Privacy Policy of QKDEU

Last Updated: December 2025

1. Introduction

This Privacy Policy serves as the definitive and comprehensive statement of the principles, protocols, and obligations governing the manner in which QKDEU (“the Company,” “we,” “our,” or “us”) collects, processes, retains, safeguards, discloses, and transmits personal data relating to any individual engaging with our digital platform (“Our Website”), transacting with our commercial services, or communicating with our organisation through any physical or electronic means. The purpose of this document is to outline, with full transparency and in a formal legal capacity, the rights afforded to data subjects and the responsibilities undertaken by QKDEU in accordance with applicable global data protection laws.

Our commitment to privacy is not merely operational but foundational to our corporate governance. QKDEU adheres to global regulatory standards, including but not limited to the United Kingdom General Data Protection Regulation (UK GDPR), European Union General Data Protection Regulation (EU GDPR), California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Personal Information Protection and Electronic Documents Act (PIPEDA), Personal Data Protection Act (PDPA), and additional data protection frameworks applicable across territories in which we operate. This Privacy Policy should be interpreted as a binding, legally enforceable framework that governs all interactions with Our Website, irrespective of geographic location.

2. Corporate Identity and Contact Information

QKDEU operates as a globally recognised entity engaged in the retail sale and distribution of premium fragrances and associated consumer products. For the purposes of all applicable data protection statutes, QKDEU functions as the Data Controller responsible for determining the purposes and means of personal data processing. Our organisational identity and legal credentials are as follows:

Business Name: QKDEU
Company Number: Contact Us
VAT Number: Contact Us
Registered Office Address: Hazelbury, Stoney Lane, Ashmore Green, Thatcham, Berkshire, Thatcham RG18 9HQ, United Kingdom
Customer Support: +44 7735 610541  |  Business Enquiries: +44 845 689 5589  |  Email: info@qkdeu.co.uk

All regulatory inquiries, rights-based requests, and privacy-related communications should be addressed through the contact details provided above. QKDEU maintains a strict governance structure to ensure compliance across all territories of operation and will provide data subjects with timely and appropriate responses to any formal request submitted under global data protection laws.

3. Definitions for Interpretative Clarity

To ensure absolute clarity throughout this Policy, the following definitions shall apply. These definitions are designed to assist the user in understanding the legal terminology utilised in describing QKDEU’s data processing framework.

3.1 Personal Data
Refers to any information associated with an identified or identifiable natural person, whether directly or indirectly, through identifiers such as name, email, location data, online identifiers, transaction records, or behavioural profiles.

3.2 Processing
Encompasses any operation performed upon personal data, whether automated or manual, including collection, storage, retrieval, analysis, structuring, dissemination, restriction, erasure, or destruction.

3.3 Data Controller
Denotes the entity responsible for determining the purposes and means of personal data processing. In the context of this Policy, QKDEU acts as the Data Controller.

3.4 Automated Decision-Making
Refers to decisions produced exclusively by technological means without human involvement, including profiling, predictive analytics, fraud scoring, risk modelling, and similar analytical outputs.

3.5 Future Technologies
Encompasses novel digital systems, artificial intelligence frameworks, machine learning models, biometric security mechanisms, quantum-secure encryption, and any future-state technological infrastructure that QKDEU may adopt.

These definitions shall be interpreted expansively to ensure full comprehension of the scope, function, and impact of QKDEU’s data practices.

4. Categories of Data We Collect

QKDEU collects various classes of personal data for lawful, legitimate, and operationally necessary purposes. These categories are described in detail below to ensure users understand precisely what information is captured and for what business purposes such information is utilised.

4.1 Information Provided Directly by the User
This category includes any personal data that you voluntarily submit when interacting with Our Website, creating an account, placing an order, or communicating with our organisation. Such information includes your name, email address, telephone number, billing address, shipping address, and account login credentials. Communications submitted via online forms, WhatsApp, email, or customer support channels are also included within this category. This information is essential for fulfilling orders, responding to inquiries, managing customer relationships, and ensuring a seamless transactional experience.

4.2 Information Automatically Collected via Digital Technologies
Our Website employs advanced digital tools and monitoring systems that automatically collect information regarding your device, browsing behaviour, and interaction with our platform. Automatically collected data includes IP address, device identifiers, browser type, location approximations, session data, page views, product interactions, timestamps, clickstream patterns, and behavioural insights. This information is gathered to maintain operational integrity, optimise user experience, diagnose technical issues, enhance security, and support analytics functions necessary for improving our services.

4.3 Cookies and Tracking Materials
Our Website utilises cookies, pixel tags, web beacons, device fingerprinting, and similar technologies that enable us to recognise returning users, maintain session stability, provide personalised content, and deliver targeted marketing. Cookies are also used to facilitate secure checkouts, maintain cart functionality, improve performance, and monitor fraudulent activity. Users may adjust cookie preferences through browser settings or applicable regulatory consent banners; however, disabling certain cookies may restrict website functionality.

4.4 Information Obtained from Third Parties
We may receive additional personal data from external partners, including payment providers, logistics partners, analytics firms, advertising networks, fraud-prevention companies, and identity verification entities. Such data may include transaction confirmations, delivery statuses, marketing insights, or security alert data. This information helps us enhance customer experience, maintain security, and refine operational processes.

5. Legal Basis for Processing Personal Data

QKDEU processes personal data strictly in accordance with legal frameworks governing data protection. We rely upon the following lawful bases:

5.1 Contractual Necessity
Processing that is essential to fulfil contractual obligations, including accepting orders, processing payments, delivering goods worldwide, managing returns, and providing support services.

5.2 Consent
Processing that occurs with your explicit consent, such as subscription to marketing communications, promotional messaging, and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of previously conducted processing.

5.3 Legitimate Interests
Processing necessary for the legitimate interests of QKDEU, including fraud prevention, analytics, product improvement, customer experience enhancement, internal governance, operational monitoring, and maintaining platform security.

5.4 Compliance with Legal Obligations
Processing required to meet statutory obligations including tax reporting, accounting standards, regulatory compliance, and fulfilment of law enforcement requests.

6. Purposes for Which We Process Data

QKDEU processes personal data for a wide range of purposes necessary to operate a secure, reliable, and globally competitive digital retail environment. Each processing purpose is explained below in comprehensive detail.

6.1 Order Fulfilment and Transaction Processing
We process personal data to manage and execute your purchases, administer secure payment authorisation, provide accurate billing records, ensure effective product dispatch, and maintain compliance with financial and commercial laws. This includes sending transactional communications such as order confirmations, shipping notifications, and delivery updates. Processing is essential for maintaining seamless commercial operations and ensuring your orders are executed reliably across global regions.

6.2 Customer Support and Communication Services
Data is processed to respond to support inquiries, resolve complaints, fulfil requests, offer guidance, and maintain customer relationship integrity. Customer communications help us ensure the accuracy of information, monitor service satisfaction, and facilitate timely interventions when assistance is required.

6.3 Platform Stability, Performance Monitoring, and Service Enhancement
QKDEU uses personal data to analyse platform usage, identify system errors, diagnose operational bottlenecks, test new functionalities, and improve platform design. Data-driven insights allow us to refine service delivery, implement performance improvements, strengthen user navigation pathways, and develop innovations that ensure a high-quality digital experience.

6.4 Marketing, Personalisation, and Advertising Activities
Where permitted by law, data is processed to deliver marketing communications, promotional offerings, loyalty incentives, personalised product recommendations, retargeting advertisements, and content tailored to user preferences. This includes analysis of purchase patterns, browsing behaviour, and demographic metrics to ensure advertising relevancy and effectiveness.

6.5 Fraud Prevention, Security, and Risk Mitigation
Our security infrastructure relies upon behavioural analytics, automated fraud detection algorithms, risk scoring engines, identity verification mechanisms, and anomaly-detection systems to safeguard users and QKDEU operations from fraudulent, abusive, or malicious activity. Personal data is analysed to detect irregularities, prevent security breaches, and ensure platform resilience.

6.6 AI Systems and Automated Decision-Making Processes
QKDEU may utilise artificial intelligence (AI), machine learning systems, automated decision-making tools, behavioural modelling systems, and predictive analytics engines to enhance fraud prevention, personalise content, forecast demand, optimise marketing strategies, segment users, or refine customer experience. These technologies operate under strict governance to ensure fairness, accuracy, and compliance with applicable law. Where legally required, users may request human oversight of automated outputs.

6.7 Compliance with Global Legal and Regulatory Requirements
We process personal data when necessary to meet legal requirements across multiple jurisdictions. This includes compliance with tax regulations, financial reporting standards, law enforcement inquiries, dispute resolutions, contractual disclosures, and mandatory governance obligations.

6.8 Research, Development, and Future Technologies
QKDEU may process personal data as part of research and development efforts aimed at improving existing systems and exploring innovative technological frameworks. This includes assessing potential integration with future technologies such as blockchain security, enhanced biometric verification, quantum-resistant encryption, or advanced AI models. All such processing will remain compliant with global regulations.

7. Disclosure of Data to Third Parties

QKDEU may disclose personal data to carefully selected third parties who operate as authorised processors or independent controllers, depending on the nature of the service. Disclosure occurs under strict contractual and compliance obligations.

7.1 Payment Partners
We disclose personal data to secure payment service providers including Stripe, PayPal, Apple Pay, Google Pay, Amazon Pay, eBay Payments, Buy Now Pay Later providers, cryptocurrency payment networks, bank transfer intermediaries, open banking frameworks, and any present or future payment systems utilised by QKDEU. These partners receive transaction-related details necessary to validate payments and ensure lawful processing.

7.2 Logistics, Shipping, and Fulfilment Providers
To ensure the efficient global delivery of products, we may share data with partners including Royal Mail, international courier services, warehouse operators, fulfilment centres, customs authorities, and supply chain intermediaries. These entities require relevant shipping and contact details to fulfil delivery obligations and ensure customer satisfaction.

7.3 Technology, Security, and Service Infrastructure Partners
We may disclose data to technology partners responsible for hosting, analytics, cybersecurity, identity verification, fraud detection, email communication, system optimisation, AI modelling, or digital marketing. These partners support the functionality, integrity, and enhancement of Our Website.

7.4 Advertising and Marketing Partners
We may provide limited data to advertising platforms such as Google, Meta, TikTok, Pinterest, and future global advertising networks for the purposes of targeted advertising, campaign measurement, and performance optimisation.

7.5 Government, Regulatory, and Legal Authorities
We may disclose information where legally compelled to comply with judicial orders, statutory obligations, law enforcement directives, or regulatory investigations.

7.6 Affiliates, Successors, and Corporate Transactions
In the event of mergers, acquisitions, asset transfers, restructurings, or insolvency proceedings, personal data may be transferred to authorised successor entities, subject to applicable legal protections.

8. International Transfers of Personal Data

Given the global reach of our operations and service providers, personal data may be transferred beyond the territorial boundaries of the United Kingdom, the European Economic Area (EEA), or your country of residence. We implement legally mandated safeguards such as Standard Contractual Clauses (SCCs), adequacy decisions, international transfer agreements, and encryption-based protections to ensure that personal data remains secure irrespective of geographic location.

We evaluate international transfer risks on an ongoing basis and ensure that all partners provide adequate and enforceable data protection mechanisms consistent with global regulatory expectations.

9. Data Retention Framework

QKDEU retains personal data only for durations deemed necessary, proportionate, and aligned with legal, operational, and commercial requirements. Retention periods vary depending on the type of data and the purposes for which it was collected.

Transaction data, order records, and financial documentation are retained for legally mandated durations, typically no less than six years. Marketing-related data is retained until the user withdraws consent or unsubscribes from communications. Account-related data is maintained until the user requests deletion or until the account becomes inactive for a prolonged period. Security logs, fraud detection data, and analytics insights are retained based on risk assessments and compliance obligations.

Upon expiration of retention periods, personal data is securely erased, anonymised, or pseudonymised in accordance with best industry practices and applicable regulatory requirements.

10. Rights of Data Subjects

QKDEU recognises and upholds the privacy rights granted to individuals under global data protection frameworks. These rights include the following:

10.1 Right of Access
Users may request confirmation of whether QKDEU processes their personal data and may obtain a copy of the data, along with explanations regarding processing activities.

10.2 Right of Rectification
Users may request corrections to inaccurate or incomplete personal data to ensure accuracy and reliability.

10.3 Right of Erasure (“Right to Be Forgotten”)
Users may request deletion of personal data where processing is no longer necessary, consent has been withdrawn, or legal grounds permit erasure.

10.4 Right to Restrict Processing
Users may request limitations on data processing under specific circumstances, such as dispute of accuracy or pending legal considerations.

10.5 Right to Object
Users may object to processing based on legitimate interests, direct marketing activities, or automated decision systems.

10.6 Right to Data Portability
Users may request that personal data be transferred to themselves or to another entity in a structured, commonly used, and machine-readable format.

10.7 Right to Withdraw Consent
Users may withdraw previously granted consent at any time, without affecting prior lawful processing.

All rights requests may be submitted to info@qkdeu.co.uk

QKDEU will respond within legally mandated timeframes.

11. Cookies and Tracking Technologies

QKDEU utilises a combination of essential, analytical, functional, and marketing cookies to provide a stable, secure, and personalised user experience. Essential cookies ensure cart functionality, session stability, and platform security. Analytical cookies measure performance, traffic volumes, and user interaction patterns. Functional cookies enable personalisation and preference retention. Marketing cookies facilitate targeted advertising, retargeting, and conversion measurement.

Users may manage or disable cookies via browser settings or relevant regulatory banners; however, disabling essential cookies may impede core functionality.

12. Security Measures and Safeguards

QKDEU adopts comprehensive organisational, administrative, and technical safeguards to protect personal data. These include encrypted communications, secure data storage, controlled access protocols, firewalls, intrusion monitoring systems, fraud detection algorithms, AI-driven threat analysis, and regular cybersecurity audits. While QKDEU employs industry-leading protections, no digital system can guarantee absolute immunity from security risks. We continuously monitor evolving threats and update our protections accordingly.

13. Third-Party Website Links

Our Website may contain links directing users to external websites or services not operated by QKDEU. We bear no responsibility for the privacy practices, security measures, or content of such external sites. Users are encouraged to review the privacy policies of any linked external service before providing personal information.

14. Processing of Data Relating to Minors

Our Website is not intended for individuals under the age of sixteen (16). QKDEU does not knowingly collect, process, or retain information concerning minors. If data relating to a minor is inadvertently collected, such data will be deleted promptly upon identification.

15. Implementation of Future Technologies and Innovations

QKDEU operates with a forward-looking strategy that anticipates evolving technological landscapes. We may integrate personal data into new systems such as AI models, predictive analytics engines, advanced authentication mechanisms, quantum-resistant encryption, blockchain-based audit trails, behavioural profiling tools, or any future innovations that enhance operational efficiency, customer experience, or platform security. Such use will always comply with applicable privacy laws and ethical governance standards.

16. Amendments to This Privacy Policy

QKDEU reserves the unrestricted right to amend, modify, enhance, or update this Privacy Policy at any time to reflect legislative changes, emerging technologies, operational adjustments, or strategic considerations. Updated versions will be published on Our Website with revised effective dates. Continued use of Our Website constitutes acceptance of any modifications.

17. Contact for Data Protection Matters

All communications relating to privacy, data protection rights, regulatory compliance, or clarifications regarding this Policy should be addressed to:

Customer Support: +44 7735 610541  |  Business Enquiries: +44 845 689 5589  |  Email: info@qkdeu.co.uk
Address: Hazelbury, Stoney Lane, Ashmore Green, Thatcham, Berkshire, Thatcham RG18 9HQ, United Kingdom

QKDEU is committed to addressing your concerns promptly and in full compliance with applicable global privacy regulations.