Kiiroo B.V. Privacy Policy

Last update: 20 February 2025

1. Introduction

Welcome to Kiiroo.com (the "Website"), owned and operated by Kiiroo B.V. ("Kiiroo," "we," "our," or "us"). Your privacy and data security are important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you interact with our Website.

This Privacy Policy is designed to comply with applicable data protection laws, including but not limited to the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other U.S. federal and state privacy laws.

For any questions or concerns, you can reach our Data Protection Officer at:

Email: [email protected]
Address: Attn: Data Protection Officer, Kiiroo B.V., De Boelelaan 7, Amsterdam, North Holland, 1083 HJ, Netherlands

2. Personal Data We Collect and How We Use It

2.1 When You Make a Purchase

When you purchase a product from our online store, we collect:

  • Name
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment details

Purpose: To process your order, deliver products, register your warranty, and manage your account.

2.2 When You Submit a Warranty Request

We collect:

  • Name and contact details (email, phone, address)
  • Product details (type, serial number, date of purchase, proof of purchase)
  • Supporting documentation (photos/videos of defects, reason for warranty claim)

Purpose: To process and verify warranty claims.

2.3 When You Sign Up for Promotional Emails

We collect:

  • Email address

Purpose: To send marketing communications, promotions, and updates. You can opt out anytime by following the unsubscribe instructions in our emails or contacting us directly.

2.4 When You Contact Us or Use Live Chat

We collect:

  • Name
  • Email address
  • Country
  • Details of your inquiry

Purpose: To respond to your questions, comments, or complaints and improve customer support services.

2.5 When You Sign Up for SMS Marketing

We collect: your phone number to send:

  • Name
  • Phone number

Purpose: Order notifications and updates, promotional offers and abandoned cart reminders

We do not share SMS data with third parties except for messaging service providers. You can opt out of SMS marketing anytime.

2.6 Automatic Information Collection (Cookies)

We automatically collect certain information through cookies and tracking technologies:

  • IP address
  • Device and browser information
  • Website usage details (e.g., pages viewed, time spent on pages)

Purpose: To improve website functionality, enhance user experience, and analyze marketing effectiveness.

 

3. Children’s Privacy

Our Website is not intended for children under the age of 16, and we do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from a child under 16, we will take immediate steps to delete it. Parents or guardians who believe their child may have provided us with personal data should contact us.

 

4. Types of Cookies We Use

We use the following cookies on our Website:

  • Strictly Necessary Cookies: Essential for the website to function properly (e.g., enabling payments and account logins).
  • Functionality Cookies: Remember your preferences (e.g., language settings) and enable embedded third-party features.
  • Analytical Cookies: Collect anonymous data through Google Analytics to help us understand user behavior and improve our services.

Managing Cookies: You can manage your cookie preferences through your browser settings. For more details, visit www.aboutcookies.org or www.allaboutcookies.org.

To learn about Google Analytics’ data practices and how to opt out, visit Google’s Privacy Policy.

 

5. Legal Basis for Processing Personal Data

We process your personal data under the following legal bases:

  • Contract Performance: To provide products or services as requested by you.
  • Legal Obligations: To comply with applicable legal and regulatory requirements.
  • Legitimate Interests: To manage our business, improve services, and communicate effectively.
  • Consent: When you provide explicit consent, such as for marketing communications.

For U.S. residents, our processing of personal data also complies with applicable state laws, such as the CCPA, providing rights such as disclosure, deletion, correction, and opting out of data sales or sharing.

 

6. Sharing of Personal Data

We do not sell your personal data. However, we share it with the following parties where necessary:

6.1 Service Providers

We work with third-party providers for:

  • Payment processing
  • Order fulfillment and shipping
  • Website hosting and maintenance
  • Customer support
  • Marketing and data analysis

These service providers are only permitted to use your data for the services they provide to us.

6.2 Legal and Compliance

We may disclose personal data if required by law, legal process, or to protect our legal rights.

6.3 Business Transactions

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction.

 

7. International Data Transfers

We may transfer your personal data to countries outside the European Economic Area ("EEA"), including the United States. When transferring data, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure your data is protected.

By using our Website, you consent to this transfer, storing, and processing of your personal data.

 

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations. The specific retention periods depend on the nature of the data and the purpose for which it is collected. Below are key retention guidelines:

  • Transaction Data: Retained for up to 7 years to comply with tax, accounting, and legal requirements.
  • Customer Service Communications: Retained for 2 years after the resolution of the inquiry.
  • Marketing Data: Retained until you opt out or withdraw your consent.
  • Warranty Information: Retained for the duration of the product warranty period and up to 1 year afterward for verification purposes.

After the retention period expires, we securely delete or anonymize your personal data unless we are required to retain it for legal purposes, such as in the case of ongoing litigation or regulatory investigations.

 

9. How We Protect Your Data

We implement technical, administrative, and physical safeguards to protect your personal data against unauthorized access, use, or disclosure. Only employees and authorized service providers who require access to perform their tasks are granted permission.

 

10. Your Rights

Depending on your location and applicable laws, you may have the following rights:

10.1 For EU/EEA Residents (GDPR)

  • Access your personal data
  • Request corrections or updates
  • Request deletion of your personal data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent where applicable

10.2 For U.S. Residents (CCPA/CPRA)

  • Know what personal information we collect, use, and share
  • Request the deletion of personal data (subject to exceptions)
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information
  • Limit the use of sensitive personal information (if applicable)

To exercise any of these rights, contact us at [email protected].

If you believe we have violated your rights, you may lodge a complaint with the relevant data protection authority or consumer protection agency.

 

11. Right to Opt Out of Data Sales (for U.S. Users)

We do not sell personal information as defined by applicable U.S. state laws. However, if applicable and you wish to ensure that your data is not sold or shared, our Website provides an opt-out function.

 

12. Third-Party Websites

Our Website may link to third-party websites or services. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies.

 

13. Updates to This Privacy Policy

We may update this Privacy Notice periodically to reflect changes to our privacy and data practices. We encourage you to periodically review this page to ensure you are familiar with those changes. We will post a prominent notice on our website to notify you of any changes to our Privacy Notice, prior to the effective date of the change, and, in some cases, will provide notice of the changes by email. We will indicate at the top of this Privacy Notice when it was most recently updated.

 

14. Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, please contact our Data Protection Officer:

Email: [email protected]
Address: Attn: Data Protection Officer, Kiiroo B.V., De Boelelaan 7, Amsterdam, North Holland, 1083 HJ, Netherlands