Privacy policy

Last updated: 29 August 2026

At ("we", "us", "our", "kssan"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what data we collect when you visit www.kssan.com, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and other applicable laws.

1. Who We Are (Data Controller)

Phone: (+852) 67269352

For matters relating to your personal data, you can contact us at any time using the details above.

2. What Data We Collect

• Data you provide: name, email address, shipping and billing address, phone number, and order details when you place an order or create an account;
• Payment data: payments are processed by our payment providers (e.g. credit card processors and PayPal). We never receive or store your full card details;
• Data collected automatically: IP address, browser type and version, device information, pages visited, and referring URL, collected via cookies and similar technologies;
• Communications data: messages you send us via email or contact forms.

3. How We Use Your Data (Legal Bases)

• To fulfil your order (performance of a contract): processing your payment, shipping your goods, handling returns and refunds;
• To run our business (legitimate interests): fraud prevention, improving our website, and record-keeping required by law;
• To send you marketing emails (consent): only if you have actively opted in by ticking the newsletter box. You can withdraw consent at any time via the unsubscribe link in every email;
• To comply with legal obligations: tax, accounting, and consumer-protection requirements.

4. Cookies

We use strictly necessary cookies (e.g. shopping cart, session, and security cookies) which are essential for the website to function. We also use analytics and marketing cookies — but only after you give your consent via the cookie banner. You can change or withdraw your cookie preferences at any time through your browser settings or the cookie banner.

5. Sharing Your Data

We share personal data only with service providers necessary to run our store: payment processors, shipping carriers, email service providers, and IT/cloud hosting. These providers process data on our behalf under written agreements. We never sell your personal data. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards such as EU Standard Contractual Clauses are in place.

6. How Long We Keep Your Data

Order and accounting records are kept for the period required by applicable tax and commercial law (typically up to 10 years). Marketing consents are kept until you withdraw them. Other data is deleted when it is no longer necessary for the purpose it was collected for.

7. Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict or object to processing;
• Data portability;
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, simply email us at support@kssan.com. We will respond within one month. You also have the right to lodge a complaint with your national data protection authority.

8. Data Security

We use industry-standard measures including SSL/TLS encryption for all data transmitted between your browser and our website, and access controls limiting personal data to authorised staff only.

9. Children's Privacy

Our website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always published on this page with the "Last updated" date above.