Privacy Policy

1) Introduction

This Privacy Policy explains how New kenshi collects, uses, stores, shares and protects personal data relating to users and customers of the website New kenshi.

The data controller is established in France. Personal data processed in the context of this French establishment is therefore handled in accordance with the EU General Data Protection Regulation (GDPR), the French Data Protection Act and other applicable European Union data-protection requirements.

For users and customers in Ireland, applicable Irish data-protection and electronic-privacy legislation may also apply, including the Data Protection Act 2018 and the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011, as amended, where relevant.

By using the website, you acknowledge that you have read this Privacy Policy. Where consent is legally required, including for certain cookies, tracking technologies or marketing activities, consent is requested separately and may be withdrawn at any time.

2) Data Controller

NOITAKY Matthieu determines the purposes and essential means of the personal-data processing activities described in this Privacy Policy and acts as data controller for those activities.

Where a Data Protection Officer has been formally appointed, the officer may be contacted using the details published on the website or through contact@kenshiblades.com.

3) Personal Data Collected

New kenshi collects personal data that is necessary for website operation, order fulfilment, customer service, security, legal compliance and improvement of the user experience.

The categories of personal data may include:

• Identification and contact data: first name, surname, postal address, email address and phone number;
• Order and transaction data: purchased products, order history, payment method, amount, currency, billing address, delivery address, refunds and returns;
• Account data: login credentials, account preferences and saved information, where a customer account is created;
• Technical and browsing data: IP address, device information, browser type, operating system, visited pages, session data, referral source and cookie identifiers;
• Communication data: messages, requests, complaints, reviews and information sent through forms, email or customer support;
• Marketing data: newsletter subscriptions, advertising preferences, consent records and interactions with promotional communications;
• Security and fraud-prevention data: risk indicators, authentication information and information necessary to detect suspicious or unlawful activity.

Some information is necessary to enter into and perform a sales contract. If required order, payment or delivery information is not provided, we may be unable to process or fulfil the order.

New kenshi does not intentionally request special-category personal data. Please do not include such information in free-text messages unless it is strictly necessary for your request.

4) Sources of Personal Data

Personal data may be collected:

• Directly from you when you place an order, create an account, contact us, submit a form, subscribe to marketing or publish a review;
• Automatically when you browse the website or interact with cookies and similar technologies;
• From payment, delivery, fraud-prevention, analytics or technical service providers where necessary to complete a transaction, secure the website or investigate an issue;
• From publicly available or legally accessible sources where permitted by applicable law.

5) Purposes of Processing

Personal data may be used for the following purposes:

• Processing orders, payments, deliveries, returns and refunds;
• Managing customer accounts and purchase history;
• Providing customer service and responding to requests or complaints;
• Sending order confirmations, tracking information and service communications;
• Operating, maintaining, securing and troubleshooting the website;
• Preventing fraud, abuse, chargebacks and other unlawful activity;
• Improving website performance, products, services and user experience;
• Measuring traffic and website usage, subject to applicable consent requirements;
• Sending newsletters or promotional offers where legally permitted and, where required, with consent;
• Complying with tax, accounting, consumer protection, regulatory and legal obligations;
• Establishing, exercising or defending legal claims.

Personal data will not be used for a purpose incompatible with the purpose for which it was collected unless an appropriate legal basis exists and any required additional information or consent has been provided.

6) Legal Bases for Processing

Personal-data processing under the GDPR relies on one or more of the following legal bases, as appropriate:

• Performance of a contract: processing orders, payments, deliveries, returns and customer requests;
• Legal obligation: accounting, tax, consumer-protection, regulatory and record-keeping requirements;
• Consent: optional marketing communications, non-essential cookies and other processing activities for which consent is required;
• Legitimate interests: securing the website, preventing fraud, improving services, managing disputes and communicating with customers, provided those interests are not overridden by the individual's rights and freedoms;
• Establishment, exercise or defence of legal claims: where applicable.

Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

7) Data Recipients and Service Providers

Personal data is accessible only to authorised persons and service providers that need it for the purposes described in this policy.

• E-commerce platform and hosting: Shopify International Limited and relevant Shopify affiliates and subprocessors;
• Domain name registrar: HOSTINGER operations, UAB;
• Payment providers: providers displayed at checkout, which may include Stripe, PayPal, Klarna, Apple Pay or Google Pay;
• Logistics providers: carriers, delivery partners, fulfilment centres and customs intermediaries;
• Technical providers: email, customer-support, security, fraud-prevention, analytics, consent-management and website-service providers used by the store;
• Professional and public recipients: accountants, legal advisers, insurers, banks, courts, regulators, tax authorities and law-enforcement bodies where legally required or reasonably necessary.

Shopify processes customer data for merchants in accordance with its contractual and data-processing terms. Further information is available in Shopify's Consumer Privacy Policy.

New kenshi does not sell personal data for monetary consideration.

Where a service provider acts as a processor on our behalf, appropriate contractual and organisational safeguards are used where required by the GDPR.

8) Data Retention

Personal data is retained only for as long as reasonably necessary for the relevant purpose, subject to legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Data may be deleted, anonymised or archived when the applicable active retention period expires.

Retention periods may be extended where reasonably necessary for an ongoing legal claim, regulatory investigation or other legal obligation.

9) Privacy Rights

Individuals in Ireland and elsewhere in the European Economic Area may exercise the rights available under the GDPR, subject to the conditions and exceptions provided by applicable law. Requests may be sent to contact@kenshiblades.com. We may need to verify the requester's identity and authority before acting.

9.1) Ireland and the European Economic Area

Where the GDPR applies, individuals may have rights of access, rectification, erasure, restriction of processing, objection, data portability, withdrawal of consent and the right to lodge a complaint with a supervisory authority.

Individuals may object to processing for direct marketing purposes at any time.

Where applicable, individuals also have protections concerning decisions based solely on automated processing that produce legal or similarly significant effects.

Requests are normally answered without undue delay and within one month, subject to any lawful extension permitted by the GDPR.

9.2) Right of Access

You may request confirmation as to whether personal data concerning you is being processed and, where applicable, obtain access to that personal data together with the information required by Article 15 GDPR.

9.3) Right to Rectification

You may request correction of inaccurate personal data concerning you and completion of incomplete personal data where appropriate.

9.4) Right to Erasure

You may request erasure of personal data where one of the conditions provided by the GDPR applies. This right is subject to legal exceptions, including where continued processing is necessary to comply with a legal obligation or establish, exercise or defend legal claims.

9.5) Right to Restriction and Objection

You may request restriction of processing or object to certain processing where the applicable statutory conditions are met.

9.6) Data Portability and Withdrawal of Consent

Where the statutory conditions apply, you may request the personal data you provided in a structured, commonly used and machine-readable format and may request transmission to another controller where technically feasible.

Where processing is based on consent, you may withdraw that consent at any time.

10) Data Security and Personal Data Breaches

New kenshi implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Measures may include HTTPS encryption, access controls, authentication, restricted permissions, secure service providers, backups, monitoring, fraud-prevention controls and confidentiality obligations.

No online system can be guaranteed to be completely secure. If a personal-data breach occurs, New kenshi will investigate the incident, document it as required and take appropriate corrective measures.

Where a personal-data breach is likely to result in a risk to the rights and freedoms of individuals, the competent supervisory authority will be notified without undue delay and, where feasible, within 72 hours after becoming aware of the breach, as required by the GDPR.

Where the breach is likely to result in a high risk to affected individuals, those individuals will also be informed without undue delay where required by applicable law.

11) Payment Security

Payments are processed by appropriate payment service providers, which may include Stripe, PayPal, Klarna, Apple Pay or Google Pay, depending on the options displayed at checkout.

Payment information is transmitted using secure encryption. Full payment-card details are not stored directly on our website servers and are handled by the relevant payment provider under its own privacy and security terms.

Payment providers may act as independent controllers for certain processing activities, including legal compliance, fraud prevention and transaction authentication.

12) Cookies and Similar Technologies

The website New kenshi may use cookies and similar technologies to:

• Provide essential website, cart, checkout and security functions;
• Remember preferences and improve the user experience;
• Measure traffic and website performance;
• Personalise content or advertising where legally permitted and validly consented to.

Under applicable Irish electronic-privacy rules, consent is normally required before storing or accessing information on a user's device through cookies or similar tracking technologies, unless a statutory exemption applies.

Strictly necessary technologies used to provide a service explicitly requested by the user may be exempt from the consent requirement.

Non-essential technologies, including analytics, advertising or conversion-tracking technologies where consent is required, are not activated until valid consent has been obtained.

Users may modify or withdraw their consent through the “Manage cookies” link or consent tool available on the website. Withdrawing consent should be as easy as giving it.

For more information, see our Cookie Policy.

13) International Data Transfers

Some service providers, affiliated companies or technical systems may process personal data in countries outside the European Economic Area.

Where personal data is transferred outside the European Economic Area and the GDPR's international-transfer rules apply, the transfer is based on an appropriate lawful mechanism.

This may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses approved by the European Commission together with any supplementary measures required in the circumstances, or another transfer mechanism permitted by applicable law.

Service providers acting as processors are also subject to appropriate contractual data-protection requirements where required.

Further information about applicable transfer safeguards may be requested through contact@kenshiblades.com.

14) Automated Processing and Fraud Prevention

Automated tools may be used to detect fraud, secure payments, identify suspicious activity or protect the website.

New kenshi does not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects on an individual.

If such processing is used in circumstances covered by Article 22 GDPR, it will only take place where legally permitted and with the safeguards required by applicable law.

15) Children's Privacy

The website is not directed to children and is intended for persons who have the legal capacity to make purchases.

New kenshi does not knowingly collect personal data from children in circumstances prohibited by applicable law. A parent or guardian who believes that a child has provided personal data unlawfully may contact contact@kenshiblades.com.

Where consent is relied upon in relation to an information-society service offered directly to a child, any special age and consent requirements imposed by applicable GDPR and Irish law will be respected.

16) Complaints and Supervisory Authorities

Please contact contact@kenshiblades.com first so that we can review and attempt to resolve any privacy concern.

• France: Commission nationale de l'informatique et des libertés (CNIL) — https://www.cnil.fr/fr/plaintes
• Ireland: Data Protection Commission (DPC) — https://www.dataprotection.ie

Under the GDPR, an individual may lodge a complaint with a competent supervisory authority, including the supervisory authority of the Member State of habitual residence, place of work or place of the alleged infringement, where the applicable conditions are met.

As NOITAKY Matthieu is established in France, the CNIL may also be relevant to processing carried out in the context of that French establishment.

17) Compliance for Customers in Ireland

This Privacy Policy is intended to address the privacy and data-protection requirements applicable to customers in United States, United Kingdom, Canada, Australia, New Zealand..

17.1) GDPR and Irish Data Protection Law

Personal data relating to Irish customers is handled in accordance with the GDPR and, where applicable, the Irish Data Protection Act 2018 and other applicable Irish data-protection legislation.

17.2) Data Protection Principles

Personal data will be processed lawfully, fairly and transparently, collected for specified and legitimate purposes, limited to what is necessary, kept accurate where required, retained no longer than necessary and protected using appropriate security measures.

17.3) Electronic Marketing

Electronic marketing communications will be sent only where a valid legal basis exists and any consent required by applicable Irish electronic-privacy legislation has been obtained.

Recipients may opt out of direct marketing communications at any time using the unsubscribe mechanism provided or by contacting contact@kenshiblades.com.

17.4) Cookies and Tracking Technologies

Consent will be obtained before non-exempt cookies or similar tracking technologies are stored on or access information from a user's device where required by the Irish ePrivacy Regulations.

Strictly necessary cookies and technologies covered by an applicable statutory exemption may operate without consent.

17.5) Supervisory Authority

Irish users may contact the Data Protection Commission regarding concerns about the processing of their personal data where the DPC is competent to deal with the matter.

Nothing in this policy limits a data-protection right that cannot lawfully be waived or restricted.

18) Policy Updates

New kenshi may update this Privacy Policy to reflect changes in legal requirements, website features, service providers or data-processing practices.

The date of the latest update is displayed at the top of the page. Where required by law, material changes will be brought to users' attention and renewed consent will be requested for processing that requires it.

19) Contact