Privacy Policy

1) Introduction

This Privacy Policy explains how New kenshi collects, uses, stores, shares and protects personal information relating to users and customers of the website New kenshi.

The data controller is established in France. Personal data processed in the context of this French establishment is therefore handled in accordance with the EU General Data Protection Regulation (GDPR), the French Data Protection Act, and the other privacy laws that apply to the relevant customer or activity.

Depending on the user's location and the applicability of the relevant legislation, this may also include United States federal and state privacy laws, the UK GDPR and Data Protection Act 2018 as amended, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation, Australia's Privacy Act 1988 and Australian Privacy Principles, and New Zealand's Privacy Act 2020.

By using the website, you acknowledge that you have read this Privacy Policy. Where consent is legally required, including for certain cookies or marketing activities, consent is requested separately and may be withdrawn at any time.

2) Data Controller

Where a data protection officer has been formally appointed, the officer may be contacted using the details published on the website or through contact@kenshiblades.com.

3) Personal Data Collected

New kenshi collects personal data that is necessary for website operation, order fulfilment, customer service, security, legal compliance and the improvement of the user experience.

The categories of personal data may include:

• Identification and contact data: first name, surname, postal address, email address and phone number;
• Order and transaction data: purchased products, order history, payment method, amount, currency, billing address, delivery address, refunds and returns;
• Account data: login credentials, account preferences and saved information, where a customer account is created;
• Technical and browsing data: IP address, device information, browser type, operating system, visited pages, session data, referral source and cookie identifiers;
• Communication data: messages, requests, complaints, reviews and information sent through forms, email or customer support;
• Marketing data: newsletter subscriptions, advertising preferences, consent records and interactions with promotional communications;
• Security and fraud-prevention data: risk indicators, authentication information and information necessary to detect suspicious or unlawful activity.

Some information is mandatory to enter into and perform a sales contract. If required order, payment or delivery information is not provided, we may be unable to process or fulfil the order.

New kenshi does not intentionally request sensitive or special-category information. Please do not include such information in free-text messages unless it is strictly necessary for your request.

4) Sources of Personal Data

Personal data may be collected:

• Directly from you when you place an order, create an account, contact us, submit a form, subscribe to marketing or publish a review;
• Automatically when you browse the website or interact with cookies and similar technologies;
• From payment, delivery, fraud-prevention, analytics or technical service providers where necessary to complete a transaction, secure the website or investigate an issue;
• From publicly available or legally accessible sources where permitted by applicable law.

5) Purposes of Processing

Personal data may be used for the following purposes:

• Processing orders, payments, deliveries, returns and refunds;
• Managing customer accounts and purchase history;
• Providing customer service and responding to requests or complaints;
• Sending order confirmations, tracking information and service communications;
• Operating, maintaining, securing and troubleshooting the website;
• Preventing fraud, abuse, chargebacks and other unlawful activity;
• Improving website performance, products, services and user experience;
• Measuring traffic and website usage, subject to applicable consent requirements;
• Sending newsletters or promotional offers where legally permitted and, where required, with consent;
• Complying with tax, accounting, consumer protection, regulatory and legal obligations;
• Establishing, exercising or defending legal claims.

Personal data will not be used for an incompatible purpose without an appropriate legal basis and, where required, additional notice or consent.

6) Legal Bases for Processing

Where the GDPR, UK GDPR or another law requiring a legal basis applies, processing relies on one or more of the following bases:

• Performance of a contract: processing orders, payments, deliveries, returns and customer requests;
• Legal obligation: accounting, tax, fraud-prevention, regulatory and record-keeping requirements;
• Consent: optional marketing communications, non-essential cookies and other activities for which consent is required;
• Legitimate interests: securing the website, preventing fraud, improving services, managing disputes and communicating with existing customers, provided those interests are not overridden by the individual's rights;
• Establishment, exercise or defence of legal claims: where recognised by applicable law.

Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

7) Data Recipients and Service Providers

Personal data is accessible only to authorised persons and service providers that need it for the purposes described in this policy.

• E-commerce platform and hosting: Shopify International Limited and relevant Shopify affiliates and subprocessors;
• Domain name registrar: HOSTINGER operations, UAB;
• Payment providers: providers displayed at checkout, which may include Stripe, PayPal, Klarna, Apple Pay or Google Pay;
• Logistics providers: carriers, delivery partners, fulfilment centres and customs intermediaries;
• Technical providers: email, customer-support, security, fraud-prevention, analytics, consent-management and website-service providers used by the store;
• Professional and public recipients: accountants, legal advisers, insurers, banks, courts, regulators, tax authorities and law-enforcement bodies where legally required or necessary.

Shopify processes customer data for merchants in accordance with its contractual and data-processing terms. Further information is available in Shopify's Consumer Privacy Policy.

We do not sell personal information for monetary consideration. Depending on the advertising or analytics technologies enabled on the website, certain disclosures may be considered a “sale”, “sharing” or targeted advertising under some United States state laws. Eligible users may opt out through the available cookie or privacy controls.

8) Data Retention

Personal data is retained only for as long as reasonably necessary for the relevant purpose, subject to legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Data may be deleted, anonymised or archived when the active retention period expires.

9) Privacy Rights

Rights vary according to the law that applies to the individual and the processing activity. Requests may be sent to contact@kenshiblades.com. We may need to verify the requester's identity and authority before acting.

9.1) France and the European Economic Area

Where the GDPR applies, individuals may have rights of access, rectification, erasure, restriction, objection, data portability, withdrawal of consent and complaint to a supervisory authority. They may also object to direct marketing at any time.

Requests are normally answered within one month, subject to any lawful extension.

9.2) United States

Depending on the state and whether the relevant law applies, users may have the right to know or access personal information, request correction or deletion, obtain data portability, opt out of sale, sharing or targeted advertising, limit certain uses of sensitive personal information, and exercise rights without unlawful discrimination.

California requests covered by the CCPA/CPRA are generally answered within 45 days, subject to identity verification and any lawful extension.

9.3) United Kingdom

Where the UK GDPR applies, individuals may have rights of access, rectification, erasure, restriction, objection, data portability, withdrawal of consent and complaint to the Information Commissioner's Office. They may object to direct marketing at any time.

Requests are normally answered within one month, subject to any lawful extension.

9.4) Canada

Where PIPEDA or applicable provincial legislation applies, individuals may request access to their personal information, challenge its accuracy and request correction, withdraw consent subject to legal or contractual restrictions, and complain to the competent federal or provincial privacy regulator.

Access requests covered by PIPEDA are generally answered within 30 days, subject to any permitted extension.

9.5) Australia

Where the Privacy Act 1988 and Australian Privacy Principles apply, individuals may request access to and correction of personal information and may complain about the handling of their information. Requests will be handled within the period required by applicable law.

9.6) New Zealand

Where the Privacy Act 2020 applies, individuals may request access to and correction of personal information and may complain to the Office of the Privacy Commissioner. Requests will be handled within the period required by applicable law.

10) Data Security and Privacy Breaches

New kenshi implements reasonable technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, alteration, disclosure or destruction.

Measures may include HTTPS encryption, access controls, authentication, restricted permissions, secure service providers, backups, monitoring, fraud-prevention controls and staff or contractor confidentiality obligations.

No online system can be guaranteed to be completely secure. Where a personal-data breach occurs, we will investigate it and notify the competent authorities and affected individuals where required by applicable law.

11) Payment Security

Payments are processed by certified payment service providers, which may include Stripe, PayPal, Klarna, Apple Pay or Google Pay, depending on the options displayed at checkout.

Payment information is transmitted using secure encryption. Full card details are not stored directly on our website servers and are handled by the relevant payment provider under its own privacy and security terms.

Payment providers may act as independent controllers for some processing activities, including legal compliance, fraud prevention and transaction authentication.

12) Cookies and Similar Technologies

The website New kenshi may use cookies and similar technologies to:

• Provide essential website, cart, checkout and security functions;
• Remember preferences and improve the user experience;
• Measure traffic and website performance;
• Personalise content or advertising where legally permitted and consented to.

Where required, non-essential technologies are not activated until the user has provided consent. Preferences may be modified or withdrawn through the “Manage cookies” link or consent tool available on the website.

For more information, see our Cookie Policy.

13) International Data Transfers

Some service providers, affiliated companies or technical systems may process personal data in countries other than the country in which the user is located.

Where international-transfer restrictions apply, transfers are made using an applicable legal mechanism, which may include an adequacy decision, standard contractual clauses, the United Kingdom International Data Transfer Agreement or Addendum, contractual data-processing terms, or another lawful safeguard.

Service providers may also be required to take reasonable steps to ensure that overseas recipients protect personal information in accordance with applicable Canadian, Australian or New Zealand privacy requirements.

Further information about applicable transfer safeguards may be requested through contact@kenshiblades.com.

14) Automated Processing and Fraud Prevention

Automated tools may be used to detect fraud, secure payments, identify suspicious activity or protect the website.

New kenshi does not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects on an individual, unless this is necessary for a contract, authorised by law or based on valid consent and the legally required safeguards are provided.

15) Children's Privacy

The website is not directed to children and is intended for persons who have the legal capacity to make purchases.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law. A parent or guardian who believes that a child has provided personal information unlawfully may contact contact@kenshiblades.com.

16) Complaints and Supervisory Authorities

Please contact contact@kenshiblades.com first so that we can review and attempt to resolve any privacy concern.

• France / European Union: Commission nationale de l'informatique et des libertés (CNIL) — https://www.cnil.fr/fr/plaintes
• United States: Federal Trade Commission — https://reportfraud.ftc.gov/; California Privacy Protection Agency, where applicable — https://cppa.ca.gov/
• United Kingdom: Information Commissioner's Office — https://ico.org.uk/make-a-complaint/
• Canada: Office of the Privacy Commissioner of Canada — https://www.priv.gc.ca/en/report-a-concern/, or the applicable provincial privacy regulator;
• Australia: Office of the Australian Information Commissioner — https://www.oaic.gov.au/privacy/privacy-complaints
• New Zealand: Office of the Privacy Commissioner — https://www.privacy.org.nz/your-rights/making-a-complaint-to-the-privacy-commissioner/

17) Compliance Across Countries of Sale

This Privacy Policy is intended to address the privacy laws applicable to the countries served by the website: United States, United Kingdom, Canada, Australia, New Zealand.

Where different laws apply, the relevant mandatory rule governs the processing activity and the rights of the individual. Nothing in this policy limits a non-waivable privacy right.

18) Policy Updates

New kenshi may update this Privacy Policy to reflect changes in legal requirements, website features, service providers or data-processing practices.

The date of the latest update is displayed at the top of the page. Where required by law, material changes will be brought to users' attention and renewed consent will be requested for processing that requires it.

19) Contact