Privacy Policy

Last updated: 2026-10-27

This policy explains what personal data Kendama Senses ("we", "us") collects, why we collect it, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR / AVG), Dutch privacy law, and, where you are based in the United Kingdom, the UK GDPR.

1. Who we are

Belangstellend Beleven (trading as Kendama Senses)
Grote Voort 10, 8041 AM Zwolle, Nederland
KvK: 80641482 · BTW: NL003470779B69
Contact: info@kendamasenses.com

We are the data controller for the personal data described below. You are welcome to communicate with us in Dutch or English; we will reply in the same language.

2. What data we collect

Account data: your email, how you sign in (a passkey saved on your device, or Google if you choose it), and when the account was made and last used. Accounts have no password.
Order data: name, shipping & billing address, phone (if you provide one), order contents, order totals, payment status. Stored at our payment processor (Shopify). We receive references and summary data via the Shopify Admin API.
Account preferences & activity: the products you save, your back-in-stock and new-arrival notification subscriptions, preferences like your shipping carrier, weight range, and shop view, the badges you earn, and which early-access invite link you first came in through (with the date), recorded once when you claim your badge.
Notifications: when you switch notifications on for a device, we keep the address your phone's notification service gives us, two keys that go with it, and a short device label (the browser). Your notifications are delivered through Apple, Google or Mozilla, whichever runs on your device. These are deleted with your account.
Giveaway entries & alert history: if you enter a giveaway through a personal link we send you, or type it in, the Instagram name on your entry is saved on your account. We also keep a dated record of when you switch notifications, drop emails or the newsletter on or off, and when you open the installed app while signed in, so we can check who is still signed up for alerts on a given date and see how alerts are used over time. When you open the giveaway page, or the installed app, while signed in, we also keep which kind of phone or browser you use (the system and its version, the browser, the phone model where your browser shares it, and whether you use the installed app), so we know which devices the alerts and the app need to work on. If you take part in the giveaway we also keep dated records of the steps that earn tickets, such as following us, sharing a story that tags us and saving a product, so we can count your tickets on the closing date. These records are deleted with your account.
Communication data: emails you send us and our replies. If you ask for shipping rates to a country we do not have shipping rates for, we keep your email and that country so we can answer you and see which countries are asked for. It is not used for marketing and does not sign you up for any emails; ask us and we delete it.
Technical data: IP address, browser/user-agent, and basic device metadata captured by our hosting provider for security and abuse prevention. We do not maintain long-term IP logs.
Webhook event metadata: a copy of order and customer events from Shopify is kept for up to 90 days for debugging and auditing purposes, then automatically deleted.

3. Why we use it (purposes & legal bases)

To run your account (saved items, notification alerts, your preferences), basis: performance of a contract (Art. 6(1)(b) GDPR).
To process orders, payments & shipments, basis: performance of a contract.
To respond to support requests, basis: legitimate interest (Art. 6(1)(f)) and / or contract.
To prevent fraud & secure the service, basis: legitimate interest.
To meet legal obligations (e.g. tax records, consumer law), basis: legal obligation (Art. 6(1)(c)).
To send you marketing email (news, drops, offers), basis: your consent: we only email people who explicitly asked for it, by ticking the box at checkout or by switching it on in their account settings. It is never needed to sign in or create an account. You can switch it off any time in your account settings, and every marketing email carries a one-click unsubscribe link. Unsubscribing is immediate and permanent. When you switch it on or off in your account settings we also update the email marketing setting on your customer record in Shopify.
For non-essential analytics or marketing (if any): we ask for your explicit consent. You can withdraw consent at any time.

4. Who we share data with (processors)

We use the following service providers. They process data on our behalf and are bound by data-processing agreements:

Shopify · order, customer, payment, and checkout processing. (Canada / global infrastructure.)
Vercel · application hosting. (United States.)
Supabase · account database, authentication. (Hosted in the EU where available.)
Google · only if you choose "Sign in with Google". Google confirms your identity and shares your email address with us so we can find or create your account. (United States.)
Typesense (Railway) · product search index. (United States.)
Resend · sending the emails we send you: stock alerts, drop alerts, and (if you asked for it) marketing email. (United States.)
Shipping carriers · to deliver your order, the carrier you (or we) select receives your name, address and phone.
Payment providers · handled by Shopify Payments and any other gateways the merchant enables. We do not store credit-card numbers ourselves.
UpPromote · our affiliate/ambassador program. If you buy using an affiliate's discount code, UpPromote reads the order (and the linked customer record) from Shopify to credit that affiliate. If you came through an affiliate's link and you accept our cookie banner, we also load UpPromote's tracking script, so the affiliate can be credited when you check out. If you decline, that script never loads. (United States.)
Sentry · error monitoring, so we notice and fix bugs. It only receives details of an error itself (e.g. what broke and a technical stack trace): we configure it to never collect your IP address, cookies, or request headers. (EU data region.)

Where data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

We do not sell your personal data to anyone.

5. How long we keep it

Account & profile: until you ask us to delete it, or until prolonged inactivity (we may delete dormant accounts after extended notice).
Order & invoice data: 7 years, as required by Dutch tax law.
Webhook event log: 90 days, then automatically deleted.
Support emails: typically 2 years, longer if related to a dispute or warranty claim.
Marketing email list: until you unsubscribe. After that we keep your address on a do-not-email list so we do not email you again by mistake, and a record of which emails were sent to you. Ask us and we will delete both.

6. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you,
have inaccurate data corrected,
have your data deleted (the "right to be forgotten"),
restrict or object to processing,
receive your data in a portable, machine-readable format (data portability),
withdraw consent for any processing based on consent.

To exercise any of these rights, email us at info@kendamasenses.com. We will respond within one month. We may ask for proof of identity to make sure we're sending your data to the right person.

For account deletion specifically, you can also use the "Delete my account" option on your account page. This schedules deletion 30 days into the future and you can cancel at any time during that window by signing back in.

7. Cookies & similar storage

We keep this light. Almost everything is first-party cookies and browser storage that are either necessary or simply remember your preferences. The one exception is affiliate tracking, described below, and it only runs if you say yes to it.

Signing in. You can sign in with a one-time code we email you, a passkey saved on your device, or optionally with Google. Choosing "Sign in with Google" shares only your email address with us, to find or create your account. We never post anything to your Google account.

Strictly necessary: the site cannot work without these, and they need no consent:

keeping you signed in to your account,
remembering the items in your cart,
the invite link you were sent, if you came in through one (it keeps you in for 30 days), and the access password while the shop is closed to the public.

Functional: these remember your choices so the shop fits you (no consent needed):

your preferred weight range and shop view,
which shop filters you set to hide products and which only fade them,
which homepage start you were shown during this visit (a session cookie that goes when you close the browser),
the pages you just visited, so that a Back link takes you to the right place, and whether the drop sheet should reopen after you sign in (both kept only until you close the tab),
if you open a link that carries a discount code, the code, the affiliate's name and their referral word, kept only until you close the tab, so the discount can be applied at checkout (this does not need your consent),
your country, for accurate shipping estimates and prices in your own currency,
the kendamas you save while browsing without an account,
which kendamas you have saved, signed in or not, as a plain list of product numbers on your device (and how many, even if none), so their hearts and the Saved page are right as soon as a page opens,
your recent searches, so they're one tap away next time,
whether you've visited before, so the homepage opens on the right starting point,
whether you came in through an invite link and have not yet claimed your invite badge, so the badge offer can come back until you do (a simple yes or no, kept up to 30 days, never your email or any identifier),
which invite channel you came in through (the last word of the invite link, such as "instagram"), kept up to 30 days, so if you open the shop inside another app's browser (it then asks you to open it in Safari or Chrome) and move there, you are let in too (never your email or any identifier),
whether this device has a passkey for the shop, so sign-in can offer it first (a simple yes or no, never your email or any identifier).
which weight picker view you like, the slider or the price steps (a letter for the view you have now and a letter for the one you were first shown), so the picker opens the way you left it; signed in, it is also kept on your account so it follows you to a new phone. We count, as daily totals with nothing that identifies you, how often each view is shown, switched and used to add to the cart,
the email address you just asked a sign-in code for, kept for 15 minutes on your device only, so that if you leave the page to read your email and open it again, it asks for the code instead of the address a second time. It is removed when you sign in, when you choose a different email, and after 15 minutes,
whether drop alerts (email or notifications) were switched on the last time you visited, so the homepage shows the right label straight away (a simple yes or no),
which drop alert channels (email, notifications) you had on, and whether this phone received notifications when last checked, as three plain yes or no answers on your device, so the drop sheet opens with the right ticks,
whether the last visit on this phone could install the app with one tap (a simple yes or no), and when you closed the "add to your phone" card on the Menu, so it stays closed for 30 days and the Menu shows the right card straight away,
how high you moved the floating Cart button, if you dragged it,
when you closed the giveaway bar at the top of the page, so it stays away for 5 days (a time on your device), and, if you are signed in, whether your account has already entered the giveaway (a simple yes or no with the time we last asked), so the bar is not shown to you again,
if you are signed in and started the giveaway, how many tickets you had and your next step the last time we asked (a few words and a number on your device), so the giveaway card on the Menu shows them straight away; it is removed when you sign out,
if you are signed in and started the giveaway, the steps of the giveaway page and how many tickets you had the last time we asked (the names of the steps, which were done and a number, on your device), so the page can show them straight away while it asks your account again; it is removed when you sign out,
whether the installed app has been opened on your phone before (a time on your device), so that the first time you open it during the giveaway it can take you straight to the giveaway page.

Analytics. We use two kinds, and we are strict about consent:

Always-on, cookieless: aggregate visitor numbers, how often something is added to a cart or a checkout is started, and page-load speed (via Vercel). This sets no cookies, builds no profile of you, and never follows you to other sites, so it needs no consent.
Only if you agree: product analytics (via PostHog, hosted in the EU) that helps us see how the shop is used and improve it. It stays off until you accept it in our cookie banner: accept and it sets a first-party identifier so we can recognise a returning visit; decline and it never loads. You can change your mind any time below. When you press Accept or Decline, we add one to a daily total of each answer so we know how many people choose which. That total holds nothing about you: no identifier, no IP address.

Affiliate tracking. If someone shared their own link to our shop with you, we may remember that they sent you, but only if you agree. It stays off until you accept it in our cookie banner; accept and it can follow you to Shopify's checkout so that person is credited for the sale. Decline and it never loads. (The discount code from a link, described above, is kept for the open tab either way.)

You can clear everything above at any time in your browser settings. To review or withdraw your choice:

8. Children

The service is not directed at children under 16. If you believe we hold data of a child under 16 without parental consent, contact us at info@kendamasenses.com and we will delete it.

9. Security

We use TLS for all data in transit, access controls and least-privilege keys for our infrastructure, and verified webhook signatures for all integrations. No system is 100% secure, but we take reasonable measures appropriate to the risk.

10. Changes to this policy

We may update this policy as our service evolves or laws change. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated by email or a banner on the site.

11. Complaints

If you believe we are not handling your data properly, please contact us first. We'd like the chance to put it right. You also have the right to lodge a complaint with a supervisory authority:

Netherlands & EU/EEA: Autoriteit Persoonsgegevens, or the data-protection authority of the EU member state where you live or work.
United Kingdom: Information Commissioner's Office (ICO).

Note for non-EU/UK customers: we apply the same protections (access, deletion, correction) globally as a baseline, regardless of your country of residence. Contact us at info@kendamasenses.com for any request.