Privacy Policy

Last updated: September 26, 2026

This Privacy Policy describes how K & R Sweet Studio (“Company,” “We,” “Us,” or “Our“) collects, uses, and discloses information about you when you visit or make a purchase from https://kandrsweets.com/ (the “Website” or “Service“). It also explains your privacy rights and how the law protects you, including specific rights available to residents of California and the European Economic Area, United Kingdom, and Switzerland.

Table of Contents

1. Definitions

  • Account — a unique account created for you to access parts of the Service.
  • Affiliate — an entity that controls, is controlled by, or is under common control with a party.
  • Company — K & R Sweet Studio.
  • Cookies — small files placed on your device by a website to store details of your browsing activity.
  • Country — Sri Lanka, where the Company is based.
  • Device — any device that can access the Service (computer, phone, tablet, etc.).
  • Personal Data — any information relating to an identified or identifiable individual.
  • Service or Website — K & R Sweet Studio, accessible at https://kandrsweets.com/.
  • Service Provider — any third party that processes data on the Company’s behalf.
  • Usage Data — data collected automatically through use of the Service.
  • You — the individual using the Service, or the entity on whose behalf they are using it.

2. Data We Collect

Personal Data You Provide

When you create an account, place an order, contact us, or sign up for updates, we may collect:

  • Full name
  • Email address
  • Phone number
  • Billing and shipping/delivery address
  • Payment details (processed by our payment processor — see Section 7)
  • Order history and preferences
  • Any information you submit through contact forms or customer support

Usage Data

Collected automatically when you use the Website, including your device’s IP address, browser type and version, the pages you visit, time and date of your visit, time spent on pages, unique device identifiers, referring URLs, and other diagnostic data.

3. Cookies, Analytics & Advertising Technologies

We use cookies and similar tracking technologies (web beacons, pixels, and analytics scripts) to operate, secure, and improve the Website, and to support advertising. Where required by applicable law, we only set non-essential cookies with your consent, obtained via our cookie banner/preferences tool.

CategoryTypePurpose
Necessary / Essential CookiesSessionEnable core site functionality, authenticate users, and prevent fraud. The Service cannot function properly without these.
Cookie Consent CookiesPersistentRecord your cookie consent choices so we can honor them on future visits.
Functionality CookiesPersistentRemember your preferences (e.g., login details, language, cart contents) for a more personalized experience.
Analytics CookiesPersistent / SessionCollected via Google Analytics to understand how visitors use the Website, measure traffic, and improve performance. Google may use this data in accordance with the Google Privacy & Terms. You can opt out using the Google Analytics Opt-out Browser Add-on.
Advertising / Remarketing CookiesPersistentUsed by us and third-party ad networks to show you relevant ads on this Website and elsewhere, and to run remarketing campaigns (see Section 6).

You can control or delete cookies through your browser settings. Blocking some cookies may impact your experience and limit certain Website features. Where we offer a cookie preference tool, you may update your choices there at any time.

4. How We Use Your Data

We may use Personal Data for the following purposes:

  • To provide and maintain the Service, including monitoring usage.
  • To manage your Account and provide access to features available to registered users.
  • To process orders and payments and fulfill our contract with you.
  • To communicate with you, including responding to inquiries and sending service-related notices.
  • To send marketing communications such as newsletters, offers, and promotions (see Section 5).
  • To serve and personalize advertising, including remarketing (see Section 6).
  • For analytics — to understand usage trends and improve the Website, products, and marketing.
  • For business transfers — in connection with a merger, sale, or reorganization of the Company.
  • To comply with legal obligations and enforce our terms and policies.

5. Email Communications

If you provide your email address — for example, when creating an account, placing an order, or subscribing to updates — we may send you:

  • Transactional emails (order confirmations, shipping/delivery updates, account notices)
  • Customer service and support communications
  • Marketing emails about new products, promotions, discounts, and events

Where your consent is required by law (for example, under GDPR), we will only send marketing emails with your prior consent. Elsewhere, we may send marketing emails until you opt out. Every marketing email includes an unsubscribe link, and you may also opt out by contacting us at privacy@kandrsweets.com. Opting out of marketing emails does not affect transactional or account-related emails, which are necessary to provide the Service.

6. Advertising & Remarketing

We display advertising on the Website and may use third-party advertising and remarketing services (such as Google Ads, Meta/Facebook Ads, and similar networks) to show you ads on this Website and on other sites you visit, based on your prior visits to our Website.

  • These services use cookies and similar technologies to collect information about your browsing activity across sites and serve tailored ads.
  • We do not control the practices of third-party advertising networks. Please review their respective privacy policies for details.
  • You can opt out of interest-based advertising from participating companies through the Digital Advertising Alliance, the Network Advertising Initiative, or your device/browser settings.
  • You can opt out of Google’s use of remarketing cookies by visiting Google Ads Settings.

7. Payments & Purchases

When you make a purchase through the Website, we collect the information necessary to process your order, such as your name, contact details, delivery address, and order details. Payment card and financial information is collected and processed directly by our third-party payment processor(s), who are contractually obligated to protect your data and comply with applicable payment card industry standards (PCI-DSS). We do not store full payment card numbers on our own servers.

8. Text Messages (SMS)

If you opt in to receive text messages from us, we collect your phone number, the date and method of your consent, and message delivery/read data. We will send messages related to:

  • Customer care and support
  • Account notifications (activity, status, renewal reminders)
  • Delivery notifications and order status updates
  • Authentication messages (one-time passwords, passcodes)
  • Security alerts
  • Marketing and promotional offers

Consent to receive text messages is never a condition of purchase. Reply STOP to opt out at any time, or HELP for support. Message and data rates may apply; messaging frequency varies. No mobile phone number or consent information collected for texting purposes is shared with or sold to any third party or affiliate for marketing purposes, except Service Providers who must handle it to deliver the messages on our behalf.

9. Sharing Your Personal Data

We may share your Personal Data in the following situations:

  • With Service Providers — including analytics providers (e.g., Google Analytics), payment processors, email/SMS delivery platforms, hosting providers, and advertising/remarketing networks — to operate and improve the Service.
  • For business transfers — in connection with a merger, acquisition, financing, or sale of Company assets.
  • With Affiliates — who are required to honor this Privacy Policy.
  • With other users — if the Service includes public areas where information you share may be visible to others.
  • With your consent — for any other disclosed purpose.
  • For legal reasons — to comply with a legal obligation, respond to lawful requests by public authorities, protect our rights and property, prevent or investigate wrongdoing, or protect the safety of users or the public.

We do not sell your Personal Data for monetary consideration. To the extent our use of analytics and advertising cookies constitutes a “sale” or “share” under California law, see Section 15 for your opt-out rights.

10. Retention of Your Data

We retain Personal Data only as long as necessary for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods:

  • Account information: for the duration of your account plus up to 24 months after closure.
  • Order & payment records: as required by applicable tax and financial record-keeping laws.
  • Customer support correspondence: up to 24 months from ticket closure.
  • Website analytics data (cookies, IP addresses, device identifiers): up to 24 months from collection.
  • Server logs: up to 24 months for security and troubleshooting.
  • Marketing/email consent records: for as long as needed to demonstrate compliance with consent requirements.

We may retain data longer where required by law, needed to establish or defend legal claims, requested by you, or where it exists only in routine encrypted backups pending scheduled deletion. When no longer needed, data is securely deleted or anonymized.

11. International Transfers

Your information is processed at our operating offices in Sri Lanka and by Service Providers who may be located in other countries, including the United States and the European Union. Data protection laws in those countries may differ from those in your jurisdiction. Where required by applicable law (including GDPR), we implement appropriate safeguards — such as Standard Contractual Clauses or equivalent mechanisms — before transferring your Personal Data internationally.

12. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect your Personal Data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

13. Children’s & Minors’ Privacy

The Service is not directed to, and we do not knowingly collect Personal Information from, anyone under the age of 16. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at privacy@kandrsweets.com, and we will take steps to delete it. Where we rely on consent and applicable law sets a higher age of consent than 16, we will seek parental/guardian consent before processing that user’s data.

California residents under 18 who are registered users of the Service may request removal of content or information they have publicly posted, in accordance with California’s “Eraser Law.” Contact us to make such a request.

14. GDPR / UK & EEA Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent UK/Swiss law, including the right to:

  • Access the Personal Data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your Personal Data (“right to be forgotten”), subject to legal exceptions.
  • Restrict or object to our processing of your data, including for direct marketing.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
  • Lodge a complaint with your local data protection supervisory authority.

Legal bases for processing include: your consent, performance of a contract with you, compliance with legal obligations, and our legitimate interests (such as improving and securing the Service), balanced against your rights and interests. Non-essential cookies (analytics, advertising/remarketing) are only set with your consent where required by EEA/UK law, and you may withdraw that consent at any time via our cookie preferences tool or browser settings.

To exercise any of these rights, contact us at privacy@kandrsweets.com.

15. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the following rights regarding your Personal Information:

  • Right to Know — request disclosure of the categories and specific pieces of Personal Information we have collected, used, disclosed, and (if applicable) “sold” or “shared,” and the categories of sources and third parties involved.
  • Right to Delete — request deletion of Personal Information we have collected from you, subject to certain exceptions.
  • Right to Correct — request correction of inaccurate Personal Information.
  • Right to Opt Out of Sale/Sharing — our use of analytics and advertising/remarketing cookies may be considered a “sale” or “share” of Personal Information under CCPA/CPRA (for cross-context behavioral advertising). You may opt out at any time by using our cookie preference tool, adjusting your browser settings, or contacting us. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.
  • Right to Limit Use of Sensitive Personal Information — where applicable.
  • Right to Non-Discrimination — we will not deny goods or services, charge different prices, or provide a different level of service because you exercised your CCPA/CPRA rights.

Categories of Personal Information collected (in the preceding 12 months): identifiers (name, email, phone, IP address); commercial information (order history); internet/network activity (browsing and usage data); geolocation data (approximate, from IP address); and audio/electronic information you submit via customer support.

Categories of sources: directly from you; automatically through your use of the Website; from Service Providers (analytics, advertising, payment, delivery partners).

Business/commercial purposes for collection: as described in Section 4 above.

To exercise your CCPA/CPRA rights, submit a request to privacy@kandrsweets.com. We will verify your identity before fulfilling your request and will respond within the timeframes required by law. You may also designate an authorized agent to make a request on your behalf.

16. CalOPPA Disclosures

In accordance with the California Online Privacy Protection Act (CalOPPA):

  • Users may visit the Website anonymously, except where an account or purchase requires identifying information.
  • This Privacy Policy is linked on our home page and accessible from every page of the Website.
  • Users will be notified of material changes to this Privacy Policy via the “Last updated” date at the top of this page, and where appropriate, by email or a prominent notice on the Website, before the change takes effect.
  • Users may change their Personal Information by emailing us at privacy@kandrsweets.com or through their Account settings, where available.
  • Do Not Track: Our Website does not currently respond to “Do Not Track” browser signals. You can manage tracking preferences through the cookie controls and opt-out tools described in Section 3 and Section 6.
  • We may permit third-party behavioral tracking (analytics and advertising cookies) on the Website, as described above.

17. Links to Other Websites

Our Service may contain links to third-party websites that we do not operate. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the updated Policy on this page and updating the “Last updated” date. Where required by law, we will also notify you via email and/or a prominent notice on the Website before the change becomes effective. We encourage you to review this Policy periodically.

19. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your privacy rights, you can contact us:

This document is provided for general informational purposes and does not constitute legal advice. We recommend having this Privacy Policy reviewed by a qualified attorney familiar with your business and the jurisdictions in which you operate before publishing it. © 2026 K & R Sweet Studio. All rights reserved.