Privacy Policy

This policy explains what information KDM The World (“we”, “us”) collects through this website, how we use it and who we share it with.

What we collect

• When you place an order: your email address, name, shipping address and, if you give them, your phone number and Instagram handle, along with what you ordered, what you paid, the shipping method you chose and any coupon code you used. Your card details are entered into Stripe's secure payment form and go straight to Stripe. We never see or store your full card number. We may also add our own notes to your order, such as a request you sent us.
• When you use the Order help button: the order number and email you enter to look up your order, the options you pick, and anything you type, such as a new address or a message to us. We keep a record of the conversation. When you send us a message or a request through it, we receive it, and the conversation so far, by email.
• When we put an order together for you (for example as a sponsored driver): the name and, if we have it, the email address we enter to send you the payment link, along with the items and prices. When you pay, the same information as any other order is collected.
• When you ask to be emailed when an item is back: your email address and which item you're waiting for.
• When you apply to have your build featured: your car's name, your Instagram handle, your email address, the description and mod list you write, and the photos you upload. If we feature your build, we publish details and photos from your application on this website, which may include your Instagram handle.
• When you sign up for our mailing list (at the bottom of any page or after an order): your email address, when and where you signed up, and when you confirmed. We send one email asking you to confirm; you're only added if you click its link, and signups that are never confirmed are deleted after 30 days. If you unsubscribe, we keep your address marked as unsubscribed so you aren't emailed again, unless you ask us to delete it.
• When you enter Car vs Car: your Instagram handle, the photo of your car and when you entered. We use the photo to make the matchup images we post in our Instagram stories, where followers vote, and we keep a list of the matchups and who won.
• When you vote in a poll: the choice you picked and when. So each person votes once, we also store a scrambled version of the random ID in your voting cookie (below) and a scrambled version of your IP address, never the address itself; we allow only a few votes per internet connection in each poll. Votes are not linked to your name, email or orders, and are kept until we delete the poll.
• When you visit the site: we count visits without cookies. For each page you view, we record the page, the day, the type of device (phone, tablet or computer) and, for the first page of a visit, where you came from (the website that linked to us, the app whose built-in browser you're using, or a tag in the link you followed). To tell visitors apart within a day, we combine your IP address and browser details with a random value that is replaced every day, and store only the scrambled result, never your IP address. Once the daily value is deleted, the result can't be traced back to you or linked to your visits on other days.
• To protect the site: our server uses your IP address to limit how many requests one address can make in a short time. These counts are kept only in the server's memory and are not saved.

Cookies and storage in your browser

• We don't use advertising cookies, tracking pixels or outside analytics services.
• Your cart, a coupon code you entered and which Order help conversation you're in are remembered in your own browser's storage, so they aren't lost if you reload the page. Your cart is sent to our server to show current prices and when you check out.
• On the checkout page, Stripe's payment form runs in your browser. Stripe may set its own cookies and collect information about your device to process the payment and prevent fraud, as described in Stripe's privacy policy.
• If you vote in a poll, we set a cookie holding a random ID, so you can vote only once and the page remembers your vote. It lasts a year and isn't used for anything else.
• The site's admin area uses a sign-in cookie. It's only set for the site owner.

How we use it

• To make, pack and ship your order, and to work out shipping costs and sales tax.
• To email you about your order: your confirmation, shipping updates, refunds and cancellations, and replies to questions you send us.
• To send the one “it's back” email you asked for.
• To review build applications and email you about yours.
• To send the mailing list emails you signed up for, about sales and new drops. Every one has a link to unsubscribe, and so does your email app.
• To count poll votes and show the results.
• To run Car vs Car: making the matchup images, posting them in our Instagram stories and keeping track of who won.
• To see how many people visit and which pages they view, in totals.
• To prevent fraud and abuse, and to keep records of our sales, including for sales tax.

We don't sell your information, we don't share it for advertising, and we only add you to our mailing list if you sign up for it and confirm.

Who we share it with

Only the services and people that help run the shop for us, and only what each one needs:

• Stripe processes payments and calculates the sales tax we charge. It receives your payment details, email, name, shipping address, phone number and Instagram handle (if given) and what you're paying for.
• Printful prints and ships our printed items. For orders with printed items, it receives your name, shipping address, email and phone number (if given). When your cart has printed items, your shipping address (without your name) is also sent to Printful at checkout to get shipping rates.
• Google: if you see address suggestions while typing your address at checkout, what you type is sent from our server to Google's address service to find matching addresses.
• Shippo: when your cart has an item we price shipping for live, your shipping address (without your name) is sent from our server to Shippo at checkout, which gets prices from shipping carriers. When we buy a shipping label for an item we ship ourselves, Shippo receives the name and shipping address on your order to create the label.
• People who make some of our handmade items for us: for an order that includes an item they make, they can see the order number and date, what was ordered, and the name and shipping address on the order. They don't see your email address, phone number, Instagram handle or payment details.
• Resend sends our emails, so it receives your email address and the content of the emails we send you.
• Instagram (Meta): if you enter Car vs Car, your car's photo is posted in our Instagram stories, where it's public.
• Railway hosts this website and its database, where the information above is stored.
• Shipping carriers receive the name and address on your package.

We may also share information if the law requires us to.

How long we keep it

• Orders: kept as part of our business and tax records.
• Copies of the emails we send: deleted after 90 days.
• Visit counts: deleted after about 13 months. The daily random value is deleted each day.
• “Email me when it's back” requests: deleted once the email is sent, or after one year.
• Order help conversations, build applications and their photos: kept until we delete them.
• Car vs Car photos: deleted from our website when the contest ends (or when your entry is removed). The handles and who won each matchup are kept until we delete them. Stories we post stay on Instagram as long as Instagram keeps them.

Your choices

Email kdmtheworld@outlook.com to ask what information we have about you, or to ask us to correct or delete it. We may need to keep order records that we're required to keep for taxes.

Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top.

Contact

Questions about your privacy: kdmtheworld@outlook.com.