Privacy

Data controller: KALAFULL Studio Ltd

What we collect

When you place an order with us, we collect:

  • Identity information — your name and email address
  • Shipping information — your delivery address
  • Personalisation text — the prediction, chant, name, and date you enter
  • Payment information — handled directly by Stripe, our payment processor; we do not store your card details
  • Marketing data — your email address, if you sign up to our newsletter
  • Analytics data — anonymised browsing data via Google Analytics 4 and Microsoft Clarity (Clarity captures session recordings — see "Cookies and tracking" below)

How we use it

We process your data on the following legal bases:

Purpose Legal basis
Fulfilling your order Contract performance (UK GDPR Art. 6(1)(b))
Sending order updates Contract performance
Email marketing (post-purchase) Soft opt-in (PECR Reg 22) — you can unsubscribe at any time
Email marketing (newsletter signup) Consent (UK GDPR Art. 6(1)(a))
Analytics Legitimate interest (UK GDPR Art. 6(1)(f)) — you can opt out
Fraud prevention Legitimate interest
Legal compliance (tax records) Legal obligation (UK GDPR Art. 6(1)(c))

Who we share it with

We share necessary data with these processors:

Processor Purpose Country
Stripe Payment processing US
Printful / Printify Production and shipping US / various
Customily Print file generation US
Resend Order confirmation emails US
Beehiiv Newsletter US
Google Analytics 4 Site analytics US
Microsoft Clarity Session recording US

International transfers (where data leaves the UK) are protected by Standard Contractual Clauses or equivalent transfer mechanisms.

How long we keep it

Data type Retention
Order data (for tax records) 7 years
Marketing list data Until you unsubscribe
Analytics data 14 months
Customer support correspondence 3 years

Your rights

Under UK GDPR you have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Request erasure ("right to be forgotten") — subject to legal retention obligations
  • Restrict or object to processing
  • Data portability (receive your data in a machine-readable format)
  • Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, email hello@kalafull.com.

Cookies and tracking

We use cookies and similar technologies for:

  • Essential — making the site work (cart, checkout, security). These cannot be disabled.
  • Analytics — measuring how the site is used (Google Analytics 4, Microsoft Clarity). You can opt out via our cookie banner.
  • Marketing — measuring ad performance, if you've visited from an advert. You can opt out.

Microsoft Clarity records anonymised session interactions including mouse movements, clicks, and keystrokes on form fields, EXCLUDING payment details. We use this to identify usability issues. You can opt out via our cookie banner or by enabling Do Not Track in your browser.

Personalisation text — important

The text you enter into our builder (e.g., "England 2-1 USA — Sam Smith") may identify you personally. We use this data ONLY to fulfil your specific order. We do not use it for marketing, training AI models, or any social proof without your explicit fresh consent.

Marketing emails

If you've bought from us before, we may email you about similar products under the PECR "soft opt-in" provision. Every marketing email has an unsubscribe link in the footer — one click and you're off the list.

If you signed up to our newsletter without buying, we'll only send marketing emails after you've explicitly consented.

Children

KALAFULL is not intended for children under 16. We do not knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy. The "last updated" date reflects when changes were made. Material changes will be notified by email to active customers.

Contact

For privacy questions or to exercise your rights:

  • Email: hello@kalafull.com
  • ICO complaint: ico.org.uk/make-a-complaint