Last updated: August 2026

At Kivbow, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

2. Personal Data We Collect

We collect the following categories of personal data:

2.1 Information you provide directly:

• Contact information: email address, name (for billing)
• Billing information: name, country, address, phone number (for payment processing)
• Social media usernames: Instagram, TikTok, or Facebook usernames you enter for service delivery
• Communication data: messages you send to our support team

2.2 Information collected automatically:

• Technical data: IP address, browser type, device information, operating system
• Usage data: pages visited, time spent on site, referral source
• Transaction data: order history, payment status (we do not store full card numbers)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: Processing is necessary to fulfill your orders and provide our services
• Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time)
• Legitimate interests: For fraud prevention, security, and improving our services
• Legal obligations: To comply with accounting, tax, and other legal requirements

4. Your Rights

Under data protection laws, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): You can request deletion of your personal data under certain conditions
• Right to restriction: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a structured, machine-readable format
• Right to object: You can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at support@kivbow.com. We will respond to your request within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant data protection supervisory authority in your country.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order and transaction data: 5 years (for accounting and legal compliance)
• Email and contact data: Until you request deletion or unsubscribe
• Support communications: 2 years after the last interaction
• Technical logs (IP, browser): 12 months
• Cookie consent preferences: 12 months

After the retention period expires, your data is securely deleted or anonymized.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our site.

6.1 Types of cookies we use:

• Essential cookies: Required for the website to function (e.g., session management, shopping cart). Cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics). Used only with your consent.
• Functional cookies: Remember your preferences (e.g., language, email). Used only with your consent.

6.2 Managing cookies:

When you first visit our website, you will see a cookie banner where you can choose to accept all cookies or only essential ones. You can also manage cookies through your browser settings at any time. Note that disabling certain cookies may affect website functionality.

7. Sharing Your Data

We may share your personal data with:

1. Payment processors: HiPay, Paynet, and other payment providers to process your transactions securely. They act as independent data controllers for payment data.
2. Service providers: Third-party vendors who help us deliver services (e.g., email providers, hosting). They process data only on our instructions.
3. Legal authorities: When required by law, court order, or to protect our legal rights.

We do not sell your personal data to third parties for marketing purposes.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequate data protection laws
• Binding corporate rules or other approved mechanisms

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data in transit
• Secure payment processing (we never store full card numbers)
• Access controls and authentication
• Regular security assessments

10. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data protection rights, or have concerns about how we handle your data, please contact us:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.