Privacy policy

Last updated: 21 September 2026

This policy explains what personal data KIDWEST collects when you visit www.kid-west.com, buy from us or hear from us, why we collect it, who we share it with and what rights you have over it.

Who we are

KIDWEST is a trading name of Kid From The West Ltd, a company registered in England and Wales.

Registered address: 3806, 7 Bankside Boulevard, Manchester, England, M3 7HN
Company number: 14871376
VAT registration number: 522 9921 81
Email: info@kidfromthewest.com

We are the data controller for the personal data described in this policy. That means we decide why and how it is used, and we are responsible for looking after it.

The data we collect

Information you give us

Identity and contact details: your name, email address, delivery and billing address, and phone number where you provide one.
Order details: the items you buy, sizes, order value, currency, discount codes used, and your order history.
Account details: if you create an account, your login details and saved addresses.
Payment details: see Payments. We never see or store your full card number.
Messages: anything you send us by email, contact form or social media, and our replies.
Marketing preferences: whether you have asked to hear from us, and what you have opened or clicked.
Reviews: anything you choose to publish about us, for example on Trustpilot.

Information we collect automatically

Device and usage data: your IP address, browser and operating system, the pages you view, what you search for, what you add to your bag, and the site or advert that sent you to us.
Location: an approximate country worked out from your IP address, so we can show you the right currency, delivery options and duties information.
Cookies and similar technologies: see Cookies.

Information stored only on your device

Some features work without sending anything to us. Your wishlist is saved in your own browser's local storage and is never transmitted to our servers, so it is only visible on the device you saved it on and is cleared when you clear your browsing data.

Why we use it, and our lawful basis

Under UK GDPR we must have a lawful basis for using your personal data. Ours are:

To take and fulfil your order: processing payment, arranging delivery, handling returns, refunds and exchanges, and answering questions about your order. Lawful basis: performance of a contract with you.
To run your account: letting you sign in, see your orders and save addresses. Lawful basis: performance of a contract.
To keep records we are legally required to keep: tax, VAT, customs and accounting records, and records of consumer law rights such as cancellations. Lawful basis: legal obligation.
To send you marketing: emails or SMS about new drops, restocks and offers. Lawful basis: your consent, or our legitimate interest in marketing similar products to existing customers, which you can stop at any time.
To tell you when a sold-out size is back: only when you ask us to. Lawful basis: your consent.
To measure and improve the site: understanding which pages, products and campaigns work. Lawful basis: your consent, given through our cookie banner.
To advertise: showing you our adverts on other platforms and measuring whether they lead to sales. Lawful basis: your consent, given through our cookie banner.
To prevent fraud and keep the site secure: screening orders, blocking abuse, protecting against attacks. Lawful basis: our legitimate interest in protecting our business and our customers, and legal obligation.
To ask for a review: inviting you to review a completed order. Lawful basis: our legitimate interest in understanding how we are doing.

Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, we have weighed those interests against your rights, and you can object. See Your rights.

Payments

We do not collect or store your full card details. Payments are processed by our payment providers, who are responsible for handling your card data securely and to the PCI-DSS standard. Depending on how you pay, that may be Shopify Payments, PayPal, Apple Pay, Shop Pay or Google Pay.

If you choose to pay in instalments with Klarna or Clearpay, we pass them the information they need, typically your contact and order details, so they can decide whether to offer you their payment options. They act as their own data controller for that, and their own privacy policies apply.

We receive confirmation that a payment succeeded, the payment method type and the last four digits of the card, which we use to identify your order and handle refunds.

Who we share your data with

We do not sell your personal data. We share it with the suppliers who help us run the shop, and only with what they need:

Shopify: our ecommerce platform. Shopify hosts the site, processes the checkout and stores our order and customer records.
Payment providers: Shopify Payments, PayPal, Apple Pay, Shop Pay, Google Pay, Klarna and Clearpay, as described above.
Our fulfilment partner and delivery carriers: we pass your name, address, phone number and email so your parcel can be picked, packed, shipped and tracked, and so the carrier can contact you about delivery.
Klaviyo: our email marketing platform, which sends our newsletters and order-related emails and records whether you opened them.
Google: Google Analytics and Google Ads, for site measurement and advertising, where you have consented.
Meta: the Facebook and Instagram advertising pixel, for advertising and measurement, where you have consented.
LoyaltyLion: our loyalty programme, if you take part.
STOQ: back-in-stock alerts, if you ask to be notified.
Trustpilot: review invitations and published reviews.
Our cookie consent provider: which records your cookie choices so we can honour them.
Professional advisers: accountants, insurers and lawyers, where needed.
Authorities: where we are required to by law, for example HMRC or customs authorities for international orders.

If our business is sold or merged, customer data may transfer to the new owner so they can continue to serve you. We would tell you if that happened.

Sending data outside the UK

Several of our suppliers, including Shopify, Klaviyo, Google and Meta, are based outside the United Kingdom, mainly in Canada, the United States and the European Economic Area. Where your data is transferred outside the UK, we rely on one of the safeguards allowed by UK data protection law: a UK adequacy decision for that country, or the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where they are needed.

How long we keep it

Order, payment and tax records: seven years from the end of the financial year the order falls in, to meet HMRC and accounting requirements.
Customer accounts: for as long as your account is open. If you ask us to close it, we delete it but keep the order records above.
Marketing contacts: until you unsubscribe, and then a minimal record so we do not contact you again by mistake. We also remove contacts who have not opened anything from us for two years.
Customer service messages: two years from the last message, or longer if there is an open dispute.
Analytics and advertising data: for the periods set by the cookies and services listed below, generally no more than 14 months.

Cookies and similar technologies

Cookies are small files placed on your device. We group them as follows:

Strictly necessary: these make the site work and cannot be turned off. They keep you signed in, remember your bag, remember your country and currency, record your cookie choices and protect against fraud. Examples set by Shopify include _session_id, _secure_session_id, cart, _shopify_visit and _shopify_uniq.
Analytics: these tell us how many people visit, which pages and products they look at and where they drop off. We use Google Analytics for this.
Marketing: these let us show you our adverts on other sites and apps, and measure whether they lead to a sale. We use Google Ads and the Meta pixel for this.

Analytics and marketing cookies are only set if you accept them. When you first visit, our cookie banner asks for your choice, and you can change it at any time by reopening the banner from the link in the footer or by clearing cookies for this site. You can also block or delete cookies in your browser settings, though the site may not work properly without the strictly necessary ones.

You can opt out of Google Analytics across all sites using Google's browser add-on, manage Google advert personalisation in your Google account, and manage Meta advert preferences in your Facebook or Instagram settings.

Marketing

We will only email or text you marketing if you have asked us to, or if you have bought from us and we are telling you about similar products. Every marketing message has an unsubscribe link, and you can also email us to opt out. Unsubscribing from marketing does not stop order confirmations, dispatch notices and other messages we have to send about a purchase.

Automated decisions

Shopify runs automated fraud checks on orders, which may flag or hold an order for us to review. A person always makes the final decision to cancel an order. We do not carry out any other automated decision-making that produces legal effects for you.

Your rights

Under UK GDPR you have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
ask us to delete your data, where we do not have to keep it;
ask us to restrict how we use it while a concern is resolved;
receive the data you gave us in a portable format, or have it sent to another provider;
object to us using your data for direct marketing, at any time and without giving a reason;
object to processing we carry out on the basis of legitimate interests; and
withdraw consent at any time, without affecting anything we did before you withdrew it.

To use any of these rights, email info@kidfromthewest.com. We will respond within one month. We may ask you to confirm your identity first, so we do not give your data to someone else. Exercising these rights is free.

Security

The site runs over an encrypted connection, payment data is handled by PCI-DSS compliant providers, and access to our Shopify admin is limited to people who need it and protected by two-factor authentication. No system is completely secure, but we take these steps seriously and will tell you and the ICO about a personal data breach where the law requires it.

Children

Our site and products are intended for people aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has given us their data, contact us and we will delete it.

Changes to this policy

We may update this policy as our shop changes. The date at the top shows when it was last updated. If we make a significant change to how we use your data, we will make that clear on this page and, where appropriate, tell you directly.

Contact and complaints

For any question about this policy or your data, email info@kidfromthewest.com or write to Kid From The West Ltd, 3806, 7 Bankside Boulevard, Manchester, M3 7HN, United Kingdom.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.