Privacy Policy

Last updated: October 2025

Kingsley Club (“we”, “us” or “our”) operates an e‑commerce store offering clothing and accessories to customers in the United Kingdom. Protecting your personal data and respecting your privacy is fundamental to how we conduct our business. This privacy policy explains how we collect and use your personal data when you use our website, purchase products, or interact with us. It also describes your rights and our obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 (“DUA Act 2025”), and the Privacy and Electronic Communications Regulations (PECR). Please read it carefully.

1. Who we are and contact details

Kingsley Club is a trading name of Kingsley Club Ltd., a company registered in England and Wales. We act as the data controller for the personal information we collect via our online store and marketing activities. If you have any questions about this policy or wish to exercise your rights, please contact us:

• Email: info@kingsleyclub.com

• Post: Data Protection Officer, Kingsley Club Ltd., 1 Fashion Street, London E1 7NE, United Kingdom.

2. Personal data we collect

We collect personal information that you provide directly, automatically through your interactions with our site, and occasionally from third parties. The types of data we collect include:

2.1 Data you provide

• Identification data such as your name, title and date of birth.

• Contact details including billing and delivery address, email address and telephone number.

• Account credentials such as username and password when you create an account.

• Order and transaction data including items purchased, payment method, delivery details and invoice records.

• Marketing preferences (e.g., whether you wish to receive promotional emails).

• Communications you send us (e.g., emails, chat messages, product reviews or responses to surveys).

• Complaints data: if you submit a complaint about how your data is used, we will collect your complaint details and our correspondence.

2.2 Data we collect automatically

When you visit our website, we automatically collect certain information from your device, including:

• Technical data such as your IP address, browser type, device identifiers, time zone, page interactions and error logs.

• Usage data such as pages viewed, time spent on pages, clicks and navigation patterns. We use this to understand how visitors use our site and to improve it.

2.3 Data from third parties

• Payment processors: we receive confirmation of payment status from our payment service providers but do not store your full card details.

• Analytics providers: we use Google Analytics to help us analyse website traffic (see Section 5). The service uses cookies to collect aggregated statistics about site usage; we do not receive information that personally identifies you.

3. How we use personal data and legal bases

We will only process your personal data when the law allows us to. Below are the main purposes and the legal bases we rely on:

4. Disclosure of personal data

We may share your personal data with:

• Service providers who process data on our behalf, such as payment processors, logistics companies, IT support, marketing agencies and analytics providers.

• Regulators and authorities if required by law or to protect our rights.

• Professional advisers including lawyers, bankers, auditors and insurers.

• Successors: if our business is sold or merged, your data may be transferred to the new owners under strict confidentiality obligations.

We require all third parties to respect the security of your personal data and to process it in accordance with the law. Transfers outside the UK are subject to appropriate safeguards in line with UK GDPR (e.g., adequacy regulations or approved transfer mechanisms).

5. Cookies and similar technologies

A cookie is a small text file placed on your device when you visit a website. We use cookies and similar technologies (such as pixels and device fingerprinting) for the following purposes:

• Essential cookies that enable our website to function (e.g., keeping your session active or enabling shopping cart functionality). These are always active and cannot be disabled.

• Analytics cookies that help us understand how visitors use our site. The DUA Act 2025 relaxes consent requirements for certain low‑risk cookies used for analytics morganlewis.comogletree.com. We set these cookies only after informing you and providing an easy way to opt out.

• Performance and customisation cookies that remember your preferences (e.g., language, region) to improve your experience.

• Marketing cookies that track your browsing habits and may be used to deliver personalised advertising (e.g., via third‑party platforms such as Google Ads or social networks). These cookies will only be set with your explicit consent.

You can manage your cookie preferences at any time through our cookie banner, which allows you to accept, reject or customise cookies. Your browser may also allow you to block or delete cookies via settings. For more information on cookies and your choices, please see our Cookie Policy.

Google Analytics and tracking tools

We use Google Analytics to collect aggregated statistics about how visitors use our site. Google Analytics sets cookies (_ga, _gid and related identifiers) to distinguish unique users and track site usage for statistical purposes. We configure Google Analytics to anonymise IP addresses where possible. Under the DUA Act 2025, certain low‑risk analytics cookies may be set without explicit consent morganlewis.com; however, we provide transparency about their use and honour any consent preferences you set. You can opt out of Google Analytics by adjusting your cookie preferences or installing the Google Analytics Opt‑out Browser Add‑on.

Our website may also embed content from other services (e.g., social media plugins). These third parties may set cookies on your device when you interact with their content. We encourage you to review the privacy policies of these third‑party services.

6. Retention of personal data

We will keep your personal data only as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting or reporting requirements. Retention periods vary depending on the nature of the data and the services provided. For example:

• Order and transaction records are kept for six years to comply with tax and financial regulations.

• Account data is retained while your account is active and for a reasonable period thereafter to handle queries or disputes.

• Marketing preferences are kept until you withdraw consent.

• Complaint records and DSAR correspondence are kept in accordance with regulatory guidance on complaints handling and data subject requests.

When we no longer need your personal data, we securely delete or anonymise it.

7. Your rights

You have several rights under UK data protection law. We respect these rights and will respond to your requests in a timely manner.

• Right of access: You can request a copy of the personal data we hold about you. The DUA Act 2025 clarifies that organisations may pause the one‑month response deadline if they need more information to verify your identity or clarify the scope of your request and are required to conduct “reasonable and proportionate” searches gov.ukogletree.com.

• Right to rectification: You can ask us to correct or complete inaccurate or incomplete personal data.

• Right to erasure (“right to be forgotten”): You can request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or where you withdraw consent.

• Right to object or restrict processing: You have the right to object to certain types of processing (e.g., direct marketing) or request that we restrict processing while we investigate your concerns.

• Right to data portability: You can ask us to provide your personal data in a structured, commonly used and machine‑readable format or to transfer it to another service provider.

• Right to withdraw consent: Where we rely on consent as our legal basis, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

• Right not to be subject to automated decision‑making: The DUA Act 2025 permits certain automated decisions but requires organisations to provide information about these decisions and allow individuals to challenge them gov.uk. Kingsley Club does not make decisions based solely on automated processing that produce legal or similarly significant effects.

How to exercise your rights

You may exercise any of the above rights by contacting us using the details in Section 1. We will acknowledge your request and respond within one month. Under the DUA Act 2025, we may pause this timeframe if we require additional information to verify your identity or clarify your request gov.uk. If you believe that our processing of your personal data does not comply with data protection laws, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk) or, where you live or work in the EU, your local data protection authority.

8. Complaints mechanism

The DUA Act 2025 establishes a statutory right for individuals to raise data protection complaints directly with organisations gov.uk. Kingsley Club provides an online complaint form on our website and accepts complaints via email or post. We will:

1. Acknowledge receipt of your complaint within 30 days morganlewis.com.

2. Investigate the matter, conducting reasonable and proportionate inquiries.

3. Inform you of our findings and any remedial action taken as soon as the investigation is complete gov.uk.

4. Record the complaint and our response for compliance purposes.

If you are dissatisfied with our response, you may contact the ICO or seek a judicial remedy.

9. Changes to this privacy policy

We may update this policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will notify you by updating the date at the top of this policy and, if appropriate, by other means such as a notice on our website or by email. We encourage you to review this policy periodically to stay informed about how we protect your information.

10. Further information

If you have any questions about this privacy policy or our data processing practices, please contact our Data Protection Officer using the details in Section 1. For general information about your privacy rights, you can visit the ICO’s website at www.ico.org.uk.

Do you have a question? We are available 7 days a week to answer all your questions!

If you want to return a product or have a question, we are here to help!

Legal information

Name of the store: Kingsley Club

Company name: Blonksales

Company number: 72269472

Adres: De Spiering 6, 1398 EL, Muiden, The Netherlands

Contact:
E-mail: info@kingsleyclub.co.uk
Phone number: +44 7712 381077