Legal
Privacy Policy
Last updated 11 October 2026
This policy explains what personal data we collect when you use kelvonaa.shop, why, and what rights you have. We collect as little as we need to sell and deliver your order.
1. Controller
RDX INC LIMITED (trading as KELVONAA), Unit B3 And Attic, Fernhill Mill, Hornby Street, Bury, England, BL9 5BL, United Kingdom. Email support@kelvonaa.shop, telephone +44 7925 382029. For any privacy question, write to the same email address.
2. What we collect and why
| Data | Purpose | Legal basis (UK GDPR / EU GDPR) | How long |
|---|---|---|---|
| Name, email, delivery and billing address, phone (optional), items ordered, order language | Process, deliver and support your order; send order emails | Contract, Art. 6(1)(b) | 6 years after the order (UK tax and accounting rules), then deleted |
| Payment status and the last digits / type of the card or wallet (we never receive full card details) | Take payment, refunds, fraud prevention | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | 6 years |
| Account login (if you create one): email, password hash, saved addresses | Let you see orders and check out faster | Contract, Art. 6(1)(b) | Until you delete the account |
| Messages you send us (contact form, email, withdrawal form) | Answer you; handle withdrawals and returns | Contract or pre-contract steps, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | 3 years after the last message, longer if linked to an order |
| Technical data: IP address, browser, pages requested | Run the site securely, prevent abuse | Legitimate interests, Art. 6(1)(f) | Server logs up to 30 days |
| Delivery country and language you choose | Show prices in your currency and the site in your language | Legitimate interests, Art. 6(1)(f) | Stored in your browser, see the Cookie Policy |
We do not use your data for advertising, we do not sell it, and we do not run analytics or tracking tools on this site. We do not send newsletters. We do not make automated decisions with legal effects about you.
Name, email and address are required to complete an order; without them we cannot deliver. Everything else is optional.
3. Who receives your data
- Payment providers (for example Stripe or PayPal, depending on the method you choose) to process payments, refunds and fraud checks. They act as independent controllers for some of this processing under their own privacy notices.
- Carriers delivering your parcel: name, address, and email or phone for delivery notifications.
- Hosting and email: our web host (Hostinger) stores the site, the order database and our mailbox on our behalf, under a data processing agreement.
- Authorities where the law requires it, for example tax authorities, and customs for parcels leaving the UK.
4. International transfers
We are based in the United Kingdom. The UK has an adequacy decision from the European Commission, so data sent from the EU to us is protected. Some providers (for example payment providers) may process data in the United States or elsewhere; they do so under adequacy regulations, the EU-US Data Privacy Framework or standard contractual clauses.
5. Your rights
You can ask us for access to your data, correction, deletion, restriction of processing and a copy in a portable format, and you can object to processing based on legitimate interests. Email us; we answer within one month. We may need to keep order data for the legal retention period even if you ask us to delete it, but we will then use it for nothing else.
You can also complain to a data protection authority: in the UK the Information Commissioner’s Office (ico.org.uk); in Denmark Datatilsynet; in Germany the authority of your federal state; in Sweden Integritetsskyddsmyndigheten (IMY); in France the CNIL; in the Netherlands the Autoriteit Persoonsgegevens; or the authority where you live or work.
6. Security
The whole site runs over HTTPS. Payments are handled by the payment provider’s secure fields; card numbers never touch our servers. Access to order data is limited to the people who fulfil orders and answer customers.
7. Changes
If we change how we use personal data, we update this page and the date at the top.