Privacy Policy

This Privacy Policy applies to the website wearkera.com, owned and operated by Khalid Khan, trading as K•ΣRA. Any references to "we", "us", or "our" in this policy refer to K•ΣRA. For all privacy related enquiries, please contact us at privacy@wearkera.com.

When you browse our website, create an account, or place an order, we may collect and process the following categories of personal data: your full name, email address, postal delivery address, telephone number, and transactional information relating to your purchase. We also collect certain technical data automatically when you access our website, including your IP address, browser type, device type, and pages visited.

We process your personal data for the following purposes and on the following lawful bases as defined under UK GDPR:

• To fulfil and manage your orders, arrange delivery, and handle returns — on the basis of contractual necessity.
• To send you transactional communications including order confirmations, dispatch notifications, and account related emails — on the basis of contractual necessity.
• To respond to your enquiries and provide customer support — on the basis of our legitimate interests in operating our business effectively.
• To comply with our legal and regulatory obligations including financial record keeping — on the basis of legal obligation.
• To improve and maintain the performance and security of our website — on the basis of our legitimate interests.

We do not sell, rent, or trade your personal data to any third party. We share your data only where necessary with the following trusted service providers, each of whom processes data on our behalf in accordance with their own privacy obligations:

• Stripe Payments Europe Limited, for the purpose of processing your payment securely. Your payment card details are transmitted directly to Stripe and are never stored on our servers. Stripe's privacy policy is available at stripe.com/privacy.
• Twilio SendGrid, for the purpose of delivering transactional emails to you. SendGrid's privacy policy is available at sendgrid.com/policies/privacy.

We do not use any advertising, analytics, or tracking tools on this website.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected. Order and transactional records are retained for a period of seven years in accordance with our obligations under UK tax and financial legislation. Account data may be deleted upon your written request, subject to any overriding legal retention requirements.

Under UK GDPR, you have the following rights in respect of your personal data:

• The right to access a copy of the personal data we hold about you.
• The right to rectification of any inaccurate or incomplete personal data.
• The right to erasure of your personal data in certain circumstances, sometimes referred to as the right to be forgotten.
• The right to restrict our processing of your personal data in certain circumstances.
• The right to data portability, allowing you to receive your data in a structured and machine readable format.
• The right to object to processing carried out on the basis of legitimate interests.

To exercise any of the above rights, please submit a written request to privacy@wearkera.com. We will respond within one calendar month of receipt. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk if you believe your data has been processed unlawfully.

Our website uses only essential cookies that are strictly necessary for the operation of the site, including maintaining the contents of your shopping cart and preserving your login session. We do not use advertising cookies, tracking cookies, or any cookies that monitor your behaviour across other websites.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data transmitted between your browser and our website is encrypted using HTTPS.

We reserve the right to amend this Privacy Policy at any time. Any amendments will be published on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our website following any amendment constitutes your acceptance of the revised policy.