Privacy Policy
Effective Date: 23 July 2026
Kompsos Limited ("we", "our", "us") respects your privacy. This policy explains what personal data we collect when you visit https://kompsos.co or buy from us, how we use it, and what rights you have.
If you are a United States resident, please also see Section 11 and our Do Not Sell or Share My Personal Information page.
1. Who Is Responsible for Your Data
Kompsos Limited is the data controller.
- Registered in England and Wales, company number 10622637
- Registered office: 21–23 Chilworth Street, London, England, W2 3HA
- VAT registration number: GB 313 4937 11
- ICO registration number: 00014889206
- Email: support@kompsos.co
- Telephone: +44 7877 413 068
2. What We Collect
| Category | Examples |
|---|---|
| Identity and contact | Name, email address, delivery and billing address, telephone number |
| Account | Login credentials, saved preferences, wishlist |
| Order | Purchase history, order value, delivery details, returns and refunds |
| Payment | Card type, last four digits, transaction reference. We never receive or store full card numbers |
| Technical | IP address, browser and device type, operating system, pages viewed, referring source |
| Marketing | Subscription status, email and SMS engagement, advertising identifiers |
| Communications | Emails, live chat and support tickets |
| Destination-specific | Additional recipient details required by law in some countries, such as the Saudi National Address |
3. Why We Use It, and on What Legal Basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Customer service and handling returns | Performance of a contract |
| Taking payment and preventing fraud | Legal obligation; legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Sending marketing emails and SMS | Consent, or soft opt-in for existing customers |
| Advertising and measurement on Meta, Google, Pinterest and AppLovin | Consent |
| Analytics and site improvement | Consent |
| Defending legal claims | Legitimate interests |
Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing carried out before you withdrew.
4. How Long We Keep It
| Data | Retention |
|---|---|
| Order and transaction records | 7 years from the end of the relevant accounting period (HMRC requirement) |
| Account data | While your account is active, then 24 months after your last interaction |
| Marketing data and consent records | 24 months from your last engagement, then deleted or anonymised |
| Support correspondence | 3 years from resolution |
| Website analytics | 14 months |
| Consent records for cookies | 12 months, or until you change your preferences |
After these periods data is deleted or anonymised, unless we are required to keep it longer for legal reasons.
5. Who We Share It With
We share personal data with the following recipients, each acting under contract and only for the purposes described:
| Recipient | Role |
|---|---|
| Shopify Inc. | E-commerce platform, hosting, checkout |
| Shopify Payments, Stripe, PayPal, Apple Pay | Payment processing |
| Royal Mail, Asendia, Starlinks Global, UPS, FedEx | Delivery |
| Klaviyo | Email and SMS marketing |
| Meta | Advertising and measurement |
| Google (Ads and Analytics) | Advertising and website analytics |
| Advertising | |
| AppLovin | Advertising |
| Triple Whale | Marketing analytics and attribution |
| Re:amaze | Customer support |
| Returns portal provider | Managing returns requests |
| Our accountants and professional advisers | Accounting, audit, legal advice |
We may also disclose data where required by law, to enforce our terms, or to prevent fraud.
We do not sell your personal data for money. Please see Section 11 if you are in the United States, where the term "sale" has a broader meaning.
6. International Transfers
Some of our providers process data outside the UK and EEA, including in the United States. Where that happens we rely on one of the following safeguards:
- an adequacy decision by the UK Government or European Commission;
- the UK International Data Transfer Agreement or Addendum, or EU Standard Contractual Clauses;
- the UK Extension to the EU–US Data Privacy Framework, where the recipient is certified.
You can request details of the safeguard applying to a specific transfer by emailing support@kompsos.co.
7. Marketing
We send marketing emails and SMS only where you have opted in, or where you have bought from us and we are offering similar products under the soft opt-in rules in PECR.
You can unsubscribe at any time using the link in any marketing message, or by emailing support@kompsos.co. You will still receive service messages about orders you have placed.
8. Cookies and Similar Technologies
We use cookies and similar technologies for essential site functions, analytics and advertising. Full details, including a breakdown by provider, are in our Cookie Policy.
You can change your preferences at any time through our Cookie Consent Manager.
9. Security
We use TLS encryption in transit, access controls, and providers who maintain PCI DSS compliance for payment processing. No system is completely secure, but we take reasonable steps to protect your data and will notify you and the ICO where required if a breach occurs that is likely to result in a risk to your rights.
10. Your Rights (UK and EU)
You have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data in certain circumstances;
- restrict processing in certain circumstances;
- object to processing based on legitimate interests, and to object to direct marketing at any time and without exception;
- portability — receive data you gave us in a machine-readable format;
- withdraw consent at any time;
- not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these, email support@kompsos.co. We will respond within one month. We may ask you to verify your identity. There is no charge unless a request is manifestly unfounded or excessive.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) or to the supervisory authority in your EU country of residence.
11. United States Residents
This section applies if you live in the United States. It supplements the rest of this policy.
11.1 Sharing for Advertising
We use advertising and analytics technologies from Meta, Google, Pinterest and AppLovin that share identifiers and browsing activity with those companies so we can show you relevant advertising and measure whether it works.
Under the California Consumer Privacy Act as amended by the CPRA, and under comparable laws in Colorado, Connecticut, Virginia, Texas, Oregon, Montana and other states, this is treated as a "sale" or "sharing" of personal information for targeted or cross-context behavioural advertising — even though no money changes hands.
We do not sell personal information in exchange for money, and we do not sell or share the personal information of anyone we know to be under 16.
11.2 What We Collect and Why
The categories in Section 2 above apply. In the terminology of US state privacy law, we collect identifiers, commercial information, internet activity, geolocation inferred from IP address, and inferences drawn from those categories. We use them for the purposes set out in Section 3 and retain them for the periods in Section 4.
We do not collect or process sensitive personal information as defined by these laws.
11.3 Your Rights
Depending on your state of residence, you may have the right to:
- know what personal information we collect, use and disclose;
- access a copy of it;
- correct inaccurate information;
- delete it;
- obtain a portable copy;
- opt out of sale, sharing and targeted advertising;
- not be discriminated against for exercising any of these rights. We will not charge you a different price or provide a different level of service.
11.4 How to Exercise Them
To opt out of sale, sharing and targeted advertising:
- Reject advertising cookies in our Cookie Consent Manager; or
- Send a Global Privacy Control signal from your browser. We treat a GPC signal as a valid opt-out request and honour it automatically.
To exercise any other right: email support@kompsos.co with "US Privacy Request" in the subject line. We will acknowledge within 10 business days and respond within 45 days, extendable once by a further 45 days where reasonably necessary. We will tell you if we need an extension.
Verification. We will ask you to confirm details we already hold — such as the email address and order number associated with your purchases — before acting on an access, correction or deletion request. We will not ask you to create an account.
Authorised agents. You may use an authorised agent. We will require written proof of authorisation and may contact you directly to confirm.
Appeals. If we decline your request, you may appeal by replying to our response or emailing support@kompsos.co with "Appeal" in the subject line. We will respond to appeals within 45 days with our decision and reasons. If we deny the appeal you may contact your state Attorney General.
11.5 Shine the Light (California)
California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. Email support@kompsos.co.
12. Children
Our website is not intended for anyone under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact support@kompsos.co and we will delete it.
13. Changes to This Policy
We may update this policy. Where changes are significant we will tell you by email or by a notice on the website. The effective date at the top always reflects the current version.
© 2026 Kompsos Limited. All rights reserved.