top of page

PRIVACY POLICY & GDPR

1. About Us

This Privacy Policy explains how FAMILY BUSINESS SOLUTIONS SRL, operating the Kitakami Kids brand and the website www.kitakamikids.com, collects, uses, stores and protects personal data.

Company: FAMILY BUSINESS SOLUTIONS SRL
Tax Identification Number (CUI): 37835469
Trade Register Number: J2017002198138
EUID: ROONRC.J2017002198138
Incorporation Date: 26 June 2017
Registered Office: Str. A, No. 37, Office 1, Ovidiu, Constanța County, 905900, Romania
Phone: +40 735 432 670
Email: office.kitakami@gmail.com

For the purposes of Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), FAMILY BUSINESS SOLUTIONS SRL acts as the data controller in relation to personal data collected through this website.

2. Personal Data We Collect

Depending on how you use our website, we may collect the following information:

  • first and last name;

  • email address;

  • telephone number;

  • billing address;

  • shipping address;

  • information necessary for invoicing;

  • order details;

  • products purchased or added to your cart;

  • transaction and payment status information;

  • correspondence and messages sent to us;

  • information submitted through contact forms;

  • account information, if customer accounts are enabled;

  • IP address;

  • browser type;

  • device information;

  • approximate location derived from technical data;

  • website activity and interaction information;

  • cookie identifiers and similar technical data.

Payment card information may be processed directly by the payment provider used during checkout. Kitakami Kids does not normally receive or store complete payment card details.

3. How We Collect Personal Data

We may collect information:

  • directly from you when you place an order;

  • when you create an account;

  • when you subscribe to communications;

  • when you contact us;

  • when you complete a website form;

  • automatically through cookies and similar technologies;

  • through payment providers, delivery companies or other service providers involved in fulfilling your order.

4. Why We Process Your Personal Data

We may process your data for the following purposes:

Processing orders

To receive, confirm, prepare, manufacture where applicable, process and deliver your order.

Legal basis: performance of a contract.

Payments and invoicing

To process payments, issue invoices and maintain financial and accounting records.

Legal basis: performance of a contract and compliance with legal obligations.

Customer service

To answer questions and handle requests, complaints, returns, warranty claims and other customer service matters.

Legal basis: performance of a contract and our legitimate interests.

Website security and fraud prevention

To protect our website, customers and business against fraudulent transactions, misuse, cyberattacks and unauthorised access.

Legal basis: legitimate interests and, where applicable, legal obligations.

Legal and regulatory compliance

To fulfil accounting, tax, consumer protection and other statutory obligations.

Legal basis: legal obligation.

Marketing

Where permitted by law, we may use your contact details to send newsletters, product information, promotions or other marketing communications.

Where consent is required, marketing communications will only be sent after you have provided consent.

You may unsubscribe at any time.

Legal basis: consent or legitimate interests, depending on the circumstances and applicable law.

Website analytics and improvement

Subject to applicable cookie and consent requirements, we may analyse how visitors use the website in order to improve its functionality, content and user experience.

Legal basis: consent where required.

5. Children's Data

Kitakami Kids sells furniture and products intended for children; however, the online store is intended to be used by adults.

We do not knowingly seek to collect personal data directly from children.

If we become aware that personal data has been provided directly by a child without the required authorisation, we will take appropriate steps to delete that information.

6. Sharing Personal Data

We may share personal data with service providers where necessary to operate our business, including:

  • website and ecommerce hosting providers;

  • Wix and related service providers;

  • payment processors;

  • banks and financial institutions;

  • courier and delivery companies;

  • accounting and invoicing providers;

  • IT and cybersecurity providers;

  • customer communication providers;

  • analytics and marketing providers, where appropriate consent has been provided;

  • professional advisers;

  • public authorities when disclosure is required by law.

We only share information that is reasonably necessary for the relevant service.

Service providers acting as processors are required to process personal information according to applicable data protection requirements.

7. International Data Transfers

Some technology providers used in connection with our website may process personal data outside Romania or outside the European Economic Area.

Where personal data is transferred internationally, appropriate safeguards required by GDPR will be used where applicable, such as adequacy decisions, approved contractual safeguards or Standard Contractual Clauses.

8. How Long We Keep Personal Data

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected.

Certain information relating to orders, payments, invoices and accounting records may need to be retained for longer periods where required by Romanian tax, accounting or commercial legislation.

Marketing information processed on the basis of consent may be retained until you withdraw your consent or the information is no longer required.

9. Your GDPR Rights

Subject to the conditions established by GDPR, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain types of processing;

  • request data portability;

  • withdraw consent at any time where processing is based on consent;

  • object to direct marketing;

  • lodge a complaint with the competent data protection supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact:

Email: shimakazedesign@gmail.com

We may request reasonable information to verify your identity before responding to a data protection request.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

10. Security

We use reasonable technical and organisational safeguards intended to protect personal data against:

  • unauthorised access;

  • accidental loss;

  • destruction;

  • alteration;

  • disclosure;

  • misuse.

However, no internet transmission or electronic storage system can guarantee absolute security.

11. Links to Third-Party Websites

The website may contain links to third-party websites or services.

We are not responsible for the privacy practices of third-party websites. We encourage users to review the privacy policies of any external website they visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical or operational changes.

The latest version will be published on this page together with its date of revision.

bottom of page