Privacy policy

Last updated: 10 September 2026

Kelmera runs this store from the United States. This policy explains what personal information we collect when you browse or buy from us, why we hold it, who else sees it, and what you can ask us to do about it.

Our store runs on Shopify, so Shopify processes information alongside us. That relationship is set out further down.

If anything here conflicts with our Terms of Service, this policy governs anything to do with personal information.

What We Collect

What we hold depends on whether you are browsing, ordering, or writing to us.

  • Contact details. Name, email, phone, billing address and shipping address.
  • Payment information. Card and payment details are handled by our payment processor. We see the transaction, the amount, the last few digits and whether it succeeded. We never see or store your full card number.
  • Order information. What you looked at, what went in your cart, what you bought, returned or cancelled.
  • Account information. If you create an account, your login details and saved preferences.
  • Messages. Information you send us by email or through the contact form.
  • Device and usage information. Your IP address, browser, device type, and how you move through the site.

Where It Comes From

  • From you, when you order, write to us, or create an account.
  • Automatically, through cookies and similar technology as you use the site.
  • From the service providers we use to run the store.

Session Recording and Analytics

We use Microsoft Clarity to understand how visitors use our store through clicks, scrolling, page navigation, session replays and heatmaps. This helps us improve the site and identify confusing pages.

Clarity uses cookies and similar technologies, including identifiers that can link visits from the same browser. These identifiers are pseudonymous, meaning they are not your name, but the data is not necessarily anonymous. Clarity masks text entered into form fields by default.

Microsoft also processes data collected through Clarity. Its cookies may be used for analytics, advertising and other operational purposes. See the Microsoft Privacy Statement for details.

Available privacy controls depend on your location and applicable law. See Your Rights below to manage eligible data-sharing choices or contact us with a privacy request. Opting out of data sharing does not necessarily stop all analytics or essential processing.

Why We Use It

  • To sell you things and get them to you. Taking payment, fulfilling the order, arranging shipping, handling returns and exchanges, and keeping you posted on the order.
  • To answer you. Customer support, and following up on anything you ask.
  • To improve the store. Understanding which pages work and which do not.
  • Marketing, if you have asked for it. Every marketing email has an unsubscribe link and we honour it.
  • Security and fraud prevention. Verifying payments and spotting suspicious activity.
  • Legal reasons. Complying with the law, responding to valid legal requests, and enforcing our terms.

Who Else Sees It

We do not sell your personal information for money. We do share it where the business cannot run otherwise:

  • Shopify, who host the store and process orders.
  • Payment processors, who handle the transaction itself.
  • Our fulfilment partners, the third-party logistics companies who hold stock and pack your order. Some are outside the United States, so your name and delivery address travel with the order.
  • Carriers, being USPS, UPS, FedEx or DHL, who need the delivery address.
  • ParcelPanel, our order tracking provider, which receives order and tracking numbers.
  • Microsoft Clarity, as described above.
  • Professional advisers and authorities, where the law requires it or in connection with a sale or restructuring of the business.

Some of this counts as "sharing" under certain US state laws even though no money changes hands. Where applicable, use Your privacy choices to opt out of eligible data sharing. The controls available on that page depend on your location. If the page does not offer a control, email hey@kelmera.com with your request.

Our Relationship with Shopify

The store is hosted by Shopify, which collects and processes information about your use of it in order to run and improve the service. That information may be transmitted to Shopify and to third parties in countries other than the one you live in.

Shopify also offers enhanced features built on data gathered across its merchants. Where Shopify uses your information for those purposes, Shopify is the controller and handles requests about it directly. See the Shopify Consumer Privacy Policy, and the Shopify Privacy Portal to exercise rights over data Shopify holds.

Links to Other Sites

We sometimes link out. Once you leave our store, the other site's privacy terms apply and not ours. We cannot vouch for the security or accuracy of sites we do not run.

Children

This store is not intended for children and we do not knowingly collect information about anyone under the age of majority where they live. If your child has given us their details, write to us and we will delete them. As of the date above we have no knowledge of selling or sharing the personal information of anyone under 16.

Security and How Long We Keep Things

We take reasonable steps to protect your information, but no system is perfectly secure and information sent over the internet can never be guaranteed safe in transit. Please do not send us sensitive details over insecure channels.

We keep personal information for as long as we need it to run your account, complete your order, meet legal and tax obligations, and resolve any dispute. After that it is deleted or anonymised.

Your Rights

Depending on where you live, you may be able to ask us to:

  • Tell you what we hold about you, and give you a copy.
  • Delete it.
  • Correct it, if it is wrong.
  • Send it on, to you or to another provider, in a portable format.
  • Stop sharing it for targeted advertising. Use Your privacy choices.

These rights are not absolute and in some cases the law allows us to decline. We will always tell you why.

Global Privacy Control. Where required by applicable law, a recognized Global Privacy Control (GPC) signal is treated as a request to opt out of sale or sharing for the browser and device sending it. This does not stop processing needed to operate the store or fulfill orders. If you need help exercising a privacy choice, email hey@kelmera.com. We do not act on other "Do Not Track" signals.

Marketing email. Unsubscribe from any marketing message and we will stop. We will still send messages about orders you have placed, because you need those.

To exercise any of this, write to hey@kelmera.com. We may need to confirm who you are first. You can use an authorised agent, but we will ask for proof that you appointed them. We will not treat you differently for asking.

For data held by Shopify rather than by us, see privacy.shopify.com.

Complaints

Write to us first and we will try to sort it out. If you are not satisfied you may be able to appeal to us again, or take the complaint to your local data protection authority, depending on where you live.

Sending Data Abroad

Because our fulfilment partners operate outside the United States, some information is processed abroad. If we ever transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses, or the UK equivalent, unless the destination country has been found to offer adequate protection.

Changes

We may update this policy as our practices change or the law requires. The revised version goes up on this page with a new date at the top, and we will give notice where the law says we must.

Contact

For questions about this Privacy Policy or to make a privacy request, contact Kelmera using the details below.

Business contact address:
Kelmera
118 Pierrepont St
Brooklyn, NY 11201
United States

Customer support hours:
Monday to Friday: 9:00 AM to 6:00 PM Eastern Time (ET)
Saturday and Sunday: 11:00 AM to 3:00 PM ET

We aim to acknowledge inquiries within 24 hours on business days. The time needed to complete a privacy request depends on the request and applicable law.