Privacy policy

Last updated: 30 September 2026

This privacy policy explains how Kalmi ("we", "us") collects, uses and protects your personal information when you visit our website, buy from us or contact us. We are the data controller for your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect

• Contact details: your name, email address, phone number and delivery and billing addresses.
• Order details: what you buy, your order history, returns and any gift messages you add.
• Payment information: payments are processed securely by our payment providers (such as Shopify Payments, PayPal, Apple Pay and Google Pay). We never see or store your full card details.
• Messages: anything you send us through our contact form or by email.
• Device and usage information: such as your IP address, browser type and how you use our website, collected through cookies and similar technologies.

How we use it

• To process and deliver your order, including sending order and tracking emails (to perform our contract with you).
• To handle returns, refunds and customer service questions (to perform our contract with you).
• To send you marketing emails, only if you've opted in. You can unsubscribe at any time using the link in any email (based on your consent).
• To show relevant adverts and measure how our website and ads perform, only where you've accepted the relevant cookies (based on your consent).
• To prevent fraud and keep our website secure (our legitimate interests).
• To meet our legal and tax obligations (legal obligation).

Who we share it with

We only share your information with trusted service providers who help us run our business, and only as much as they need. These include:

• Shopify, which hosts our store and processes orders.
• Payment providers, to take payment securely.
• Delivery companies, to get your order to you.
• Marketing and analytics platforms such as Meta (Facebook and Instagram), Google and TikTok, only where you've accepted the relevant cookies.

We never sell your personal information. Some providers may process data outside the UK. Where they do, we rely on recognised safeguards such as UK-approved data transfer agreements.

Cookies

We use essential cookies to make our website work, such as keeping items in your basket. With your permission, we also use analytics and advertising cookies. You can accept or decline these in the cookie banner and change your choice at any time.

How long we keep it

We keep order and transaction records for as long as we need them for tax and accounting purposes (usually six years). We keep marketing preferences until you unsubscribe, and we delete other information when we no longer need it.

Your rights

Under UK data protection law, you have the right to:

• access the personal information we hold about you;
• ask us to correct or delete it;
• object to or restrict how we use it;
• ask for a copy of it in a portable format;
• withdraw your consent at any time, for example to marketing emails.

To use any of these rights, contact us. We'll respond within one month.

Complaints

If you're unhappy with how we've handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

Contact

For any questions about this policy or your personal information, get in touch.