Privacy Policy

When you submit a quote request, contact form, referral, or newsletter signup, we collect the information you voluntarily provide — such as your name, email address, phone number, shipping address, and order details. We do not collect or store payment information directly through this website; payments are handled through third-party processors. We also automatically collect limited technical data when you visit our site, including your browser type, pages visited, time spent, and referring URL. This data is collected through Google Analytics and is described further in the Cookies section below.

Your information is used to: respond to your quote requests and inquiries; fulfill and communicate about your custom orders; send order status updates and confirmations; send marketing emails to subscribers (with the ability to opt out at any time); understand how our website is used (via anonymized analytics); and comply with applicable legal obligations. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

If you sign up for our newsletter or submit a quote request, we may contact you with updates, promotions, and order information. Every marketing email we send includes: a clear identification that it is a commercial email; our physical mailing address; and a one-click unsubscribe link. We honor all opt-out requests within 10 business days. To unsubscribe, click the unsubscribe link in any email or contact kara@kcexclusives.com.

We send order-status text messages — such as ready-for-pickup and shipping notifications — only if you give explicit consent by checking the SMS opt-in box at checkout. We do not send marketing text messages. Message and data rates may apply. Message frequency varies by order (typically one to two messages per order). You can opt out at any time by replying STOP to any message, or reply HELP for help. Opting out does not affect your order; you will still receive updates by email. Phone numbers collected for order updates are never sold or shared with third parties for marketing purposes.

We use Google Analytics to understand how visitors use our site. This data is aggregated and anonymized. Google Analytics uses cookies (small text files stored in your browser) to track visits and interactions. Cookie types we use: • Essential cookies — required for the site to function (no consent needed) • Analytics cookies (Google Analytics) — only activated after you provide consent via the cookie banner You may decline analytics cookies using the banner displayed on your first visit. You can also opt out of Google Analytics at any time using the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). You can update your cookie preferences at any time by clearing your browser's local storage for this site and revisiting.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA): • Right to Know: You may request disclosure of what personal information we have collected about you and how we use it. • Right to Delete: You may request that we delete your personal information, subject to certain exceptions. • Right to Correct: You may request that we correct inaccurate personal information. • Right to Opt Out: We do not sell or share your personal information as those terms are defined under CCPA/CPRA. • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights. To exercise any of these rights, contact us at kara@kcexclusives.com. We will respond within 45 days.

If you are located in the European Union or United Kingdom, you have the following rights under GDPR/UK GDPR: • Right of Access: You may request a copy of the personal data we hold about you. • Right to Rectification: You may request correction of inaccurate data. • Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances. • Right to Restrict Processing: You may request that we limit how we use your data. • Right to Data Portability: You may request your data in a machine-readable format. • Right to Object: You may object to our processing of your personal data for marketing purposes at any time. Our lawful basis for processing personal data is: (a) contractual necessity — to fulfill custom orders; (b) legitimate interests — to respond to inquiries and improve our services; (c) consent — for marketing emails and analytics cookies. To exercise your rights or lodge a complaint, contact kara@kcexclusives.com. EU residents may also lodge a complaint with your local supervisory authority.

KC Exclusives' website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Our community forum is intended for users 18 years of age and older. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at kara@kcexclusives.com and we will delete the information promptly.

We retain customer order information for 7 years for tax and business record purposes. Newsletter subscriber information is retained until you unsubscribe. Analytics data (Google Analytics) is retained per Google's default retention settings (26 months). You may request deletion of your personal data at any time by contacting us.

We use the following third-party services which may process your data on our behalf: • Google Analytics — website analytics (privacy.google.com) • Google Firebase / Firestore — user accounts, order data storage (firebase.google.com) • Cloudinary — product image storage (cloudinary.com) • Vercel — website hosting (vercel.com) • Twilio — SMS notifications, including consent-based order-status texts (twilio.com) These providers are contractually obligated to protect your data and may not use it for their own marketing purposes. Some of these services involve international data transfers; where applicable, appropriate safeguards (such as Standard Contractual Clauses) are in place.

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our website uses HTTPS/SSL encryption for all data in transit. However, no internet transmission is 100% secure. In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law.

Regardless of your location, you may contact us at any time to: access or correct your personal information; request deletion of your data; withdraw consent for marketing emails; request information about how your data is used. To make any of these requests, email kara@kcexclusives.com with the subject line "Privacy Request." We will respond within 30 days.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Material changes will be communicated via a notice on our website. Continued use of our site after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how your information is handled, please contact us at kara@kcexclusives.com.