Kal Gryphus – Privacy Policy
Privacy Policy
We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and the rights you have under applicable data protection laws. All privacy-related requests must be submitted via email at support@kalgryphus.com.
Data Controller
Kal Gryphus Ltd.
Registered office: 53 Radko Dimitriev Street
9000 Varna, Bulgaria
Email: support@kalgryphus.com
Information We Collect - Provided by You
We collect personal data that you provide directly when placing an order, contacting us, or subscribing to our newsletter. This may include:
  • Full name
  • Email address
  • Billing address
  • Shipping address
  • Order details
  • Information included in email communications
Payment information is processed securely by Stripe. We do not store full credit card details on our servers.
Information We Collect - Collected Automatically
When you visit our website, certain information may be collected automatically, including:
  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent
  • Referral source
This information is collected through cookies and similar tracking technologies used to operate the website, measure performance, and improve user experience.
How We Use Your Information
We use personal data for the following purposes:
  • To process and fulfill orders
  • To deliver products and provide shipping updates
  • To respond to customer inquiries and provide support
  • To comply with legal and accounting obligations
  • To prevent fraud and unauthorized transactions
  • To improve website functionality and user experience
  • To measure website performance and advertising effectiveness
  • To send marketing emails where consent has been provided
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
  • Performance of a contract, when processing is necessary to fulfill an order or provide requested services
  • Compliance with legal obligations, including accounting and tax requirements
  • Legitimate interests, such as fraud prevention, website improvement, and business operations
  • Consent, where required, including for marketing emails and non-essential cookies
You may withdraw your consent at any time by contacting us or adjusting your preferences where available.
Sharing of Information
We may share personal data with trusted third-party service providers where necessary to operate our business, including:
  • Stripe, for secure payment processing
  • Shipping and fulfillment providers, for delivery of orders
  • Analytics and advertising providers, including Google Analytics and Meta
  • Website hosting providers
  • Email marketing providers, where applicable
These providers process data on our behalf and in accordance with their own privacy policies and applicable data protection laws. We do not sell personal data to third parties.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, and reporting requirements. Order and billing information may be retained as required by applicable tax and accounting laws. Marketing data is retained until you withdraw consent or unsubscribe. Support communications may be retained for record-keeping and service improvement purposes. Analytics data is retained in accordance with the settings of the respective analytics providers.
Your Rights
Under applicable data protection laws, you have the right to:
  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your personal data
  • Restrict or object to certain types of processing
  • Request data portability
  • Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact our support email. You also have the right to lodge a complaint with your local data protection authority.
Data Security
We implement reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. While no system can guarantee absolute security, we take appropriate steps to safeguard the information we collect and process.
Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, services, or legal requirements. The updated version will be posted on this page.