Privacy Policy

Privacy Policy
Last Updated: 29 July 2025

At By Kenna ("we", "our", or "us"), safeguarding your privacy is a priority. This Privacy Policy outlines the way we collect, handle, and protect your personal data when you visit our website (https://bykenna.com/), browse its content, place an order, or otherwise engage with our online store and related services (collectively referred to as the “Services”).

In this notice, the terms “you” and “your” refer to any individual accessing or using our Services — whether as a customer, casual browser, or any other type of user from whom we may collect or process personal information.

We recommend that you read through this Privacy Policy in full to gain a clear understanding of how we deal with your personal data.

Updates to This Privacy Policy

Occasionally, we may revise this Privacy Policy to reflect changes in our business practices, legal obligations, or how we manage personal data. Whenever such updates are made, we will:

• Post the amended version on our website
• Modify the “Last Updated” date shown above
• Inform users as required by law (for example, through email notifications or notices on the site)

What Personal Data We Collect and Why

We obtain your personal information through a combination of direct contact, automated tools (like cookies), and trusted third-party services. This enables us to provide a more tailored, efficient, and seamless experience across our Services.

Information You Provide Directly

This includes the personal details you voluntarily submit when using features on our website, such as:

• Your full name, email address, and contact number
• Invoicing and delivery addresses
• Login credentials if you create an account
• Payment information (handled securely via our authorised payment processors)
• Correspondence sent via our customer service channels, including feedback

Some of this data is necessary for our site to function as intended. Without it, certain features—like the checkout process—may not be available to you.

Information We Collect Automatically

When you navigate our website, certain information may be gathered automatically, such as:

• Your IP address and device-related details
• Browser type and version in use
• Approximate geographical location
• How you interact with the website (e.g., pages viewed, time spent, and click activity)

This information is collected through cookies and similar tracking technologies and is used to optimise website performance and enhance your overall browsing experience.

Information from Third Parties

We may receive data about you from trusted partners such as:

• Payment processors (e.g. billing confirmation)
• Delivery services (e.g. shipping updates)
• Analytics and advertising tools
• E-commerce platforms (such as Shopify, which powers our store)

We only collect what is necessary and ensure it is handled in line with this policy.

How We Use Your Data

We use personal data for the following purposes:

1. To Provide Products and Services

We may use your personal data for various essential functions, including:

• Processing and completing your purchases
• Handling payments in a secure manner
• Managing returns and issuing refunds
• Sending you order confirmations and delivery notifications
• Administering customer profiles and saved preferences

Legal Ground: These actions are carried out as part of our contractual obligations with you.

2. For Marketing and Communications

If you have chosen to opt in, we may reach out to you with the following:

• Exclusive deals, promotional messages, and service announcements via email or SMS
• Tailored suggestions based on your preferences or browsing behaviour
• Newsletters and updates related to our brand or offerings

You can opt out of these communications at any time by following the unsubscribe link or instructions provided in each message.

Legal Basis: Your consent, or our legitimate interest in informing you about our services and growing our customer base.

3. To Ensure Security and Prevent Fraud

We may use your data to monitor suspicious activity, protect user accounts, and investigate potential fraud.

Legal basis: Legitimate interest in platform security

4. To Improve Our Website and Services

We regularly assess how visitors interact with our website and services — including browsing behaviour, feedback, and support requests — to refine functionality, enhance product offerings, and deliver a better overall experience.

Legal Basis: Our legitimate interest in optimising user experience and improving service quality.

Cookies

We use cookies to support the smooth functioning of our website and to tailor your experience. These small data files may:

• Keep track of items you've added to your cart
• Store your preferences for future visits
• Provide insight into how visitors navigate and use our site
• Deliver relevant advertisements via third-party platforms such as Meta and Google

You can manage cookie settings via your browser. Disabling cookies may limit certain features. For details on cookies used by Shopify, visit Shopify’s Cookie Policy.

How We Share Your Information

We only disclose your personal data when it is necessary to do so, and always in a way that respects your privacy.

1. Sharing with Trusted Service Providers

We collaborate with select partners who help us run our website and services efficiently. These include:

• Payment processors

• Logistics and shipping providers

• Hosting platforms and IT infrastructure services

• Marketing and web analytics providers

Each of these third parties is contractually bound to handle your information securely and is only permitted to use it for the purposes specified in our agreement with them.

2. Sharing with Advertising and Marketing Partners

Where you have provided consent, we may share limited information with advertising and email marketing partners who help us deliver tailored promotions or personalised campaigns.

3. With Your Explicit Consent

There may be occasions where we share information at your request — for instance, when linking your account with social media platforms or performing actions you've directly authorised.

4. Within Our Group of Companies

Your personal data might also be shared with other entities within our business group. This is done to support internal operations, provide customer service, or carry out other legitimate business functions.

Your Rights Under the GDPR

If you are based in the United Kingdom, a European Union member state, or within the European Economic Area, you are entitled to exercise the following data protection rights under the General Data Protection Regulation (GDPR):

• Right of Access
  You have the right to request a copy of the personal data we hold about you, as well as details on how we use it.
• Right to Rectification
  If any of your information is incomplete or inaccurate, you may ask us to correct or update it.
• Right to Erasure
  In certain cases, you can request that we permanently delete your personal data — for example, if it is no longer necessary for the purpose for which it was collected. Please note, this is subject to any legal obligations we may have to retain certain data.
• Right to Restrict Processing
  You may ask us to limit the way we use your information, particularly if you contest its accuracy or object to the processing.
• Right to Object
  You can object to the processing of your data where we rely on legitimate interests or if your data is being used for direct marketing purposes.
• Right to Data Portability
  You have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that we transmit this data to another data controller where feasible.
• Right to Lodge a Complaint
  If you believe your data protection rights have been infringed, you have the right to file a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

To exercise your rights or raise a concern, please contact us:

Email: info@bykenna.com

We aim to respond within one month of receiving your request, in accordance with GDPR guidelines.

5. Legal and Business Disclosures

We may disclose your personal data in specific circumstances that are legally or commercially necessary:

• If we become involved in a corporate transition such as a merger, acquisition, asset sale, or restructuring process.

• When required by law, regulation, court order, or official request from government or law enforcement bodies.

• To safeguard our legal interests, ensure the safety of users, or investigate potential fraud, abuse, or breach of our Terms of Service.

---

Categories of Personal Data We May Share

To operate effectively and deliver our services, By Kenna may share certain types of personal data with carefully selected partners. These disclosures are strictly aligned with the intended purposes described earlier in this policy.

We only share sensitive information where absolutely necessary and always with your explicit consent. This information is never used to draw conclusions or make decisions about you without your knowledge.

Marketing and Advertising

With your prior consent, we may share selected personal data with advertising and marketing partners to tailor promotional messages or serve you personalised advertisements across various platforms. You always retain the right to withdraw this consent by contacting us directly or by adjusting your cookie preferences.

Third-Party Websites and External Links

Our website may feature links to websites operated by third parties, which are outside the control of By Kenna. Once you navigate away from our platform, this Privacy Policy no longer governs your activity. We are not responsible for the privacy standards, practices, or content of these external websites.

We advise you to review the privacy notices of any external platforms you visit before providing them with your personal data. Additionally, please be mindful that any content or information shared on public forums — such as social media or open comment sections — may become publicly accessible and is beyond our control.

Please note: the inclusion of a link to a third-party site does not constitute our endorsement or recommendation, unless we have explicitly stated otherwise.

Children’s Privacy

By Kenna does not knowingly collect or store personal data from individuals under the age of 16. Our services are not intended for children, and we do not permit their use by anyone under the age of digital consent as defined by local law.

If you believe a child has submitted personal information without parental consent, please contact us at info@bykenna.com. We will take appropriate action to delete the data in accordance with our legal obligations.

As of the date of this policy, we do not knowingly sell or share personal data belonging to anyone under the age of 16.

Security and Data Retention

We take your privacy and the protection of your data seriously. Although no online system can ever be completely secure, we apply both technical and organisational safeguards to help ensure your personal information is protected against unauthorised access, loss, misuse or alteration.

Please note that any data sent over the internet — including emails — may not be entirely secure. For that reason, we advise against sharing sensitive details via unencrypted communication channels.

We only retain your personal data for as long as necessary to fulfil the following:

• Completing and delivering your orders
• Managing your user account
• Providing ongoing customer support
• Meeting our legal and regulatory obligations
• Resolving any disputes and enforcing our policies

After this period, your data is either securely erased or anonymised to prevent further identification.

Your Privacy Rights

Depending on your location and the data protection laws that apply to you, you may be entitled to exercise the following rights regarding your personal information:

• Right of Access
  You can request a copy of the personal data we hold about you, along with details on how we use it.
• Right to Correction
  If any of the information we have about you is inaccurate or incomplete, you have the right to ask us to amend it.
• Right to Erasure
  You may request the removal of your personal data, provided this does not conflict with our legal or contractual obligations.
• Right to Data Portability
  You are entitled to receive your personal data in a commonly used, machine-readable format, or to have it transferred to another controller.
• Right to Restrict Use
  You can ask us to limit the way we process your data under certain circumstances.
• Right to Object
  You may object to the processing of your data, including for purposes such as direct marketing or profiling.
• Right to Withdraw Consent
  Where we rely on your consent to process personal data, you may withdraw that consent at any time.
• Right to Opt Out of Targeted Ads or Sharing
  You may opt out of personalised advertisements or the sharing of your data where applicable. If your browser supports Global Privacy Control (GPC) and it’s activated, we will treat this as a valid opt-out for that browser and session.
• Right to Appeal a Denied Request
  If we decline your request, you have the right to challenge that decision by responding to our communication.
• Right to Manage Marketing Communications
  You can opt out of marketing emails at any time by clicking the unsubscribe link provided. However, you will still receive messages that are essential for your orders or account.

Exercising Your Rights

If you wish to exercise any of your data protection rights, you can submit a request by emailing us at info@bykenna.com. In some cases, we may need to verify your identity before we are able to process your request. This may include confirming your email address, order details, or other relevant information.

You have the option to appoint a representative to submit a privacy-related request on your behalf. In such cases, we may require written documentation confirming their authority to act for you. Please note that even with authorisation, we may still need to verify your identity directly before fulfilling the request.

We will respond to your request within the timeframes set by applicable data protection laws. Exercising your rights will not affect your access to our services, and we will not discriminate against you for doing so.

Complaints

If you have any concerns or complaints about how we handle your personal information, we encourage you to contact us directly at info@bykenna.com. We take privacy seriously and aim to address all concerns fairly and promptly.

If you are not satisfied with our response, you may have the right to appeal the outcome of your request. In addition, depending on your location, you may be entitled to lodge a formal complaint with your local data protection authority.

For individuals in the European Economic Area (EEA), you can find a list of national supervisory authorities at:
https://edpb.europa.eu/about-edpb/board/members_en

International Data Transfers

If you are accessing our services from outside the country where our operations are based, please note that your personal data may be transferred to and processed in other jurisdictions. These transfers may involve storage or handling by our staff, service providers, or business partners in regions where local data protection rules may differ from those in your home country.

For users located in the United Kingdom or within the European Economic Area (EEA), we apply appropriate safeguards to ensure that your data remains protected in accordance with applicable privacy laws when it is transferred beyond these territories. Such measures may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The UK’s International Data Transfer Agreements (IDTAs) or relevant Addendums
• Reliance on adequacy regulations issued by the UK Government or the European Commission for certain jurisdictions

By continuing to use our website and services, you acknowledge and agree that your personal data may be transferred and stored outside your country of residence, under the conditions described in this Privacy Policy.

Contact information

Any questions or just like to talk to us? Please don't hesitate to contact us via:

E-mail address: info@bykenna.com
Phone number: 0141 255 0756
Contact form: Contact page

We thrive to respond within 24 hours during our opening hours.

Business name: By Kenna
Address:  158 Kilmarnock Road, Glasgow, G41 3PG, United Kingdom

Customer service available hours

Operating Hours (Monday to Friday):
09:00 AM to 18:00 PM (GMT+1 London)
Operating Hours (Saturday to Sunday):
10:00 AM to 16:00 PM (GMT+1 London)