Privacy Policy

1. Who is responsible for your data

Viral Reach Ltd trading as KINKD (company number 16348545, registered office Suite G04, 1 Quality Court, Chancery Lane, London, WC2A 1HR) is the data controller for personal data collected through kinkd.store. Contact: [email protected].

We know that buying intimate products is personal. We collect the minimum data needed to run the store, we never sell your data, and we never use your purchase history for third-party advertising.

2. What we collect

• Order and account data — name, email address, delivery and billing address, phone number (optional), order history, and account password (stored hashed).
• Payment data — handled by our payment processor. We never see or store your full card number. Our processor shares only a payment reference and card metadata (e.g. last four digits) with us.
• Technical data — IP address, approximate country (used to show the right currency and language), browser type, and the cookies described in our Cookie Policy.
• Correspondence — messages you send to our support address.

We do not knowingly collect data from anyone under 18.

3. Why we use it (lawful bases)

• To fulfil your order (contract): processing payment, delivering products, providing support, handling returns and refunds.
• To run and secure the site (legitimate interests): fraud prevention, error logging, currency and language detection, service improvement.
• To send marketing (consent): only if you opt in to our newsletter; every email contains an unsubscribe link.
• To meet legal obligations: tax and accounting records, responding to lawful requests.

4. Who we share it with

We share personal data only with service providers who need it to perform their function, under contracts that restrict their use of it:

• Payment processing — your payment is processed by our payment provider.
• Fulfilment and delivery — your name and delivery address are passed to our fulfilment partner and postal carriers so your order can be dispatched. Parcels carry a neutral sender name.
• Hosting and infrastructure — our website, database and search run on managed hosting providers within contractual safeguards.
• Email delivery — for order confirmations and, with your consent, newsletters.

We do not sell or rent personal data. We will disclose data where required by law.

5. International transfers

Where a provider processes data outside the UK/EEA, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

6. How long we keep it

Order and invoicing records are kept for 6 years as required by UK tax law. Account data is kept until you delete your account or ask us to. Support correspondence is kept for up to 2 years. Technical logs are kept for a short rolling window.

7. Your rights

Under UK GDPR you have the right to access your data, correct it, have it erased, restrict or object to processing, data portability, and to withdraw consent at any time (e.g. unsubscribe). To exercise any right, email [email protected]. We will respond within one month.

If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk). If you are in the EU you may also complain to your local supervisory authority.

8. Discretion by design

Parcels are plain and unmarked. Bank statement descriptors are deliberately non-descriptive. Order confirmation emails avoid explicit product imagery. If someone else has access to your email or account, consider using a private address when ordering.

9. Changes

We will post any changes to this policy on this page. Material changes will be highlighted on the site. Translations are provided for convenience only; the English version prevails.