Privacy policy

This Privacy Policy explains how Korra Green collects, uses, stores and shares personal information when you:

  • visit korragreen.co.uk;
  • place an order;
  • create or use a customer account;
  • subscribe to our marketing;
  • contact us;
  • enter a promotion; or
  • otherwise interact with Korra Green.

Who we are

The controller responsible for your personal information is:

Trading name: Korra Green
Correspondence address: The Workshop, 32-40 Tontine St, Folkestone CT20 1JU
Email: info@korragreen.com

In this policy, “Korra Green”, “we”, “us” and “our” refer to the business identified above.

Personal information we collect

Depending on how you interact with us, we may collect:

Contact information

  • name;
  • email address;
  • telephone number;
  • billing address; and
  • delivery address.

Order and transaction information

  • products ordered;
  • order value;
  • payment status;
  • discounts used;
  • delivery information;
  • returns, refunds and exchanges;
  • correspondence about your order; and
  • information needed to prevent fraud.

Payments are processed by payment providers made available through Shopify. We do not generally receive or retain your complete payment-card number.

Account information

Where customer accounts are available, we may process:

  • account email;
  • account login details;
  • order history; and
  • saved preferences.

Communications

We collect information that you provide when you:

  • email or message us;
  • submit a contact form;
  • request customer support;
  • make a complaint;
  • submit a review; or
  • interact with us through social media.

Website and device information

When you use the website, we and our service providers may collect:

  • IP address;
  • browser and device type;
  • approximate location derived from your IP address;
  • pages visited;
  • products viewed;
  • referring website;
  • interactions with the website;
  • cookie identifiers; and
  • technical and diagnostic information.

Marketing information

Where applicable, we may collect:

  • whether you have subscribed to email marketing;
  • your marketing preferences;
  • whether marketing emails were delivered, opened or clicked; and
  • interactions with our adverts or social-media content.

How we obtain personal information

We obtain information:

  • directly from you;
  • automatically through cookies and similar technology;
  • from Shopify and our payment providers;
  • from delivery and fulfilment providers;
  • from fraud-prevention and security providers;
  • from marketing and analytics services;
  • from social-media platforms where you interact with us; and
  • from other parties where you have authorised them to share it.

How and why we use personal information

UK data-protection law requires us to have a lawful basis for using personal information.

To process and fulfil orders

We use information to:

  • accept payment;
  • confirm orders;
  • make and pack products;
  • deliver orders;
  • provide tracking;
  • handle cancellations, returns, refunds and exchanges; and
  • communicate about transactions.

Lawful basis: performance of our contract with you and compliance with legal obligations.

To provide customer support

We use information to:

  • respond to enquiries;
  • resolve delivery or product issues;
  • handle complaints;
  • confirm product suitability; and
  • maintain a record of customer service.

Lawful basis: performance of our contract and our legitimate interest in providing effective customer service.

To operate and improve our business

We may use information to:

  • understand sales and website use;
  • manage stock;
  • improve products and website content;
  • troubleshoot technical issues;
  • maintain business records; and
  • understand business performance.

Lawful basis: our legitimate interests in operating and improving Korra Green.

To protect the business and customers

We may use information to:

  • detect and prevent fraud;
  • investigate suspicious activity;
  • protect website security;
  • enforce our terms; and
  • establish, exercise or defend legal claims.

Lawful basis: our legitimate interests and compliance with legal obligations.

To comply with law

We retain and use certain information for tax, accounting, consumer-protection, regulatory and legal purposes.

Lawful basis: compliance with legal obligations.

Marketing

Where you subscribe, we may send email marketing about products, launches, plant-care content, offers and Korra Green news.

Lawful basis: consent, or another lawful basis where permitted.

You can unsubscribe at any time by:

Unsubscribing from marketing does not stop essential communications about an order.

Cookies

We use cookies and similar technology to:

  • operate the website;
  • remember selections and preferences;
  • support the basket and checkout;
  • keep the website secure;
  • understand website use; and
  • support analytics and marketing where consent is required and obtained.

You can manage non-essential cookies through the cookie-preference tool on our website.

You can also restrict cookies through your browser, although doing so may prevent parts of the website from working properly.

For information about cookies used by Shopify, please consult Shopify’s cookie information through its official website.

Who we share personal information with

We may share relevant information with trusted providers that help us operate the store, including:

  • Shopify, which hosts and supports the online store;
  • payment processors;
  • delivery companies;
  • email and customer-communication services;
  • website hosting, security and technical providers;
  • analytics and marketing providers, subject to cookie and consent requirements;
  • professional advisers such as accountants, insurers or legal advisers;
  • public authorities where required by law; and
  • fraud-prevention or law-enforcement bodies where reasonably necessary.

These organisations receive only the information needed to provide their services or meet legal requirements.

We do not sell your personal information.

Shopify

Our store is hosted by Shopify.

Shopify processes personal information to provide its ecommerce platform, checkout, account, security and related services.

Depending on how you use the site, Shopify may process information as our service provider and may also process certain information for its own purposes under its own privacy notices.

International transfers

Some of our service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate legal safeguard is used, such as:

  • a UK adequacy regulation;
  • approved contractual clauses; or
  • another safeguard permitted by data-protection law.

How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, fraud-prevention and dispute-resolution requirements.

Typical retention periods may include:

  • order and financial records: generally up to six years after the relevant accounting period, or longer where legally required;
  • customer-service correspondence: for as long as reasonably needed to resolve the matter and maintain appropriate records;
  • customer accounts: while the account remains active and for a reasonable period afterwards;
  • marketing information: until you unsubscribe or we determine that the information is no longer needed;
  • cookie and analytics information: according to the relevant cookie or provider retention period; and
  • legal claims: for the applicable limitation period.

We may retain limited information to record that you have opted out of marketing.

Security

We use reasonable organisational and technical safeguards designed to protect personal information.

No internet or storage system can be guaranteed completely secure. Please use a strong, unique password for any customer account and do not share it with others.

Contact us immediately if you believe your account or information has been compromised.

Your rights

Depending on the circumstances, you may have the right to:

  • request access to your personal information;
  • request correction of inaccurate information;
  • request deletion of information;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw consent at any time;
  • request transfer of certain information in a portable format; and
  • complain to the Information Commissioner’s Office.

These rights are not absolute and may be subject to legal exceptions.

To exercise a right, email info@korragreen.com. We may need to verify your identity before completing the request.

Complaints

Please contact us first if you have concerns about how we use personal information. We would like the opportunity to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office.

Children

Our website and products are not directed specifically at children, and we do not knowingly collect personal information directly from children for the purpose of selling to them.

If you believe a child has provided personal information without appropriate permission, contact us.

Third-party websites

Our website may link to third-party websites or social-media platforms.

Those organisations control their own privacy practices. We recommend reading their privacy policies before providing them with personal information.

Changes to this policy

We may update this policy when our services, systems or legal obligations change.

The latest version will be published on this page with an updated revision date.

Contact us

For privacy questions or requests, contact:

Korra Green
Email: info@korragreen.com
Address: The Workshop, 32-40 Tontine St, Folkestone CT20 1JU