Privacy policy

Last updated: August 15, 2026

The short version

This summary gives you the key points quickly. The full policy below is the complete and binding version.

•       Who we are: KIRA NOVA runs this store. We are the data controller, which means we are responsible for your personal information.

•       What we collect: your contact and delivery details, payment information, account and order history, messages you send us, and technical data like your device and how you use the site.

•       Why we use it: to take and fulfil your orders, run your account, keep the site secure, answer your questions, meet our legal obligations, and (with your consent where required) send you marketing.

•       Who we share it with: service providers who help us run the shop, including Shopify, which hosts the store, and payment, shipping, and analytics providers. We do not sell your personal information.

•       Your rights: you can ask to access, correct, delete, or receive a copy of your data, object to certain uses, and withdraw consent. To do any of this, email sales@kirashoes.com.

•       Complaints: if you are unhappy with how we handle your data, contact us first. You can also complain to your local data protection authority.

____________________________________________________________________

The full policy

KIRA NOVA operates this store and website, including all content, features, products and services (the "Services"). Our store is powered by Shopify, which provides the technology behind the Services. This policy explains how we collect, use, and share your personal information when you visit the site, make a purchase, or contact us. If this policy and our Terms of Service conflict on anything about your personal information, this policy applies.

By using the Services, you confirm you have read and understood this policy.

Personal information we collect

"Personal information" means information that identifies you or can reasonably be linked to you. It does not include anonymous or de-identified data. Depending on how you use the Services and where you live, we may collect:

•       Contact details: your name, billing and shipping address, phone number, and email.

•       Payment information: card and payment account details, and transaction records. Card payments are handled by our payment providers, and we do not store full card numbers ourselves.

•       Account information: your username, password, and preferences.

•       Order information: items you view, save, buy, return, exchange, or cancel, and your order history.

•       Messages: anything you include when you contact us, for example a support request.

•       Technical information: your device, browser, IP address, and how you use the site, collected through cookies and similar technologies.

Where we get it

We collect personal information directly from you, automatically through the Services and cookies when you use the site, and from service providers and partners who work with us.

How we use your information, and our legal basis

Under UK and EU data protection law we must have a legal basis for using your personal information. Our bases are:

•       To provide the Services (performance of our contract with you): taking and fulfilling orders, processing payments, managing your account, arranging shipping, and handling returns and exchanges.

•       To improve and personalise the Services, keep them secure, prevent fraud, and communicate with you (our legitimate interests in running a safe and effective business).

•       For marketing (your consent, where the law requires it): we send marketing by email, text, or post, and show you online ads. You can opt out at any time using the unsubscribe link in our emails or by contacting us.

•       To meet legal obligations (compliance with the law): for example responding to valid legal requests, keeping tax records, and enforcing our terms.

How we share your information

We share personal information only where there is a proper reason to. We do not sell your personal information. We may share it with:

•       Service providers who work on our behalf, such as Shopify (hosting), and payment, shipping, analytics, cloud storage, and customer support providers.

•       Marketing partners, where you have agreed, to show you relevant advertising. Depending on where you live, you can ask us not to share your data for targeted advertising.

•       Third parties you ask us to share with, for example a courier to deliver your order, or a social login you choose to use.

•       Others as needed for legal reasons, such as a business sale, a legal request, or to protect our rights and the safety of our users.

Shopify

Our store is hosted by Shopify, which processes personal information to run and improve the Services for us. Shopify may also use data about your interactions with our store, other merchants, and Shopify itself to provide certain enhanced features, and for those it acts as an independent controller and handles your rights requests directly.

For the detail of how Shopify uses your data and the rights you have, see the Shopify Consumer Privacy Policy. You can also exercise certain rights through the Shopify Privacy Portal linked there.

Other websites we link to

Our site may link to sites run by other companies. We are not responsible for their privacy practices, so please review their policies before sharing information with them.

Children

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority where you live. If you are a parent or guardian and believe your child has given us their information, contact us and we will delete it.

Keeping your information safe, and how long we keep it

No security measure is perfect, and information sent over the internet is never completely secure, so please do not send us sensitive information through unsecure channels. We keep your personal information only as long as we need it, for example to run your account, provide the Services, meet legal obligations, and resolve disputes.

Your rights

Depending on where you live, you may have the right to:

•       Access the personal information we hold about you.

•       Correct information that is wrong.

•       Delete your information.

•       Receive a copy of your information, or have it transferred to another provider.

•       Object to or restrict how we use your information.

•       Withdraw consent at any time, where we rely on your consent. This does not affect anything we did before you withdrew it.

These rights have some limits and exceptions under the law. To exercise any of them, email sales@kirashoes.com. We may need to confirm your identity first, and you can appoint someone to make a request for you. We will not treat you unfairly for using your rights, and we will respond within the time the law allows.

Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to put it right. You also have the right to complain to your local data protection authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon). In the UK it is the Information Commissioner's Office (ICO).

International transfers

We may store and process your personal information outside the country you live in. If we transfer it out of the European Economic Area or the UK, we use recognised safeguards such as the European Commission's Standard Contractual Clauses, or their UK equivalent, unless the destination country is already recognised as providing adequate protection.

Changes to this policy

We may update this policy from time to time. When we do, we will post the new version here, update the "Last updated" date, and give notice where the law requires it.

Contact

For any questions about this policy or your personal information, or to exercise your rights, email us at sales@kirashoes.com. KIRA NOVA is the data controller of your personal information.