Privacy Policy

1. Who is responsible for your data

KRISHELDAN PROPERTIES LIMITED, trading as Dwellful(“we”, “us”), is the data controller for personal data processed through krisprop.shop. Our registered office is 8 Macaulay Grange, Aberdeen, United Kingdom, AB15 8FF. You can reach our team about privacy at support@krisprop.shop or +44 7298949434.

2. What we collect

• Order and delivery data: name, shipping address, email, phone number and the kits you buy.
• Account and membership data: email, plan tier, billing interval and order history (if you subscribe to Member or Resident).
• Payment data: handled by our payment processor. We receive confirmation, the last four digits and card brand — never your full card number.
• Support and lead data: messages you send through the Contact form and details you submit to the Kit Builder (home type, rooms, budget, email).
• Technical data: IP address, device and browser type, and cookie identifiers (see Cookies below).

3. Collection sources (where the data comes from)

Our collection sources are:

• Directly from you: when you place an order, subscribe, contact us, request a bulk quote or use the Kit Builder.
• Automatically from your device: technical and cookie data collected by your browser and our hosting and analytics providers.
• From our payment processor: payment confirmation and limited card metadata (brand, last four digits) from Stripe.
• From shipping carriers: delivery tracking and status updates for your order.

3a. Order fulfilment data

To fulfil an order we process your name, shipping address, email, phone number, the kits purchased and the delivery status. This order fulfilment data is used to pack your kit, hand it to a shipping carrier, keep you updated, handle returns or replacements, and meet our tax and accounting obligations. Delivery carriers receive only the name and address needed to complete delivery.

4. Why we use it and our legal bases

• To fulfil orders and ship kits — performance of a contract (UK/EU GDPR Art. 6(1)(b)).
• To manage memberships and process payments — contract and legal obligation.
• To respond to support and Kit Builder enquiries — legitimate interests and, where you opt in, consent.
• To keep the site secure and prevent fraud — legitimate interests and legal obligation.
• To send marketing (only if you opt in) — consent, which you can withdraw at any time.

5. Payment provider boundary

Card payments are processed by Stripe. Stripe collects and processes your card details directly on its own secure, PCI-DSS-compliant systems. Dwellful does not see, store or transmit your full card number. We only receive a payment result and limited metadata needed to confirm and support your order. Prices are charged in USD.

6. Who we share it with

We share data only with processors that help us run the store:

• Hosting & delivery of the site: our cloud hosting provider (Vercel).
• Payments: Stripe, for checkout, subscriptions and refunds.
• Database & lead storage: Supabase, for order-related records and enquiry leads.
• Shipping carriers: the couriers who deliver your kit, who receive your name and delivery address.
• Email: our transactional email provider for order confirmations and replies.

We do not sell your personal data.

7. International transfers

Some processors operate outside the UK/EEA, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or an adequacy decision.

8. How long we keep it

Order and tax records are retained for up to seven years to meet accounting and legal obligations. Support and Kit Builder enquiries are kept for up to 24 months. Uploaded space photos, if you ever provide them to the Kit Builder, are cleared after 30 days. Marketing data is kept until you opt out.

9. Security

We use encryption in transit (HTTPS), access controls and reputable processors. Payment card data is isolated with Stripe. No system is perfectly secure, but we take reasonable steps to protect your data.

10. Your rights

Under UK GDPR and EU GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. Under the California Consumer Privacy Act (CCPA), California residents have the right to know, delete, correct and opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights.

11. Do Not Sell or Share

We do not sell or share personal information as defined by the CCPA. If this ever changes, we will provide a clear opt-out. To make any privacy request, email support@krisprop.shop.

12. Cookies and analytics

We use strictly necessary cookies to run the cart and checkout, and limited analytics to improve the store. See our Cookie Policy for details and choices.

13. Automated decisions and children

The Kit Builder makes rule-based suggestions only; it does not make legally significant automated decisions about you. Our store is not directed to children. It may not be used by anyone under 13, and 13–17 year-olds may only order with the consent and supervision of a parent or guardian.

14. Complaints and contact

Contact us first at support@krisprop.shop. If you are in the UK you may also complain to the UK Information Commissioner’s Office; in the EU, to your local supervisory authority; and in California, to the California Privacy Protection Agency. This policy is governed by the laws of England and Wales.