Privacy Policy
Last updated: 24 November 2025
This Privacy Policy explains how Knala Ltd (“Knala”, “we”, “us”, “our”) collects, uses, stores and protects your personal information when you visit our website knala.co.uk, create an account, or purchase our products.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. About Us
Knala Ltd
Registered in England & Wales
Company Number: 16072959
Registered Address: 11 Woodview Close, Sanderstead, CR2 9BD
Email: admin@knala.co.uk
We are the data controller of your personal information.
2. Information We Collect
2.1 Information you provide directly
- Name and contact details
- Shipping and billing address
- Account login details
- Order information and purchase history
- Email preferences and marketing consents
- Customer service communications
2.2 Information collected automatically
When you browse our website, we automatically collect:
- IP address
- Device type and browser type
- Cookies and tracking data
- Pages viewed and time spent on our website
- Referral source
2.3 Information from third parties
We may receive information from:
- Shopify (checkout, orders, fraud prevention)
- Omnisend (email sign-ups, pop-ups, marketing preferences)
- Meta Ads / Meta Pixel (ad performance and analytics)
- Google Analytics (site analytics and behaviour)
- Payment providers (fraud checks and payment confirmation)
- QuickBooks (accounting information related to orders)
3. How We Use Your Personal Information
We process your personal data for the following purposes and legal bases:
3.1 To fulfil your order (Contractual necessity)
- Processing your payment
- Shipping your order
- Updating you about delivery
3.2 To manage your Knala account (Contractual necessity)
- Login, password resets, maintaining account details
3.3 To send service and transactional messages (Contractual necessity)
- Order confirmations, dispatch emails, and updates
- Abandoned checkout reminders
3.4 To provide customer support (Legitimate interests)
- Responding to questions or complaints
- Handling returns and refunds
3.5 For marketing (Consent or Legitimate interests)
We use:
- Omnisend for email marketing
- Meta Ads for paid advertising
- Google Shopping campaigns
You may opt out at any time by clicking “unsubscribe” or emailing us.
3.6 To improve our website (Legitimate interests)
We use analytics tools such as Google Analytics, Meta Pixel and Omnisend reports to improve user experience.
3.7 Legal or regulatory compliance (Legal obligation)
- Accounting and tax regulations
- Fraud prevention and security checks
4. Cookies & Tracking Technologies
We use cookies and similar technologies to improve your browsing experience, analyse website performance, and deliver personalised marketing.
Types of cookies we use:
- Essential cookies – Required for checkout and site functionality
- Performance cookies – Analytics (Google Analytics)
- Marketing cookies – Meta Pixel, Google Ads, Omnisend tracking
You can manage cookie preferences via your browser or our cookie banner. For full details, see our Cookie Policy.
5. Sharing Your Personal Information
We do not sell your personal data.
We may share your data with trusted partners who help us operate our business:
- Shopify – website, checkout and order processing
- Omnisend – marketing emails, pop-ups and automations
- Royal Mail / DPD – shipping and delivery partners
- Payment processors – Stripe/Shop Pay, PayPal, Klarna, Google/Apple Pay
- QuickBooks – accounting and tax compliance
- Meta & Google – for advertising and analytics
- Review provider – (to be added; will be Omnisend if possible)
Where needed, we may also share information with professional advisors (legal or financial) and law enforcement.
6. International Transfers
Some of our service providers (including Shopify, Omnisend, Meta and Google) store data outside the UK or EEA.
When this happens, we ensure appropriate safeguards are in place, such as:
- UK-approved International Data Transfer Agreements (IDTAs)
- Standard Contractual Clauses (SCCs)
- Transfers to countries with adequacy decisions
7. How Long We Keep Your Information
We keep your data only for as long as necessary, including:
- Order and tax records: 6 years (legal requirement)
- Customer accounts: Active until you request deletion
- Marketing data: Until you unsubscribe or withdraw consent
- Customer service messages: 2 years
- Temporary fulfilment spreadsheets: Deleted once no longer required
8. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to processing, including marketing
- Withdraw consent at any time
- Request a copy of your data (data portability)
To exercise these rights, email us at admin@knala.co.uk.
9. Security
We take appropriate technical and organisational measures to protect your personal data, including encryption, secure systems access, and restricted data permissions.
In the unlikely event of a data breach, we will notify you and the ICO where legally required.
10. Children’s Data
Our website is not intended for children under 16. We do not knowingly collect personal data from children.
11. Links to External Websites
Our website may contain links to third-party websites. We are not responsible for their privacy practices or content.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be shown on this page.
13. Contact Us
If you have questions about this policy or your data, you can contact us:
Knala Ltd
Email: admin@knala.co.uk
Registered Address: 11 Woodview Close, Sanderstead, CR2 9BD
