Privacy & Cookies Policy

Last updated: 21 July 2026

This Privacy & Cookies Policy explains how Hong Kong Netizen Limited, trading as Kidultverse® ("we", "us", "our"), collects, uses, shares and protects your personal data when you visit or place an order through www.kidultverse.com (the "Website"), and how we use cookies and similar technologies. It also explains your rights under UK data protection law and how to exercise them.

We are committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are

Hong Kong Netizen Limited is the "controller" responsible for your personal data. Our details are:

• Company name: Hong Kong Netizen Limited, trading as Kidultverse®
• Company number: 14243657 (registered in England & Wales)
• VAT number: GB429069967
• ICO registration number: ZB363165
• Registered office: 185 Cross Street, Sale, United Kingdom, M33 7JG
• Data protection contact: hiya@kidultverse.com

We are not required by law to appoint a Data Protection Officer, but you can contact us about anything in this policy, or about how we handle your personal data, at hiya@kidultverse.com.

2. About this policy

This policy applies to personal data we collect through the Website, through your orders and communications with us, and through cookies and similar technologies. Where the Website links to third-party websites, plug-ins or applications, those third parties have their own privacy policies and we are not responsible for them; we encourage you to read them.

The Website is intended for adults. Our products are sold to, and orders may only be placed by, persons aged 18 or over. We do not knowingly collect personal data relating to children. If you believe we have inadvertently collected such data, please contact us and we will delete it.

3. The personal data we collect

We may collect, use, store and transfer the following categories of personal data about you:

• Identity data – such as your first name, last name and title.
• Contact data – such as your billing address, delivery address, email address and telephone number.
• Order and transaction data – details of the products you have purchased or enquired about, order numbers, and details of payments to and from you.
• Payment data – payments are processed securely by our payment providers (Shopify Payments, PayPal and Klarna). We do not collect or store your full card details ourselves; we may receive limited information such as the card type, the last four digits and whether a payment succeeded or failed.
• Account and profile data – your username and password, orders placed by you, your preferences, wish lists, loyalty programme membership, and feedback or survey responses.
• Marketing and communications data – your preferences in receiving marketing from us, your communication preferences, and the content of messages you send us.
• Technical and usage data – your internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform, device information, and information about how you use the Website (pages viewed, products viewed, referral source and similar), collected largely through cookies (see Section 12).

We do not routinely collect any "special categories" of personal data about you (such as data revealing your health, race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, or biometric data), nor information about criminal convictions or offences.

If you do not provide personal data: where we need personal data to fulfil a contract with you (for example, to process and deliver your order) and you do not provide it, we may be unable to perform that contract and may have to cancel your order. We will notify you if this is the case at the time.

4. How we collect your personal data

We collect personal data:

• Directly from you – when you place an order, create an account, join our loyalty programme or mailing list, complete a form, contact us, or otherwise correspond with us.
• Automatically – as you interact with the Website, through cookies and similar technologies (see Section 12).
• From third parties – such as our payment providers (Shopify Payments, PayPal, Klarna), our couriers, and analytics and advertising providers, who may share order, delivery or interaction data with us.

5. How and why we use your personal data

Under UK data protection law, we must have a lawful basis for processing your personal data. We rely on the following bases: performance of a contract with you; compliance with a legal obligation; our legitimate interests (where these are not overridden by your rights); and your consent. The table below sets out how and why we use your data and the lawful basis we rely on.

Purpose	Categories of data	Lawful basis
To process and deliver your order, including taking payment, arranging delivery and handling returns and refunds	Identity, Contact, Order/Transaction, Payment	Performance of a contract with you
To manage your account, loyalty programme membership, wish list and preferences	Identity, Contact, Account/Profile	Performance of a contract; legitimate interests (running our services efficiently)
To manage our relationship with you, including notifying you about changes to our terms or this policy and responding to your enquiries	Identity, Contact, Marketing/Communications	Performance of a contract; legal obligation; legitimate interests
To keep accounting and tax records and comply with our legal and regulatory obligations	Identity, Contact, Order/Transaction, Payment	Legal obligation
To send you marketing communications about our products and offers	Identity, Contact, Marketing/Communications, Usage	Consent; or legitimate interests (the "soft opt-in" for existing customers – see Section 6)
To administer and protect our business and the Website, including troubleshooting, security, fraud prevention and system testing	Identity, Contact, Technical/Usage	Legitimate interests (running and securing our business); legal obligation
To use analytics to understand and improve the Website, our products and your experience	Technical/Usage	Consent (for non-essential analytics cookies – see Section 12)
To measure and deliver advertising, including on third-party platforms	Technical/Usage, Marketing/Communications	Consent (for advertising and targeting cookies – see Section 12)

We do not carry out automated decision-making that produces legal or similarly significant effects on you.

6. Marketing

We will only send you marketing communications by email where you have consented, or where you are an existing customer, we are marketing our own similar products, and you were given a clear opportunity to opt out when your data was collected and in every message (the "soft opt-in" permitted under PECR).

You can ask us to stop sending marketing at any time by clicking the "unsubscribe" link in any marketing email, updating your account preferences, or contacting us at hiya@kidultverse.com. Opting out of marketing will not affect the service messages we send in connection with an order (for example, order confirmations and delivery updates).

7. Who we share your personal data with

We do not sell your personal data. We share it only with the following categories of recipient, and only as necessary for the purposes set out above:

• Our e-commerce platform provider – Shopify, which hosts the Website and processes order and account data on our behalf.
• Payment providers – Shopify Payments, PayPal and Klarna, who process your payments securely.
• Delivery and logistics partners – couriers such as Royal Mail and DHL, who deliver your orders.
• Technology, email and marketing service providers – who help us operate the Website, our loyalty programme, email communications and customer service.
• Analytics and advertising providers – such as Google and Meta (Facebook/Instagram), used only in line with your cookie consent (see Section 12).
• Professional advisers – such as our accountants, auditors, insurers and lawyers, where necessary.
• Government bodies, regulators and law enforcement – including HM Revenue & Customs and customs authorities, where required by law (for example, to process cross-border shipments and comply with tax obligations).
• Purchasers of our business – if we sell, transfer or merge parts of our business or assets, in which case the recipient will be required to use your personal data in a manner consistent with this policy.

We require all third parties who process personal data on our behalf to respect its security and to act only on our instructions in accordance with the law.

8. International transfers

Some of our service providers (including Shopify and certain analytics and advertising providers) are based outside the United Kingdom, or store or process data outside the UK, including in the United States. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection by relying on one of the following safeguards: transferring to a country that the UK Government has deemed to provide an adequate level of protection; or using contracts approved for use in the UK, such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. You may contact us at hiya@kidultverse.com for more information about the safeguards in place.

9. How we keep your personal data secure

We have put in place appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful access, alteration, disclosure, loss or destruction. Payments are processed over encrypted connections by our payment providers. We limit access to your personal data to those who have a genuine business need to access it, and they are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected personal data breach and will notify you and the Information Commissioner's Office of a breach where we are legally required to do so.

10. How long we keep your personal data

We keep your personal data only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting, tax or reporting requirements. In general:

• We retain order and transaction records for at least 6 years after the end of the relevant financial year, to comply with HMRC and other legal requirements.
• We retain account and loyalty data for as long as your account remains active, and for a reasonable period afterwards.
• We retain marketing data until you unsubscribe or withdraw your consent, and for a short period afterwards to record your preference.

When your personal data is no longer required, we will securely delete or anonymise it.

11. Your rights

Under UK data protection law, you have the following rights in relation to your personal data:

• The right to be informed about how we use your personal data (as set out in this policy).
• The right of access – to request a copy of the personal data we hold about you.
• The right to rectification – to have inaccurate or incomplete data corrected.
• The right to erasure ("right to be forgotten") – to ask us to delete your personal data in certain circumstances.
• The right to restrict processing – to ask us to suspend the processing of your data in certain circumstances.
• The right to data portability – to receive the data you provided to us in a structured, commonly used, machine-readable format, or to have it transferred to another controller.
• The right to object – to object to our processing based on legitimate interests, and to object at any time to processing for direct marketing.
• Rights in relation to automated decision-making and profiling – although we do not carry out such processing in a way that produces legal or similarly significant effects.
• The right to withdraw consent at any time, where we rely on your consent to process your data. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

To exercise any of these rights, please contact us at hiya@kidultverse.com. You will not usually have to pay a fee, and we aim to respond to all legitimate requests within one month. We may need to request specific information from you to help us confirm your identity.

Your right to complain: if you are unhappy with how we have handled your personal data, we would ask you to contact us first so we can try to resolve the matter. You also have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

• Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113
• Website: ico.org.uk

12. Cookies Policy

This section explains how we use cookies and similar technologies on the Website.

What are cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, or work more efficiently, as well as to provide information to the website owner. Similar technologies (such as pixels, tags and local storage) work in a comparable way. In this section we refer to all of these as "cookies".

How we use cookies

We use cookies to operate the Website and your shopping basket, to remember your preferences, to keep the Website secure, to understand how the Website is used, and – where you consent – to measure and deliver advertising. We group cookies into the following categories:

• Strictly necessary cookies – required for the Website to function, such as maintaining your session, your shopping basket and secure checkout. These cannot be switched off in our systems and do not require consent.
• Functional / preference cookies – remember choices you make, such as your region, language or login, to provide enhanced, more personal features.
• Analytics / performance cookies – help us understand how visitors use the Website (for example, which pages are visited most) so we can improve it. These are set only with your consent.
• Marketing / targeting cookies – used to deliver advertising relevant to you and to measure the effectiveness of advertising campaigns, including on third-party platforms. These are set only with your consent.

Your consent

When you first visit the Website, we ask for your consent to set non-essential cookies (functional, analytics and marketing cookies) through our cookie banner. Strictly necessary cookies are set automatically because the Website cannot work without them. You can change or withdraw your consent at any time using the cookie settings or the "Your Privacy Choices" link on the Website, or by adjusting your browser settings as described below.

Examples of the cookies we use

Because our Website runs on Shopify, certain essential cookies are set to make the store and checkout work. The table below lists common examples. The exact cookies set may vary over time and depending on your interactions and consent choices.

Cookie	Category	Purpose	Typical duration
_shopify_essential / _secure_session_id	Strictly necessary	Manages your secure session and enables core store functionality	Session / up to 24 hours
cart, cart_ts, cart_ver	Strictly necessary	Remembers the contents of your shopping basket	Up to 2 weeks
secure_customer_sig	Strictly necessary	Keeps you securely logged in to your account	Up to 1 year
_tracking_consent, _cmp_a	Strictly necessary	Stores your cookie and tracking consent preferences	Up to 1 year
localization	Functional / preference	Remembers your country/region selection	Up to 1 year
_shopify_y, _shopify_s	Analytics / performance	Helps us understand how visitors use the Website	Session to 1 year
_ga, _gid (Google Analytics)	Analytics / performance	Measures Website usage where you have consented	Session to 2 years
_fbp and similar (Meta) / advertising cookies	Marketing / targeting	Measures and delivers advertising where you have consented	Session to 1 year

Managing cookies through your browser

Most web browsers allow you to control cookies through their settings. You can set your browser to block or delete cookies, or to alert you when cookies are being set. Please note that if you block strictly necessary cookies, parts of the Website (such as the basket and checkout) may not work correctly. For more information about cookies and how to manage them, visit www.aboutcookies.org or your browser's help pages.

13. Third-party links

The Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave the Website, we encourage you to read the privacy policy of every website you visit.

14. Changes to this policy

We may update this Privacy & Cookies Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this policy and, where appropriate, notify you. We encourage you to review this policy periodically.

15. How to contact us

If you have any questions about this Privacy & Cookies Policy or about how we handle your personal data, or if you would like to exercise any of your rights, please contact us:

• Email: hiya@kidultverse.com
• Post: Data Protection, Hong Kong Netizen Limited, 185 Cross Street, Sale, United Kingdom, M33 7JG