Privacy policy

Who this policy covers

This policy describes the K For You online store and its customer services. For questions about your personal information, use our support form and tell us that your request concerns privacy. Include the email associated with your account or order so we can locate the relevant records.

Information we collect

We collect information you provide when using the store. The details depend on the features you choose to use.

• Account and profile: name, email, password credentials, optional phone number and profile image. Passwords are stored as hashes. If you choose Google sign-in, we receive the identity details needed to create or access your account.
• Shopping and orders: cart items, saved favorites, recipient name, contact details, delivery address, order items, shipping choices, payment status and payment references. Payment providers handle their own payment pages; do not send card numbers through our support or chat forms.
• Support, reviews and inquiries: the messages and attachments you submit, relevant order details, review content and contact information.
• Newsletter: your email address when you subscribe. You can ask support to remove you from the subscriber list.
• Technical information: session identifiers, browser storage preferences and network information used to operate the site, prevent abuse and troubleshoot errors.

How we use information

We use account and order information to provide the service you request: signing you in, maintaining your cart, processing orders, arranging deliveries, recording payments and resolving order issues. We use contact information for order and support updates, and subscriber information for the newsletter you request.

We also use necessary technical information to keep the store working, limit automated abuse, investigate errors and protect accounts. Where applicable law requires a legal basis, these activities relate to providing a requested contract or service, complying with legal obligations, protecting our legitimate interests in operating a secure store, or your consent for optional communications. You may withdraw an optional subscription by contacting support.

Service providers and sharing

Information is shared as needed with providers that run the store, host its database and uploaded files, process payments, deliver orders, or send service messages. Depending on the services enabled for your order, this may include Xendit for payments, Resend for email, Twilio for WhatsApp messages, Google for optional sign-in, and a delivery carrier.

If the AI assistant is enabled, the recent conversation and relevant product or order context may be sent to Google's Gemini service to generate a reply. Avoid entering sensitive personal or payment information in chat. You can use the support form to speak to the store team instead.

We may disclose information where required by law or where necessary to investigate fraud, resolve a dispute or protect the store and its customers. Public product reviews may display the reviewer name and the content submitted. Providers may process information in countries other than your own, under their applicable terms and privacy policies.

Cookies and browser storage

The store uses a sign-in cookie named kfy_session, normally valid for up to 30 days, to recognize an authenticated session. Signing out ends that session. Google sign-in and payment services may use additional cookies on their own services.

• k4u_cart (local storage): keeps a guest shopping bag between visits. A signed-in cart is stored with the account.
• kfy_favorites (local storage): remembers saved products for guests; account favorites are also stored on the server.
• kforyou-market (local storage): remembers the selected display market and currency.
• kfy_checkout_info (session storage): temporarily holds delivery and contact details between checkout steps. It is removed after order creation. Closing the tab normally clears session storage.
• kfy-admin-sidebar (local storage): remembers an administrator's sidebar preference.

You can clear or block browser storage in your browser settings. Doing so may sign you out or remove guest cart and preference information. Browser storage is separate from order and account records held by the store.

Retention and security

Account, order, payment and support records are retained for as long as needed to operate the service, meet applicable recordkeeping requirements and resolve disputes. Retention depends on the record and the reason for keeping it; this policy does not promise automatic deletion after a fixed number of days.

We use measures such as hashed passwords, restricted administrative access and HTTP-only session cookies. No online service can guarantee absolute security. Please protect your password, sign out on shared devices and contact us if you suspect unauthorized account access.

Your choices and requests

You can update available profile and address information in your account. Contact support to request access, correction, deletion, restriction or a copy of your information, or to withdraw a newsletter subscription. Depending on your location, you may have additional rights, including a right to object or complain to a data protection authority.

We may need to verify your identity before acting on a request. Some records may need to be retained for legal obligations, fraud prevention or an unresolved order or dispute. We will explain any applicable limits when handling your request.

Policy updates

We may update this policy as the store and its services change. The date on this page identifies the latest version. If a change requires further notice or consent under applicable law, we will provide it.