Privacy policy
Last updated: February 2026
This Privacy Policy describes how Kansū Works Ltd., registered at 86-90 Paul Street, London EC2A 4NE, England (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from kansuworks.com, or otherwise communicate with us (collectively, the "Services").
For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy. Please read this Privacy Policy carefully.
We are registered with the Information Commissioner's Office (ICO). For more information about the ICO, visit ico.org.uk.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site and update the "Last updated" date.
How We Collect and Use Your Personal Information
To provide the Services, we collect personal information from a variety of sources as set out below. In addition to the specific uses below, we may use information we collect to communicate with you, provide or improve the Services, comply with legal obligations, enforce applicable terms of service, and to protect or defend the Services and the rights of our users.
What Personal Information We Collect
When we refer to "personal information," we mean information that identifies, relates to, describes or can be associated with you. The types we collect depend on how you interact with our Site.
Information We Collect Directly from You
Information you directly submit through our Services may include:
- Contact details — name, address, phone number, and email
- Order information — name, billing address, shipping address, payment confirmation, email, and phone number
- Account information — username, password, security questions and other account security details
- Customer support information — information you include in communications with us
Some features may require you to provide certain information. You may elect not to provide it, but doing so may prevent you from using those features.
Information We Collect about Your Usage
We may automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels and similar technologies. Usage Data may include device information, browser information, network connection details, your IP address and other information about your interaction with the Services.
Information We Obtain from Third Parties
We may obtain information about you from third parties including:
- Companies who support our Site and Services, such as Shopify
- Payment processors, who collect payment information to process your orders
- Third parties who use tracking technologies such as pixels, web beacons, and cookies when you visit our Site or interact with our Services or advertisements
Any information we obtain from third parties will be treated in accordance with this Privacy Policy.
How We Use Your Personal Information
Providing Products and Services
We use your personal information to process payments, fulfil your orders, send notifications related to your account, purchases, returns and exchanges, manage your account, arrange for shipping, and facilitate returns and exchanges. The legal basis for this processing is the performance of a contract with you (UK GDPR Art. 6(1)(b)).
Legal Compliance
We may process your personal information where necessary to comply with our legal obligations, such as maintaining records for tax and accounting purposes, responding to lawful requests from authorities, or complying with consumer protection legislation. The legal basis for this processing is compliance with a legal obligation (UK GDPR Art. 6(1)(c)).
Marketing and Advertising
We may use your personal information to send marketing, advertising and promotional communications by email, text message or post, and to show you advertisements for products or services. The legal basis for this processing is our legitimate interest in promoting our products and services (UK GDPR Art. 6(1)(f)). You can opt out at any time — see "Your Rights" below.
Security and Fraud Prevention
We use your personal information to detect, investigate and take action regarding possible fraudulent, illegal or malicious activity. If you believe your account has been compromised, please contact us immediately. The legal basis for this processing is our legitimate interest in keeping our website secure (UK GDPR Art. 6(1)(f)).
Communicating with You and Service Improvement
We use your personal information to provide customer support and improve our Services. The legal basis is our legitimate interest in being responsive to you and maintaining our business relationship with you (UK GDPR Art. 6(1)(f)).
Cookies
Like many websites, we use cookies on our Site. For specific information about the cookies we use related to powering our store with Shopify, see shopify.com/legal/cookies.
We use cookies to power and improve our Site and Services (including to remember your actions and preferences) and to run analytics. We may also permit third-party service providers to use cookies on our Site to better tailor services, products and advertising.
Most browsers accept cookies by default, but you can choose to remove or reject them through your browser controls. Please note that removing or blocking cookies can negatively impact your user experience and may cause some features to work incorrectly or become unavailable.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties, including:
- Vendors and third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping)
- Business and marketing partners to provide services and advertise to you (who will use your information in accordance with their own privacy notices)
- Third parties when you direct or consent to the disclosure, such as to ship products or through social media widgets
- Our affiliates or within our corporate group, in our legitimate interests to run a successful business
- In connection with a business transaction such as a merger or acquisition, or to comply with legal obligations, enforce terms of service, or protect the rights of our users
We do not sell your personal information to third parties.
Third Party Websites and Links
Our Site may provide links to websites or online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of such links does not imply any endorsement of their content or operators.
Children's Data
The Services are not intended for use by children under the age of 13, and we do not knowingly collect personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details below to request that it be deleted.
Security and Retention of Your Information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or destruction. However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce applicable contracts and policies. In general, we retain order and account information for up to 7 years to comply with tax and accounting obligations under UK law.
Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal information:
- Right to Access — request a copy of the personal information we hold about you
- Right to Rectification — request that we correct inaccurate or incomplete personal information
- Right to Erasure — request that we delete your personal information in certain circumstances
- Right to Restriction — ask us to restrict the processing of your personal information in certain circumstances
- Right to Portability — receive your personal information in a structured, commonly used format and request transfer to another controller, where technically feasible
- Right to Object — object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will stop processing your data for that purpose immediately
- Right to Withdraw Consent — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, please contact us at hello@kansuworks.com. We will respond within one month as required under UK GDPR. We may need to verify your identity before responding. We will not charge a fee for reasonable requests.
You also have the right to opt out of promotional emails at any time using the unsubscribe link in any marketing email we send you. We may still send non-promotional emails such as order confirmations and account notices.
Complaints
If you have complaints about how we process your personal information, please contact us first at hello@kansuworks.com and we will do our best to resolve it.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
If you are based in the EEA, you may also contact your local data protection supervisory authority. A list of EEA authorities is available at edpb.europa.eu.
International Transfers
We may transfer, store and process your personal information outside the UK or EEA. Where we do so, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries with an adequacy decision under UK law.
Contact
For questions about our privacy practices, this Privacy Policy, or to exercise any of your rights, please contact us at:
Kansū Works Ltd.
86-90 Paul Street, London EC2A 4NE, England
hello@kansuworks.com
For the purposes of UK GDPR and the Data Protection Act 2018, Kansū Works Ltd. is the data controller of your personal information.