Privacy Policy

Last updated: 24.02.26

Who we are

Kista is a handmade furniture brand based in Lancashire, England.

For the purposes of UK data protection law, the organisation responsible for this website and your personal data is:

Kista
Unit 22, Daniel Street Industrial Estate
Daniel Street
Whitworth
Lancashire
OL12 8BX
United Kingdom
Email: hello@kista.co.uk

If you have any questions about this policy or how we use your information, please contact us using the details above.

What this policy covers

This policy explains how Kista collects, uses, stores and shares personal data when you:

  • visit our website

  • contact us by form or email

  • place an order

  • request information about products or custom options

  • sign up to marketing (if available)

  • interact with cookies or similar technologies on our site

Information we may collect

Information you provide directly

We may collect personal information you choose to give us, including:

  • name

  • email address

  • phone number (if provided)

  • billing address

  • delivery address

  • order details

  • messages and enquiries

  • customisation preferences (for example, fabric or wood requests)

Payment and checkout information

Orders placed through our website are processed via our ecommerce platform and payment providers. We do not store full payment card details on our own systems (unless clearly stated otherwise).

Website usage and technical data

When you browse our site, we may collect limited technical and usage information such as:

  • IP address

  • browser type

  • device type

  • pages viewed

  • referring site

  • time and date of visits

This may be collected using cookies and similar technologies, depending on your choices.

How we use your information

We use personal data for the following purposes:

  • to reply to messages and enquiries

  • to process and fulfil orders

  • to arrange delivery

  • to provide customer support, including product care and repair queries

  • to process refunds/returns where applicable

  • to keep accounting and business records

  • to improve our website and services

  • to send marketing communications where we are allowed to do so

Our legal bases for processing

Under UK data protection law, we rely on one or more of the following legal bases:

  • Contract – where we need your data to process your order or provide requested services

  • Legal obligation – where we must keep records or comply with legal requirements

  • Legitimate interests – for running and improving our business, preventing misuse, and responding to enquiries

  • Consent – for marketing emails (where required) and non-essential cookies/tracking

Who we share your information with

We only share personal data where necessary to operate our website and business. This may include:

  • Squarespace (website hosting and ecommerce platform)

  • payment providers used through checkout

  • delivery and courier companies

  • email/communication service providers

  • analytics providers (if enabled)

  • professional advisers (for example, accountants or legal advisers)

  • regulators or public authorities where required by law

We do not sell your personal data.

International transfers

Some providers we use may process personal data outside the UK. Where this happens, we take steps to ensure your data is protected with appropriate safeguards in line with UK data protection requirements.

How long we keep your information

We keep personal data only for as long as reasonably necessary for the purposes explained in this policy, including legal, tax and accounting obligations.

Examples (to customise):

  • enquiries where no order is placed: [e.g. 12 months]

  • order and transaction records: [e.g. 6 years plus current tax year]

  • marketing subscriptions: until you unsubscribe or we stop using the mailing list

  • cookie/analytics data: according to our cookie settings and provider retention settings

Your rights

Depending on the circumstances, you may have rights to:

  • access the personal data we hold about you

  • ask us to correct inaccurate information

  • ask us to delete your information

  • ask us to restrict how we use your information

  • object to certain processing

  • request transfer of your data (where applicable)

  • withdraw consent at any time (where consent is the basis)

You may also raise concerns with the Information Commissioner’s Office (ICO).

Cookies and similar technologies

We use cookies and similar technologies to operate our website and, where enabled, to understand usage and improve performance. Some cookies are essential for the site to work properly, while others may be optional and used only with your consent.

Please see our Cookie Policy and cookie settings for more information.

Data security

We use reasonable technical and organisational measures to help protect personal data. However, no online service is completely secure, and we cannot guarantee absolute security.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date shown above.

Contact

If you have questions about this policy or your personal data, please contact:

Kista
Unit 22, Daniel Street Industrial Estate
Daniel Street
Whitworth
Lancashire
OL12 8BX
United Kingdom
hello@kista.co.uk