Privacy policy
Last updated: 13th August 2026
KULORI respects your privacy and is committed to handling personal information responsibly, transparently and securely.
This Privacy Policy explains how we collect, use, store and share personal data when you:
- visit www.kulori.com;
- purchase from KULORI;
- contact us;
- subscribe to our communications; or
- otherwise interact with our online store.
This Privacy Policy is intended to operate in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Maltese data-protection legislation.
1. WHO IS RESPONSIBLE FOR YOUR DATA?
For the purposes of applicable data-protection law, the data controller is:
Trading name: KULORI
Email: info@kulori.com
Privacy enquiries: info@kulori.com
Website: www.kulori.com
2. PERSONAL DATA WE MAY COLLECT
Depending on how you interact with KULORI, we may collect the following categories of personal data.
Identity information
This may include:
- name;
- surname; and
- account details where an account is created.
Contact information
This may include:
- email address;
- telephone number;
- billing address;
- delivery address; and
- other contact information you provide.
Order and transaction information
This may include:
- products purchased;
- order number;
- order value;
- discounts;
- delivery method;
- transaction status;
- return and refund history; and
- communications concerning your order.
Payment information
Payments are processed through Shopify and/or authorised payment providers.
KULORI may receive limited payment-related information necessary to confirm and manage your transaction.
Full payment-card details are generally handled directly by the relevant authorised payment processor rather than being stored directly by KULORI.
Technical and device information
Depending on your device and consent choices, this may include:
- IP address;
- browser type;
- device type;
- operating system;
- approximate location derived from technical information;
- website activity;
- referring pages;
- cookie identifiers; and
-similar online identifiers.
Customer-service information
When you contact us, we may process:
- your messages;
- emails;
- WhatsApp communications;
- customer-service enquiries;
- photographs you send regarding products or deliveries; and
- information required to resolve your enquiry.
Marketing information
Where applicable, we may process:
- your marketing subscription status;
- communication preferences;
- interaction with marketing emails; and
- promotional preferences.
3. HOW WE COLLECT PERSONAL DATA
We may collect information:
Directly from you
For example when you:
- make a purchase;
- complete checkout;
- create an account;
- subscribe to marketing;
- contact us;
- submit a return request; or
- communicate with KULORI.
Automatically
Certain technical data may be collected when you browse our website through cookies and similar technologies, subject to your consent choices where consent is legally required.
From service providers
We may receive information from service providers used to operate our business, such as:
- Shopify;
- payment processors;
- delivery providers;
- analytics providers; and
- fraud-prevention or security providers.
4. WHY WE PROCESS YOUR INFORMATION
We process personal data only where we have a lawful basis to do so.
5. PROCESSING YOUR ORDERS
We process personal information to:
- accept and manage orders;
- process payments;
- send order confirmations;
- arrange production or sourcing where necessary;
- arrange delivery;
- communicate about your order;
- process returns and refunds; and
- provide customer support.
The primary lawful basis for this processing is that it is necessary to perform our contract with you or to take steps at your request before entering into a contract.
6. LEGAL AND ACCOUNTING OBLIGATIONS
We may process and retain certain information where necessary to comply with legal obligations, including:
- tax requirements;
- VAT obligations;
- accounting obligations;
- consumer-protection requirements;
- fraud prevention;
- regulatory requests; and
- legal claims.
The lawful basis is compliance with a legal obligation and, where applicable, our legitimate interests in establishing, exercising or defending legal claims.
7. CUSTOMER SERVICE
We process information you provide when contacting us so that we can answer enquiries, assist with orders, resolve complaints and provide after-sales support.
Depending on the enquiry, processing may be necessary for:
- performance of our contract;
- compliance with legal obligations; or
- our legitimate interest in providing effective customer service.
8. FRAUD PREVENTION AND WEBSITE SECURITY
We may process limited information where reasonably necessary to:
- detect suspicious activity;
- prevent fraudulent transactions;
- protect our customers;
- secure our website;
- prevent abuse; and
- protect KULORI's legal rights.
This processing is based on our legitimate interests in protecting our business and customers and, where relevant, compliance with legal obligations.
9. MARKETING COMMUNICATIONS
Where you subscribe to KULORI marketing, we may send you communications concerning:
- new arrivals;
- collections;
- collaborations;
- promotions;
- offers;
- product launches; and
- KULORI inspiration.
Where consent is legally required, we will send electronic marketing based on your consent.
Where applicable law permits communications to existing customers without separate prior consent, we may rely on the applicable legal basis while providing a clear opportunity to opt out.
You can unsubscribe at any time by:
- using the unsubscribe link in our marketing emails; or
- contacting us at info@kulori.com.
Withdrawing consent does not affect processing that took place lawfully before consent was withdrawn.
10. COOKIES AND SIMILAR TECHNOLOGIES
KULORI and our authorised service providers may use cookies and similar technologies.
These may include:
Strictly necessary cookies
These are required for the website to operate, for example to:
- remember your shopping basket;
- enable checkout;
- maintain website security; and
- provide essential functionality.
These cookies may be used without consent where legally permitted because they are necessary to provide the requested service.
Analytics cookies
These help us understand how customers use our website and improve performance.
Where legally required, analytics cookies will only be activated after you provide consent.
Marketing and advertising cookies
These may be used to measure advertising, understand campaign performance or personalise marketing.
Where legally required, these technologies will only be used after obtaining your consent.
You can manage your available cookie choices using the cookie or privacy controls provided on our website.
11. SHOPIFY
Our online store is hosted by Shopify.
Shopify provides the e-commerce infrastructure that enables KULORI to operate its website, checkout and order-management services.
When you interact with the store, certain personal information may therefore be processed by Shopify in connection with providing its services to KULORI.
Shopify may also process certain information under its own legal responsibilities and privacy terms where applicable.
12. PAYMENT PROVIDERS
When you make a purchase, your payment may be processed by an authorised third-party payment provider.
Information required to complete the payment may be shared directly with or collected directly by that provider.
Payment providers process information in accordance with applicable financial-services, security and data-protection requirements.
13. DELIVERY AND LOGISTICS PROVIDERS
Where necessary to fulfil your order, we may share relevant information with delivery, courier, freight or logistics providers.
Information shared may include:
- your name;
- delivery address;
- telephone number;
- email address;
- order or parcel reference; and
- delivery instructions.
We share only information reasonably necessary to arrange and complete delivery or collection.
14. SUPPLIERS AND BRAND PARTNERS
For certain products, it may be necessary to share limited order information with a supplier, artist, manufacturer or brand partner where this is required to:
- produce your order;
- customise an item;
- arrange fulfilment;
- resolve a product issue; or
- provide an authenticity-related service.
We limit information shared to what is reasonably required for the relevant purpose.
15. PROFESSIONAL SERVICE PROVIDERS
We may share information where necessary with professional advisers and service providers such as:
- accountants;
- legal advisers;
- IT providers;
- website providers;
- security providers; and
- other professional contractors.
They may only receive information reasonably necessary for the service they provide.
16. LEGAL DISCLOSURES
We may disclose personal information where reasonably necessary:
- to comply with applicable law;
- to respond to a lawful request from a competent authority;
- to establish, exercise or defend legal claims;
- to investigate fraud; or
- to protect the rights and safety of KULORI, our customers or others.
17. WE DO NOT SELL YOUR PERSONAL DATA
KULORI does not sell your personal data to third parties in the ordinary meaning of selling customer information for monetary payment.
Where advertising or analytics technologies involve data sharing that legally requires transparency or consent, we will handle such technologies in accordance with applicable EU and Maltese data-protection requirements.
18. INTERNATIONAL DATA TRANSFERS
Some of the technology and service providers used by KULORI may process personal data outside Malta or outside the European Economic Area.
Where personal data is transferred outside the EEA, appropriate safeguards required under the GDPR will be used where applicable.
These may include:
- an adequacy decision of the European Commission;
- approved Standard Contractual Clauses; or
- another lawful transfer mechanism recognised by the GDPR.
19. HOW LONG WE KEEP PERSONAL DATA
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, tax, accounting and consumer-protection obligations.
Retention periods depend on the type of information and why it is required.
For example:
- order and transaction records may be retained for applicable accounting and legal periods;
- customer-service correspondence may be retained where reasonably necessary to manage an order, dispute or legal claim;
-marketing information may be retained until you unsubscribe or withdraw consent, subject to limited suppression records required to respect your preference; and
- technical records may be retained for shorter periods appropriate to security and website operation.
When personal data is no longer required, we will delete, anonymise or securely dispose of it where reasonably practicable and legally appropriate.
20. DATA SECURITY
We use reasonable organisational and technical measures designed to protect personal information against:
- unauthorised access;
- loss;
- misuse;
- alteration;
- disclosure; and
- destruction.
No internet-based system can be guaranteed to be completely secure. However, we take reasonable measures appropriate to the nature of the information processed.
21. YOUR GDPR RIGHTS
Subject to the conditions and exceptions provided by law, you may have the right to:
- access personal data we hold about you;
- rectify inaccurate or incomplete personal data;
- erase your personal data in certain circumstances;
- restrict processing in certain circumstances;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- withdraw consent where processing is based on consent;
-receive certain personal data in a portable format where the right to data portability applies; and
-exercise rights relating to certain forms of automated decision-making, where applicable.
GDPR rights are subject to the conditions set out in applicable law and do not always require all information to be deleted immediately.
22. HOW TO EXERCISE YOUR RIGHTS
To exercise a data-protection right, contact:
Please provide enough information for us to identify you and understand your request.
We may need to verify your identity before providing or changing personal information.
We will respond within the time period required by applicable data-protection law.
23. RIGHT TO OBJECT TO DIRECT MARKETING
You have the right to object to the use of your personal data for direct marketing at any time.
You can:
-click “unsubscribe” in a marketing email; or
-contact info@kulori.com.
Once your request has been processed, we will stop sending the relevant direct marketing.
24. WITHDRAWING COOKIE CONSENT
Where a cookie or similar technology relies on your consent, you may withdraw or change that consent through the privacy or cookie controls available on our website.
Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.
25. CHILDREN'S PRIVACY
KULORI respects the enhanced protection given to children's personal data under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Data Protection Act (Chapter 586 of the Laws of Malta) and applicable Maltese data-protection legislation.
Our website and online store are primarily intended for adults and are not specifically directed at children.
If we become aware that a child's personal data has been processed without an appropriate lawful basis or required parental authorisation, we will take reasonable steps to delete, restrict or otherwise process the information in accordance with the GDPR.
Parents or guardians who believe that a child has provided personal information to KULORI inappropriately may contact info@kulori.com.
26. THIRD-PARTY WEBSITES
Our website may contain links to third-party websites or social-media platforms.
Those websites operate independently and may have their own privacy policies.
KULORI is not responsible for the privacy practices of third-party websites outside our control.
27. SOCIAL MEDIA
If you interact with KULORI through social-media platforms, the relevant platform may process your personal information independently under its own privacy terms.
Information you voluntarily send directly to KULORI through such platforms may also be processed by us for customer service, marketing enquiries or other purposes described in this Privacy Policy.
28. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
- changes to our services;
- new technology or providers;
- changes in how we process information; or
- changes to applicable law.
The latest version will be published on www.kulori.com with the updated revision date.
29. COMPLAINTS
If you have concerns about how KULORI processes your personal data, please contact us first at:
You also have the right, where applicable, to lodge a complaint with Malta's competent data-protection supervisory authority, the Information and Data Protection Commissioner (IDPC), or another competent supervisory authority under the GDPR.
30. CONTACT US
For privacy enquiries or requests concerning your personal data:
KULORI
Trading name: KULORI
Contact Form: https://kulori.com/pages/contact
Telephone / WhatsApp: +356 79023404
Email: info@kulori.com
Customer support: support@kulori.com
Sales: sales@kulori.com
Website: www.kulori.com
VAT number: MT24754509
Business address: Triq il-Fortizza, Pembroke, Malta