regulations 2013, and for record keeping also Article 6(1)(c) and (f) UK GDPR. Details of the process are in our Refund policy.
6.5 Customer service and contact form
If you contact us by email, phone or through our contact form, we process your details to deal with your request. The legal basis is Article 6(1)(b) UK GDPR if your request relates to a contract, otherwise Article 6(1)(f) UK GDPR. We delete requests that do not relate to a contract once they have been fully dealt with, unless we are required to keep them.
7. Cookies and similar technologies
Cookies are small text files stored on your device. Some are strictly necessary, others are used for analytics or advertising. We only store non-essential information on your device, or access it, with your consent under PECR. Any further processing of the data collected in this way is based on Article 6(1)(a) UK GDPR.
| Category | Purpose | Examples | Duration |
|---|---|---|---|
| Strictly necessary | basket, checkout, session management, security, storing your cookie choices | cart, _secure_session_id, secure_customer_sig, _tracking_consent | session up to 12 months |
| Analytics | measuring visitor numbers, analysing use, improving the shop | _shopify_y, _shopify_s, _ga | 30 minutes up to 24 months |
| Marketing | personalised advertising, recognising you across websites, measuring campaigns | _gcl_au, conversion and remarketing identifiers | up to 24 months |
We manage your consent through our cookie banner. You can change your choices at any time using the "Cookie settings" link in the footer, and withdraw your consent for the future. You can also delete or block cookies in your browser. If you block strictly necessary cookies, the basket and checkout may not work.
8. Analytics
If you have given consent, we use analytics services to understand how our shop is used, which pages are visited and where people leave the checkout. Usage data is processed in pseudonymised form and combined into statistics. We use these insights to improve our range, content and ease of use.
We use the built-in tools of our shop software and Google Analytics from Google LLC. The legal basis is your consent under Article 6(1)(a) UK GDPR and PECR.
9. Advertising and remarketing
If you have given consent, we measure how well our ad campaigns work and show you ads on third-party platforms that match your interests. To do this, information about your visit, such as products viewed or orders completed, is sent to the relevant ad platform and linked there to your identifier on that platform.
The legal basis is Article 6(1)(a) UK GDPR and PECR. You can withdraw your consent at any time through our cookie settings. You can also turn off personalised ads in the settings of each platform.
10. Newsletter
If you sign up for our newsletter, we process your email address to send you offers, new products and promotions. You sign up with your express consent under Article 6(1)(a) UK GDPR. We record the time of sign up and your IP address so that we can show you gave consent.
We measure whether newsletters are opened and which links are clicked, to improve our content. You can unsubscribe at any time using the link in every email or by writing to support@kezaro.com. Withdrawing consent does not affect the lawfulness of processing before you withdrew it.
11. Social media
Our website links to our Instagram, Facebook and Pinterest profiles. These are simple links, not embedded content. Data is only sent to the platform when you click one of these links. The platform provider is responsible for any processing on the platform itself.
12. Who we share data with
We only share your data where this is needed for the purposes above, where you have given consent, or where the law requires it. We have contracts in line with Article 28 UK GDPR with our processors. We do not sell your data.
| Recipient | Purpose |
|---|---|
| Shopify Inc. | shop software, hosting, order handling, built-in analytics |
| Payment providers (Shopify Payments and Stripe, PayPal, Klarna) | processing payments and refunds |
| Sourcing, logistics, delivery and customs service providers | fulfilling your order, delivery, import handling, tracking |
| ParcelPanel | order tracking page and delivery status updates |
| Klaviyo Inc. | sending and analysing email and SMS messages |
| Google LLC | analytics, conversion measurement and advertising, with your consent |
| Triple Whale Inc. | analysing usage and campaign data |
| Meta Platforms Ireland Ltd. | conversion measurement and advertising on Facebook and Instagram (Meta pixel and Conversions API), with your consent |
| WeTracked | server-side conversion measurement for our ad campaigns, with your consent |
| Judge.me | collecting and publishing product reviews and sending review requests after your order |
| Pandectes | managing your cookie consent |
| Tax advisers, accountants, public authorities | meeting tax and legal obligations |
13. International transfers
We are based in the Netherlands, and some of the service providers and logistics partners listed above process data outside the UK, in particular in the United States and in the country the goods are shipped from. We only transfer data outside the UK where the UK GDPR allows it, for example on the basis of UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or your explicit consent.
Please note that the level of data protection in some countries may not fully match the level in the UK, and that authorities there may be able to access data.
14. How long we keep your data
| Data | How long |
|---|---|
| Order, invoice and accounting data | for as long as tax and accounting law requires |
| Customer account | until you delete your account |
| Cancellation and returns data | until the relevant limitation periods end, and no longer than our legal retention obligations allow |
| Customer service messages not related to a contract | until fully dealt with, then deleted |
| Newsletter data | until you withdraw your consent |
| Server log files | for a short time, usually a few days to a few weeks |
| Cookie data | depends on the cookie, see section 7 |
15. Automated decision making
We do not make decisions based solely on automated processing within the meaning of Article 22 UK GDPR. To prevent fraud, our payment and shop providers use automated risk checks. If such a check leads to an order being declined, you can contact us and ask for a person to review it.
16. Children
Our shop is intended for adults. We do not knowingly collect data from children. If we learn that a child's data has been sent to us without the consent of a parent or guardian, we will delete it.
17. Your rights
Under the UK GDPR, you have the following rights:
- Access to the data we hold about you (Article 15)
- Rectification of inaccurate or incomplete data (Article 16)
- Erasure, unless we are required to keep the data (Article 17)
- Restriction of processing (Article 18)
- Data portability in a common, machine-readable format (Article 20)
- Objection to processing based on legitimate interests (Article 21)
- Withdrawal of consent at any time, for the future (Article 7(3))
To use any of these rights, simply send a message to support@kezaro.com. We respond within one month and will tell you if we need to extend this period. We may ask for extra information to confirm your identity.
Your right to object (Article 21 UK GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data that is based on Article 6(1)(f) UK GDPR. We will then stop processing that data, unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.
Where we process your data for direct marketing, you have the right to object at any time without giving a reason. We will then no longer use your data for that purpose. You can object informally, for example by writing to support@kezaro.com.
18. Your right to complain
If you are unhappy with how we handle your personal data, please contact us first so that we can try to put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.
19. Data security
We take technical and organisational measures to protect your data against loss, destruction, tampering and unauthorised access. These include encryption in transit, limiting access to the people who need the data for their work, and choosing service providers who can show suitable safeguards. We review our measures regularly in line with current technology.
20. Changes to this privacy policy
We update this privacy policy when our services, the tools we use or the legal requirements change. The version published on this page applies. You can see the date of the last update at the top.
21. Customers in Canada
If you live in Canada, we handle your personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, the privacy laws of your province, including Quebec's Act respecting the protection of personal information in the private sector.
Person responsible for personal information: Rayell Chavez Ramcharan, owner of Ecom Essence, support@kezaro.com.
Your rights: you can ask to access the personal information we hold about you, ask us to correct it, and withdraw your consent to marketing, analytics and advertising at any time. We respond within 30 days.
Storage outside Canada: your information is processed and stored outside Canada, in particular in the Netherlands, the United Kingdom, the United States and the country the goods are shipped from. While it is there, it may be accessible to the courts and authorities of that country under local law.
Email marketing: we only send marketing emails with your express consent, in line with Canada's Anti-Spam Legislation (CASL). Every email shows who we are and includes an unsubscribe link.
Complaints: please contact us first. You can also complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or, if you live in Quebec, to the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.
Contact
Email: support@kezaro.com
Phone: +44 7853 785319
Opening hours: Monday to Friday, 8am to 4pm (UK time)
Response time: within 24 hours on working days
Company details
Kezaro is a trading name of Ecom Essence, sole trader (eenmanszaak), owner Rayell Chavez Ramcharan. Registered with the Netherlands Chamber of Commerce (KvK), no. 94983682. VAT no. NL005122897B40. Address: Irislaan 28, 2651 PR Berkel en Rodenrijs, Netherlands. Please do not send returns to this address.
Kezaro is run by Ecom Essence and delivers to addresses in the United Kingdom and Canada. Your contract is with Ecom Essence.
Get 10% off your first order
New lights, room ideas and early access to offers, straight to your inbox. No spam, unsubscribe at any time.
By signing up you agree to receive marketing emails from Kezaro. You can unsubscribe at any time via the link in our emails. The 10% discount applies to your first order and cannot be combined with other offers. More in our privacy policy.
Contact
- support@kezaro.com
- +44 7853 785319
- Mon to Fri, 8am to 4pm (UK time)Reply within 24 hours on working days
Shop by category
Kezaro is a trading name of Ecom Essence, sole trader, Irislaan 28, 2651 PR Berkel en Rodenrijs, Netherlands. KvK 94983682, VAT no. NL005122897B40. Please do not send returns to this address.
© 2026 Kezaro · Instagram