Privacy Policy
1. Who we are
Kadija Kanu (“we”, “us”, “our”) is an online-only fashion brand based in the United Kingdom. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
​
​
2. What Personal Data We Collect
We collect and process the following types of personal data:
​
A. Information You Provide:
-
Full name
-
Email address
-
Phone number
-
Billing and delivery addresses
-
Payment details (handled securely by third-party processors)
-
Order history
-
Marketing preferences
B. Automatically Collected Data:
-
IP address
-
Browser type and version
-
Device information
-
Operating system
-
Browsing activity on our website
-
Referral source
-
Location data (if enabled)
C. Data from Third Parties:
​
-
Data from social logins (e.g. Facebook, Google)
-
Analytics and advertising platforms (e.g. Google Analytics, Meta Pixel)
​
3. How We Use Your Information
We use your personal data to:
​
-
Process and fulfil your orders
-
Provide customer service and manage your account
-
Personalise your shopping experience
-
Send service communications (e.g. order confirmation, delivery updates)
-
Send marketing communications (if you have opted in or qualify under soft opt-in rules)
-
Improve our website and services through analytics
-
Ensure compliance with legal obligations and prevent fraud
​
4. Legal Bases for Processing
We rely on the following legal bases:
​
-
Contract – for processing orders and managing your account
-
Consent – for marketing emails and non-essential cookies
-
Legitimate Interests – to improve our services and prevent fraud
-
Legal Obligation – for compliance with tax and regulatory requirements
5. Marketing Communications
We only send marketing communications:
​
-
With your explicit consent (opt-in), or
-
Under the soft opt-in rule (if you’re an existing customer and the communication relates to similar products or services)
You can unsubscribe by contacting us at info@kadijakanu.com.
​
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
-
Enable essential website functionality
-
Analyse website traffic and performance
-
Personalise content and advertising
You can manage or disable cookies via your browser settings. For more details, please see our Cookie Policy.
7. Who We Share Your Data With
We do not sell your personal data. We may share it with trusted third parties, including:
​
-
Payment processors (e.g. PayPal)
-
Delivery partners (e.g. Royal Mail, DPD)
-
Email marketing providers (e.g. Mailchimp, Klaviyo)
-
Analytics and advertising platforms (e.g. Google Analytics, Meta)
-
Professional advisers (e.g. accountants, lawyers)
-
Regulators or law enforcement where legally required
All third parties are required to process your data in compliance with applicable law.
8. International Data Transfers
Some of our service providers may process your data outside the UK, including in the EEA and the United States. When data is transferred internationally, we implement appropriate safeguards such as:
​
-
Standard Contractual Clauses (SCCs)
-
Transfers to countries deemed to have adequate protection by the UK government
9. Data Retention
We only retain personal data for as long as necessary. Typical retention periods include:
​
-
Order records: Up to 6 years (for accounting and legal compliance)
-
Marketing data: Until you unsubscribe or withdraw consent
-
Account data: Until you request deletion
​
10. Your Data Rights
You have the following rights under UK data protection law:
​
-
Access – to request a copy of your data
-
Rectification – to correct inaccurate or incomplete data
-
Erasure – to request deletion of your data (“right to be forgotten”)
-
Restriction – to limit how your data is used
-
Objection – to certain types of processing, including direct marketing
-
Data Portability – to receive your data in a structured format
-
Withdraw Consent – for any processing based on consent
To exercise any of your rights, contact info@kadijakanu.com.
​
​
11. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
-
SSL encryption
-
Secure servers and firewalls
-
Access control for internal systems
Please note that while we take security seriously, no system is 100% secure.
​
12. Children’s Privacy
Our website is not intended for children under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it immediately.
​
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If changes are significant, we will notify you on our website. The most current version will always be available at www.kadijakanu.com.
​
Contact Us
If you have any questions or concerns about this policy or your personal data, please contact:​
​
The Kadija Kanu Team
Email: info@kadijakanu.com
Website: www.kadijakanu.com