Privacy & Data Handling Policy

Kalluu Team Updated May 9, 2026 5 min read

#privacy#data#GDPR#security#compliance#policy

How sellers must handle customer data, privacy obligations, GDPR compliance, and data security requirements.

Privacy & Data Handling

As a Kalluu seller, you handle customer personal information. Protecting this data is both a legal obligation and a trust requirement.

When a customer purchases from your store, you receive:

Customer name and shipping address

Order details and quantities

Communication history

You do NOT receive:

Full payment details or credit card numbers

Passwords or login credentials

Other stores' purchase history

Store customer data securely

Do not share customer data with third parties

Use customer data only for order fulfillment

Delete customer data after 6 months

Notify customers and Kalluu of any data breach within 48 hours

If you sell to customers in the European Union:

Obtain explicit consent before sending marketing emails

Provide a clear privacy notice in your store

Allow customers to request data deletion

Respond to data access requests within 30 days

Do not add customers to email lists without consent

Include an unsubscribe link in all marketing emails

Maintain a clear privacy policy on your store page

Privacy violations may result in:

Temporary account suspension

Permanent account termination

Reporting to relevant data protection authorities

Legal liability for damages

Was this helpful?