Privacy policy

PRIVACY POLICY

Last updated: 19/09/2026

Second Kiss Ltd ("Second Kiss", "we", "us", "our") operates this store and website, including all related information, content, features, tools, products and services (the "Services"). Second Kiss is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in relation to the collection, processing, and disclosure of your personal information.

By using the Services, you acknowledge you have read and understood this Privacy Policy. For the purposes of UK data protection law, Second Kiss Ltd is the data controller of your personal information.

1. Personal Information We Collect

We may collect the following categories of personal information, depending on how you interact with the Services:

  • Contact details — name, billing and delivery address, phone number, email address.
  • Financial information — payment card details, transaction details, and payment confirmation (processed via Shopify Payments and/or Klarna; we do not store full card numbers ourselves).
  • Account information — username, password, preferences and settings.
  • Transaction information — items viewed, added to basket or wishlist, purchased, returned, or cancelled.
  • Communications — anything you send us, e.g. customer support enquiries or return requests.
  • Device and usage information — IP address, browser/device details, and how you interact with the Services, collected via cookies and similar technologies (see Section 7).

2. Where This Information Comes From

  • Directly from you — creating an account, placing an order, contacting us.
  • Automatically — through your use of the Services, including cookies.
  • From our service providers — Shopify, payment processors, and delivery couriers acting on our behalf.
  • From Klarna, where you choose a Klarna payment option (see Section 5).

3. How We Use Your Information, and Our Legal Basis

Purpose Legal basis
Processing your order, payment, delivery, and coordinating with the relevant Seller Performance of a contract with you
Handling returns, refunds, and customer support Performance of a contract with you
Fraud prevention and account security Legitimate interests (keeping the Services and our customers safe)
Sending marketing communications Consent (where required) or legitimate interests, with an opt-out always available
Complying with legal or regulatory obligations (e.g. tax, consumer law) Legal obligation
Improving and tailoring the Services Legitimate interests

You can withdraw consent-based processing (e.g. marketing emails) at any time using the unsubscribe link, without affecting the lawfulness of processing carried out before withdrawal.

4. How We Disclose Your Information

We disclose personal information to:

  • Shopify, our e-commerce platform provider, which processes data to operate the Services on our behalf.
  • Payment processors, including Shopify Payments and Klarna (see Section 5), to process your payment.
  • Delivery couriers, to fulfil and track your order.
  • Professional advisers, regulators, or law enforcement, where required by law or to protect our legal rights.
  • A buyer, in the event of a business sale, merger, or restructuring of Second Kiss.

We do not sell your personal information to third parties for their own marketing purposes.

5. Klarna

If you choose to pay using a Klarna payment option (such as Pay in 3 or Pay Later) at checkout, we share relevant personal information with Klarna Bank AB (publ) — including your name, contact details, delivery address, and order/transaction details — so that Klarna can process your payment, carry out any required checks, and administer your payment plan.

Klarna acts as a separate data controller for this information once shared. Klarna's own privacy policy explains how it collects, uses, and protects your data, and is available at [Klarna's Privacy Policy]. 

6. Relationship with Shopify

The Services are hosted by Shopify, which processes personal information about your use of the Services in order to provide and improve them. Shopify may also use data from your interactions with our store, alongside other Shopify merchants, to provide enhanced features (such as fraud prevention and personalisation). In these circumstances, Shopify is responsible for that processing. You can learn more, and exercise relevant rights, via the Shopify Consumer Privacy Policy and the Shopify Privacy Portal. 

7. Cookies

We use cookies and similar technologies to operate the Services, remember your preferences, and understand how the Services are used. Some cookies are essential to the Services working; others (such as analytics or marketing cookies) are optional and require your consent. You can manage your cookie preferences at any time using the cookie banner displayed when you visit our site.

8. Third-Party Websites and Links

The Services may link to websites or platforms operated by third parties, including Sellers' own social media profiles. We are not responsible for the privacy practices of third-party sites — please review their own policies before providing information to them.

9. Children's Data

The Services are not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Security and Retention

We use appropriate technical and organisational measures to protect your personal information, but no method of transmission or storage is completely secure.

We retain personal information for as long as necessary for the purposes it was collected, including to maintain your account, provide the Services, resolve disputes, and comply with our legal obligations — for example, financial records are generally retained for 6 years to meet UK tax and accounting requirements, and order/customer data is generally retained for the duration of your account plus a reasonable period afterward, unless you request earlier deletion and we are not otherwise required to retain it.

11. Your Rights

As a UK resident, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate personal information.
  • Delete your personal information, in certain circumstances.
  • Restrict or object to our processing of your personal information for certain purposes.
  • Data portability — receive your data in a portable format, in certain circumstances.
  • Withdraw consent, where processing is based on consent.
  • Opt out of marketing communications, at any time, via the unsubscribe link in our emails.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before actioning a request. We will not discriminate against you for exercising your rights.

12. Complaints

If you have concerns about how we handle your personal information, please contact us first using the details below. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

13. International Transfers

Where we or our service providers transfer personal information outside the UK, we rely on recognised transfer mechanisms, such as the UK International Data Transfer Agreement or an adequacy decision by the UK government, to ensure your data remains protected.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last updated" date.

Contact

Questions about this Privacy Policy, or requests to exercise your rights, can be sent to hello@secondkiss.co.uk