GDPR Compliance

Last updated: September 2, 2026

Karmaa Kulture is committed to protecting your personal data and to complying with the General Data Protection Regulation (GDPR) and other applicable data protection law. This page explains the role we play, the legal bases on which we process your data, and the rights available to you.

1. Who Is the Controller

For the personal data you provide to us through karmaakulture.com, Karmaa Kulture is the data controller. You can reach us about any data protection matter at support@karmaakulture.com.

2. Legal Bases for Processing

• Contract - processing your order, arranging delivery, handling returns and refunds.
• Legitimate interests - preventing fraud, securing our site, and improving our products and service.
• Consent - marketing emails and non-essential cookies. You may withdraw consent at any time.
• Legal obligation - retaining tax, accounting and invoicing records for the period the law requires.

3. Your Rights

Subject to the conditions in the GDPR, you have the right to:

• access the personal data we hold about you, and obtain a copy of it;
• have inaccurate or incomplete data corrected;
• have your data erased where we no longer have grounds to keep it;
• restrict or object to processing, including profiling and direct marketing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing already carried out;
• lodge a complaint with your local supervisory authority.

4. Exercising Your Rights

Email support@karmaakulture.com with your request. We will verify your identity before acting and will respond within one month. Where a request is complex or you have made several, we may extend that period by a further two months and will tell you if we do.

5. International Transfers

Where we transfer personal data outside your jurisdiction, we do so under appropriate safeguards, such as standard contractual clauses with the recipient.

6. Retention

We keep personal data only for as long as needed for the purpose it was collected for, or for as long as the law requires us to. Order and invoice records are retained for the statutory accounting period; marketing data is deleted once you withdraw consent.

7. Contact

For any question about this page or how we handle your data, email support@karmaakulture.com. See also our Privacy Policy and Cookie Policy.