Privacy policy

Last updated: October 6, 2026

Khaal Craft LLC operates Khaal & Craft, including our website, online store, and related customer services. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, create an account, make a purchase, contact us, subscribe to marketing, or otherwise interact with Khaal & Craft.

For purposes of this policy, “Khaal & Craft,” “we,” “us,” and “our” refer to Khaal Craft LLC.

Our online store is powered by Shopify. Shopify processes customer information on our behalf for many store functions, while some Shopify services may involve Shopify processing information under its own terms and privacy practices. Shopify's current merchant data-processing terms generally treat the merchant as controller and Shopify as processor for customer personal data used to provide Shopify services. Shopify

1. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

Contact and identification information, such as your:

• name
• email address
• telephone number
• billing address
• shipping address

Order and transaction information, such as:

• products ordered
• order number
• purchase history
• payment status
• shipping and delivery information
• returns and store-credit information
• communications relating to an order

Payment information. Payments are processed through Shopify and/or the payment providers available at checkout. We generally do not directly store complete payment-card numbers.

Account information, if you create or use a customer account, including account credentials, order history, preferences, and information associated with your account.

Made-to-measure or customization information, where applicable, including measurements, sizing information, customization selections, and other specifications you voluntarily provide for production of your order.

Communications, including information you provide when contacting customer support, submitting a form, making an inquiry, requesting a return, or communicating with us through email or other customer-service channels.

Device and usage information, which may include:

• IP address
• browser type
• device type
• operating system
• pages viewed
• referring website
• shopping and browsing activity
• cart activity
• interaction with our advertisements or marketing
• cookie and similar technology identifiers

Marketing preferences, including whether you have subscribed to or opted out of promotional communications.

2. How We Collect Personal Information

We may collect information:

• directly from you when you place an order, create an account, complete a form, contact us, or provide measurements or customization details;
• automatically when you browse or use our website through cookies and similar technologies;
• from Shopify and services that help operate our store;
• from payment processors, shipping carriers, analytics providers, advertising platforms, and other service providers;
• from social media or advertising services when you interact with Khaal & Craft through those services, subject to their own privacy practices.

Shopify itself may receive browsing, transaction, billing, shipping, device, and other information when customers interact with Shopify-powered merchants. Shopify

3. How We Use Your Information

We may use personal information to:

• process and fulfill orders;
• process payments and store credit;
• manufacture made-to-order or made-to-measure products;
• arrange shipping and delivery;
• provide order confirmations and tracking information;
• manage customer accounts;
• process returns, claims, and customer-service requests;
• communicate with you about your purchases;
• prevent fraud, unauthorized transactions, and abuse;
• maintain the security and functionality of our website;
• understand how customers use our website;
• improve our products, services, website, and customer experience;
• conduct analytics and business reporting;
• provide personalized content or advertising where permitted;
• send marketing communications where you have consented or where otherwise permitted by law;
• comply with tax, accounting, legal, regulatory, and record-keeping obligations;
• establish, exercise, or defend legal claims.

4. Legal Bases for Processing

Where laws such as the UK GDPR or EU GDPR require us to identify a legal basis, we may process personal information on one or more of the following bases:

Performance of a contract — for example, processing your address, order information, measurements, and payment information so we can fulfill your purchase.

Legal obligations — where information must be retained or processed to comply with tax, accounting, consumer-protection, regulatory, or other legal requirements.

Legitimate interests — including operating and improving our business, preventing fraud, securing our services, providing customer support, and understanding how our store is used, where those interests are not overridden by your rights.

Consent — where consent is required, including certain marketing, advertising, analytics, or cookie activities.

You may withdraw consent where processing is based on consent, although this does not affect processing carried out before withdrawal.

UK privacy guidance requires organizations to explain their purposes, lawful bases, recipients, retention approach, rights, and applicable international transfers. Information Commissioner's Office

5. Cookies & Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used for:

Essential functions
To operate the website, maintain your cart, authenticate accounts, provide checkout, prevent fraud, and remember essential preferences.

Analytics
To understand website traffic, performance, and how customers use our store.

Personalization
To remember preferences and improve your shopping experience.

Advertising and marketing
To measure advertising performance and, where permitted, provide or measure advertising based on your interactions with our website.

Where required by law, non-essential cookies and similar technologies are used based on your consent or other applicable privacy choices.

You can manage available choices through our website's cookie/privacy controls and through your browser settings.

Shopify provides merchants with customer-privacy controls including cookie banners and data-sharing opt-out functionality, but merchants should ensure those settings accurately reflect their own third-party services and practices. Shopify Help Center

6. Advertising & Analytics

We may work with analytics, social-media, and advertising providers to understand website activity, measure campaigns, and promote Khaal & Craft.

These providers may receive information such as:

• browser or device identifiers
• IP address
• pages viewed
• products viewed
• shopping activity
• interactions with advertisements
• purchase or conversion information

We do not sell personal information for money.

However, disclosures to advertising or analytics providers may be legally classified as a “sale,” “sharing,” or processing for targeted advertising under certain U.S. state privacy laws, even where no money is exchanged.

Where applicable, customers may exercise available opt-out rights through our privacy controls or by contacting us.

California, for example, gives qualifying consumers rights relating to access, deletion, correction, sale/sharing opt-outs, and non-discrimination. California DOJ Colorado also requires covered businesses to disclose categories of information processed, purposes, third-party sharing, consumer rights, and targeted-advertising or sale practices. Colorado Attorney General

7. Marketing Communications

If you subscribe to marketing communications, we may use your contact information to send information about:

• new products
• collections
• launches
• promotions
• offers
• other Khaal & Craft news

You can unsubscribe from promotional emails using the unsubscribe link contained in the message or by contacting us.

Transactional communications concerning an order, payment, return, security issue, or customer-service request are not promotional marketing and may still be sent when necessary.

8. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate our business, including to:

Shopify, which provides our ecommerce platform.

Payment providers, to process and verify transactions.

Shipping and logistics providers, to fulfill and deliver orders.

Production and fulfillment partners, where information such as product specifications, sizing, measurements, or shipping details is necessary to manufacture or fulfill your order.

Technology providers, including website, hosting, security, customer-service, email, analytics, and business-software providers.

Advertising and social-media providers, subject to applicable privacy choices and law.

Professional advisers, such as accountants, lawyers, insurers, auditors, and consultants when necessary.

Government agencies, regulators, courts, or law-enforcement authorities, where disclosure is required or permitted by law.

Business successors, in connection with a merger, financing, reorganization, acquisition, sale, or transfer of all or part of our business, subject to applicable law.

We do not permit service providers to use information for purposes unrelated to the services they provide to us except where independently permitted by law or disclosed under their own privacy terms.

9. International Data Transfers

Khaal & Craft serves customers in multiple countries and uses service providers that may operate internationally.

As a result, personal information may be transferred to, stored in, or processed in countries other than the country where you live, including the United States and countries where Shopify or our other service providers operate.

Privacy laws in those jurisdictions may differ from those in your country.

Where required by applicable law, international transfers will be handled using appropriate lawful mechanisms or safeguards, which may include recognized adequacy arrangements or contractual protections.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• fulfilling orders;
• supporting customers;
• maintaining transaction records;
• managing returns and warranties;
• preventing fraud;
• complying with tax, accounting, and legal requirements;
• resolving disputes;
• enforcing agreements.

Different categories of information may be retained for different periods.

For example, order and financial records may need to be retained for legally required accounting or tax periods even after your customer account is closed.

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable law.

11. Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Canadian privacy guidance similarly requires organizations to use safeguards appropriate to the sensitivity of the information and to protect personal information against loss and unauthorized access or disclosure. Office of the Privacy Commissioner

12. Your Privacy Rights

Depending on where you live and the law that applies, you may have rights to:

• request access to personal information we hold about you;
• receive information about how we process it;
• correct inaccurate information;
• request deletion of information;
• restrict certain processing;
• object to certain processing;
• obtain a portable copy of eligible information;
• withdraw consent where processing relies on consent;
• opt out of certain targeted advertising;
• opt out of certain sale or sharing of personal information;
• appeal certain decisions relating to a privacy request where applicable;
• lodge a complaint with a relevant privacy or data-protection authority.

These rights are not absolute and may be subject to legal exceptions.

For example, we may be required to retain certain transaction records even after receiving a deletion request.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

EU and UK privacy frameworks provide rights including access, correction, erasure, restriction, objection, and data portability in applicable circumstances. Information Commissioner's Office Canada also requires organizations subject to PIPEDA to provide appropriate access and correction mechanisms. Office of the Privacy Commissioner

13. Privacy Requests

To exercise a privacy right or ask a question about your personal information, contact:

support@khaalcraft.com

Please state that your request concerns privacy and describe the right you wish to exercise.

We may need to verify your identity before fulfilling certain requests in order to protect your information.

Where applicable, an authorized agent may submit a request on your behalf subject to appropriate verification.

14. Your Privacy Choices

Where available, our website may provide a Your Privacy Choices or similar privacy-control page that allows customers to manage certain data-sharing or advertising preferences.

You may also use available cookie controls to manage non-essential tracking technologies.

Where applicable law requires recognition of qualifying browser-based opt-out preference signals, we will process them as required.

15. Third-Party Websites & Services

Our website may contain links to third-party websites, social networks, payment providers, or other services.

Khaal & Craft does not control the privacy practices of independent third parties.

When you use a third-party service, its own privacy policy and terms may apply. We encourage you to review those policies before providing personal information.

16. Children's Privacy

Our website is not directed specifically to children, and we do not knowingly seek to collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to us improperly, please contact support@khaalcraft.com.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our services;
• changes to our privacy practices;
• changes to technology;
• legal or regulatory requirements.

When we make changes, we will update the “Last updated” date at the top of this policy.

Where required by law, we will provide additional notice of material changes.

18. Contact Us

If you have questions, concerns, complaints, or requests regarding privacy or personal information, contact:

Khaal & Craft
Operated by Khaal Craft LLC
Fort Collins, Colorado, United States
Email: support@khaalcraft.com

Phone: +1 970 447 0578

Website: https://khaalcraft.com

Manufacturing and Operations Support Address:
Plot #106, Nadar Chowk, Rohi Nala
Gajju Mata, Lahore, Punjab 54000
Pakistan