Privacy Policy

Who is responsible

This policy explains what personal data KiKi Meow (“we”, “us”, “our”) collects when you use kikimeow.store, how we use it, who we share it with, and the rights you have. The data controller is KiKi Meow, Flat G, 15/F, Block 6 Island Harbourview, 11 Hoi Fai Road, Tai Kok Tsui, Kowloon, Hong Kong. For privacy requests, contact hello@kikimeow.store (subject: Privacy).

What we collect

• Identity & contact: name, email, shipping and billing address, phone number.
• Order data: items ordered, amounts, currency, delivery status, order history.
• Payment data: we never see or store your full card number, CVV or expiry. Stripe (our processor) stores card details under its PCI-DSS Level 1 programme; we receive a token and a “paid” result.
• Account data: email, salted password hash, saved addresses, wishlist (if used).
• Marketing data: if you subscribe, your email, consent record and which emails we sent/opened/clicked (via Brevo).
• Support data: anything you send when you contact us, including photos of damaged items.
• Device & usage data: IP address, browser and device type, pages viewed, referring site, country — collected via Google Analytics 4 in anonymised mode (IP truncation on).
• Cookie data: see the Cookie Policy.

Legal bases we rely on

Depending on where you live, we process your data under one or more of: performance of a contract (to fulfil your order); our legitimate interests (fraud prevention, analytics, service improvement); your consent (marketing emails, optional cookies); and legal obligation (tax/accounting records).

What we use it for

• Process, pack, ship and deliver orders, and handle returns and refunds.
• Take payment and screen for fraud.
• Send transactional emails (confirmation, shipping, delivery).
• Send marketing emails — only with your opt-in consent; every email has an unsubscribe link, and you can withdraw consent at any time.
• Improve the store through aggregated, anonymised analytics.
• Comply with tax, accounting and consumer-protection law.

Who we share it with

We do not sell your personal information. We share the minimum necessary with vetted processors:

• Stripe — card payments and fraud screening.
• Brevo — transactional and (opt-in) marketing email.
• CJ Dropshipping — order fulfilment and shipping (receives name, address, items, phone for delivery).
• Google Analytics 4 — anonymised usage analytics.
• Carriers — the delivery address and contact details needed to deliver your parcel.

Some processors are outside your country (notably the United States and the EEA). Where we transfer personal data internationally, we rely on the processor’s own compliance frameworks (e.g. Stripe’s and Google’s certified programmes, and standard contractual clauses where required).

How long we keep it

• Orders: at least 7 years for tax and accounting reasons.
• Accounts: until you delete the account, then up to 24 months for fraud prevention, then erased.
• Newsletter: until you unsubscribe.
• Support threads: 24 months, then anonymised.
• Analytics: 14 months in identifiable form, then aggregated.

Your rights

Depending on where you live — GDPR/UK GDPR (EEA & UK), PIPEDA (Canada), CCPA/CPRA (California), LGPD (Brazil), PDPA (Singapore) — you have the right to:

• Be told what we hold and why (this policy).
• Access a copy of your data.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”), subject to our legal retention duties.
• Restrict or object to processing, including direct marketing.
• Withdraw consent at any time (where processing is based on consent).
• Receive your data in a portable format.
• Lodge a complaint with your local data-protection authority.

Email hello@kikimeow.store to exercise any right. We respond within 30 days; complex requests may take longer and we will tell you.

Automated decisions

We do not make decisions that legally affect you using only automated processing, except limited fraud screening by our payment processor, which you can contest by contacting us.

Children

KiKi Meow is a store for adult cat owners. We do not knowingly collect data from anyone under 16. If you believe a child provided us data, contact us and we will delete it.

How we protect it

HTTPS everywhere; passwords stored as salted hashes; access on a need-to-know basis; vendor security reviewed; payment handled by a PCI-DSS Level 1 processor so card numbers never reach us. No system is perfectly secure — if you believe your data is compromised, tell us immediately.

Breach notification

If a breach affects your personal data and the law requires it, we will notify you and the relevant authority without undue delay.

Cookies

See the Cookie Policy for the full list and your controls.

Changes to this policy

We may update this policy. The “Last updated” date below always reflects the most recent change. Material changes are announced by email to newsletter subscribers.

Contact

Email hello@kikimeow.store (subject: Privacy). Data controller: KiKi Meow, Kowloon, Hong Kong.

Last updated: September 24, 2026