Last updated: 28 October 2025

This Privacy Policy describes how Kloudy Matcha Ltd ("Kloudy", "we", "us", or "our") collects, uses, and discloses your personal information when you visit or make a purchase from www.kloudymatcha.com (the "Site"), interact with us, or otherwise use our services.

We are committed to protecting your privacy and ensuring compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU GDPR, and other applicable laws.

1. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices, services, legal obligations, technology, or other operational reasons. We will update the "Last Updated" date at the top of this page accordingly. We encourage you to review this page regularly.

2. What Information We Collect

a. Information You Provide

● Personal details (name, email address, phone number, delivery and billing address)

● Account information (if you create one)

● Purchase information (items bought, payment confirmation)

● Support and communication (emails, live chats, form submissions)

● Reviews, testimonials, and other user-generated content

b. Automatically Collected Information

● Device and browser information

● IP address and location

● Site usage and interaction data (pages viewed, time spent, links clicked)

● Cookies and similar technologies (see section 7 below)

c. Information from Third Parties

● Shopify, our e-commerce platform

● Payment processors (e.g., Shop Pay)

● Marketing and analytics platforms (e.g., Google Analytics, Meta Ads,etc)

● Social media platforms (e.g., Instagram, TikTok, LinkedIn if you engage with our brand)

 3. How We Use Your Information

We use your data for purposes including, but not limited to:

● Processing and fulfilling your orders

● Handling payments and refunds

● Providing customer support

● Improving our website, services, and user experience

● Marketing and promotional activities (with your consent)

● Personalising your experience on our website

● Analyse user behavior via analytics tools

● Complying with legal and regulatory obligations

● Preventing fraud and ensuring security

We may use tools such as Google Analytics and Meta Pixel to understand user behaviour and deliver tailored ads. These tools may collect information about your device and browsing habits across websites.

4. Legal Bases for Processing

We rely on the following legal bases to process your personal data:

● Your explicit consent

● Performance of a contract (e.g., fulfilling an order)

● Compliance with legal obligations

● Our legitimate interests (e.g.,customer service, improving our offerings)

 5. How We Share Your Information

We do not sell your personal information. We may share it with:

● Shopify, to power our store and host our Site. Our store is hosted on Shopify. Shopify acts as our data processor and provides us with the online platform to sell our products. You can learn more about how Shopify processes your data in their Privacy Policy.

● Shop Pay, to process payments securely

● Logistics and fulfilment providers, for delivering your orders

● Marketing partners, to send relevant updates and offers

● Analytics tools, to understand user behaviour and improve our service

● Social media platforms, only if you interact with us there

● Law enforcement or regulators, if required by law

● Affiliates, advisors, or acquirers, in case of business restructuring or sale.

All third parties are contractually required to handle your data in compliance with applicable laws and only for specified purposes.

6. User-Generated Content (UGC)

By submitting or tagging us in any user-generated content (e.g., reviews, photos, videos, social media posts):

● You grant us a worldwide, royalty-free,
perpetual license to use, reproduce, edit, publish, and display that content across our digital and print marketing channels.

● You confirm you have the rights to the content and that it does not infringe on third-party rights.

● You understand that any content shared in public forums or social media may be viewed, collected, and used by others.

● We reserve the right to moderate, edit, or remove UGC at our discretion.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, provide
insights into site usage, and support marketing campaigns.

a. Types of Cookies We Use

● Essential Cookies – Enable core functionality like checkout

● Performance Cookies – Help us understand how visitors use the site

● Functionality Cookies – Remember your settings and preferences

● Advertising Cookies – Serve tailored ads across platforms

b. Your Cookie Choices

You can manage your preferences via our cookie banner or adjust your browser settings to block or delete cookies. Blocking cookies may affect your experience.

For more details on Shopify cookies, visit: Shopify’s
Cookie Policy

Our website does not currently respond to “Do Not Track” signals.

8. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including for:

● Providing our services

● Complying with legal, accounting, and tax obligations

● Resolving disputes and enforcing agreements

Data retention periods may vary depending on the type of data and the applicable laws. We retain your personal data only as long as necessary to meet our legal, operational, and service obligations. This typically means up to 6 years for transactional records. For marketing data, we retain it until you withdraw your consent

9. International Data Transfers

Some of our partners and service providers are located outside the UK. Where we transfer your data internationally, we ensure:

● Adequate protection through UK-approved Standard Contractual Clauses (SCCs)

● Additional technical and organisational safeguards are in place

● Compliance
with all applicable laws regarding international transfers

 10. Your Rights

If you are based in the UK, EU, or other applicable jurisdictions, you have the right to:

● Access the personal data we hold about you

● Correct inaccurate or incomplete data

● Request deletion (“right to be forgotten”)

● Restrict or object to certain processing

● Withdraw consent (e.g., for marketing)

● Request data portability (in a structured format)

● Lodge a complaint with the ICO at www.ico.org.uk

To exercise these rights, please email us at: hello@kloudymatcha.com

11. Children’s Data

Our Site is not directed to individuals under the age of 13. We do not knowingly collect data from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. Security of Your Information

We employ administrative, technical, and physical safeguards to protect your
personal data, including:

● SSL encryption

● Role-based access controls

● Security reviews of third-party platforms

● Secure servers and
infrastructure

Despite these efforts, no online system is 100% secure. You are responsible for
maintaining the confidentiality of your account credentials.

13. Limitation of Liability

To the fullest extent permitted by law, Kloudy Matcha Ltd shall not be liable for
any indirect, incidental, or consequential damages arising out of unauthorized
access to your data unless caused by our gross negligence or willful misconduct.

 14. Contact Us

For privacy-related questions, data access requests, or complaints, contact:

Kloudy Matcha Ltd

Company No. 16249601

Registered Office: C/O Dragon Argent, 63 Bermondsey Street, London, SE1 3XF, UK

Email: hello@kloudymatcha.com