# Privacy Policy

This Privacy Policy explains how Kendal Hill ("we," "us," or "our") collects, uses, and shares information when you visit kendalhill.com or purchase from us. By using our website, you agree to the practices described here.

## 1. Who we are

Kendal Hill is a company registered in Barbados, operating an online retail store. Our contact details are at the end of this policy.

## 2. Information we collect

**Information you give us directly:**
- Name, email, phone number, delivery address, billing address
- Payment information (processed by our payment provider — we do not store full card details on our systems)
- Account credentials, if you create an account
- Communications you send us (email, WhatsApp messages, contact form submissions)
- Membership preferences and subscription details if you join Kendal Hill Membership
- Marketing preferences

**Information collected automatically:**
- IP address, browser type, device type, operating system
- Pages viewed, time on site, items added to cart, referring URL
- Cookies and similar tracking technologies (see Cookies section below)

## 3. How we use your information

- To process, fulfill, and deliver your orders
- To manage your account and membership, including subscription renewals
- To communicate with you about your orders, deliveries, and account
- To send marketing emails, SMS, or WhatsApp messages — only if you've opted in
- To improve our website, products, and services
- To detect and prevent fraud, and to comply with our legal obligations
- To respond to questions or complaints

## 4. Who we share your information with

We share information only with service providers that help us run our business, and only to the extent needed for them to do their job. These currently include:

- **Shopify** — our e-commerce platform (orders, accounts, checkout)
- **Klaviyo** — email marketing
- **Appstle Memberships** — subscription billing and management
- **Republic Bank / First Atlantic Commerce (FAC)** — payment processing
- **PayPal** — secondary payment option
- **Local delivery partners** — parish-based drivers and pickup partners
- **Analytics providers** (e.g., Google Analytics, Shopify Analytics)

We do **not** sell or rent your personal information to anyone.

We may also disclose information when required by law, to enforce our Terms, to protect our rights or the rights of others, or in connection with a merger, sale, or transfer of our business.

## 5. Cookies and tracking

We use cookies and similar technologies to:
- Keep you logged in
- Remember items in your cart
- Understand how the site is used so we can improve it
- Show you relevant marketing on third-party sites

You can disable cookies in your browser settings, but parts of our site may not function correctly. By continuing to use our site without changing your settings, you consent to our use of cookies.

## 6. Your rights

Under the **Barbados Data Protection Act 2019**, you have the right to:

- Access the personal information we hold about you
- Correct information that's inaccurate or incomplete
- Request deletion of your information, where legally permitted
- Object to certain uses of your information
- Withdraw consent for marketing at any time
- Lodge a complaint with the Office of the Data Protection Commissioner of Barbados

To exercise any of these rights, email us at help@kendalhill.com (or hello@kendalhill.com) with the subject line "Privacy Request." We'll respond within 30 days.

## 7. Marketing communications

If you've subscribed to marketing emails, SMS, or WhatsApp messages, you can unsubscribe at any time:
- Click the **unsubscribe** link at the bottom of any marketing email
- Reply **STOP** to any marketing SMS or WhatsApp message
- Email us at help@kendalhill.com or hello@kendalhill.com

Order confirmations, delivery updates, and other transactional messages are sent regardless of marketing preferences — these are necessary to fulfill your orders.

## 8. Data retention

We keep your information for as long as your account is active or as long as needed to:
- Fulfill the purposes described in this policy
- Comply with legal, accounting, and tax obligations (typically 7 years)
- Resolve disputes and enforce our agreements

When information is no longer needed, we delete or anonymize it.

## 9. Children

Kendal Hill is intended for adults. We do not knowingly collect information from children under 16. If you believe a child has provided information to us, contact us at help@kendalhill.com or hello@kendalhill.com and we'll delete it.

## 10. Security

We use industry-standard measures to protect your information, including HTTPS encryption across the site, PCI-compliant payment processing, and access controls on our systems. No method of transmission or storage is 100% secure, but we take this seriously and continuously review our practices.

## 11. International transfers

Some of our service providers (e.g., Shopify, Klaviyo) may store data outside Barbados, including in the United States and Europe. These providers maintain appropriate safeguards consistent with international data protection standards.

## 12. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new "Last updated" date. Where required by law, we'll notify you directly.

## 13. Contact us

**Kendal Hill**
Barbados
Email: help@kendalhill.com or hello@kendalhill.com

---

*Last updated: 6 May 2026*