Privacy policy
Last updated: 5 September 2026
Redline Commerce LLC, trading as KHYLAN, operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). KHYLAN is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, or make a purchase using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in respect of the collection, processing and disclosure of your personal information.
Data controller. For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller is:
Redline Commerce LLC, trading as KHYLAN
Registration number: L26000398236
7901 4th St N #35152, St. Petersburg, FL 33702, United States
hello@khylan.comPlease read this Privacy Policy carefully. By accessing the Services, you acknowledge that you have read it and understand how your information is collected, used and disclosed.
Personal information we collect
By "personal information" we mean information that identifies you or can reasonably be linked to you. Depending on how you interact with the Services, we may collect or process:
- Contact details — your name, billing address, shipping address, phone number and email address.
- Financial information — payment card details, transaction details, form of payment and payment confirmation. We do not store full card numbers on our systems; payments are handled by our payment processor.
- Account information — username, password, preferences and settings.
- Transaction information — items you view, add to your basket or wishlist, purchase, return, exchange or cancel, and your past transactions.
- Communications with us — the content of any customer support enquiry or other message.
- Device information — your device, browser, network connection, IP address and other unique identifiers.
- Usage information — how and when you interact with and navigate the Services.
Where we collect it from
- Directly from you — when you create an account, place an order, or contact us.
- Automatically — from your device when you use the Services, through cookies and similar technologies.
- From our service providers — where we engage them to process information on our behalf.
- From our partners and other third parties.
Cookies and similar technologies
We use cookies and similar technologies to operate the store, remember your basket, understand how the Services are used, and deliver relevant advertising.
[CONFIRM — this list must match the tools actually installed on your store. Delete anything you are not using, and add anything you are. Listing tools you do not use, or omitting ones you do, is a compliance problem.]
| Purpose | Provider | What it does |
|---|---|---|
| Essential | Shopify | Basket, checkout, session, security. Cannot be disabled. |
| Analytics | Shopify Analytics | Aggregate traffic and sales reporting |
| Analytics | Google Analytics | How visitors find and use the site |
| Advertising | Google Ads / Google Tag | Measures ad performance and enables remarketing |
| Advertising | Meta Pixel | Measures ad performance and enables remarketing |
You can manage non-essential cookies through the cookie banner on our site, and control cookies generally through your browser settings. Disabling essential cookies will prevent the store from working.
How we use your personal information
- To provide and improve the Services — to perform our contract with you, process payments, fulfil and ship your orders, handle returns and exchanges, manage your account, remember your preferences, and tailor your shopping experience.
- Marketing and advertising — to send promotional communications by email, and to show you advertising on other websites, including based on items you have viewed or added to your basket. Where required, we do this only with your consent, which you may withdraw at any time.
- Security and fraud prevention — to authenticate your account, provide a secure payment experience, and detect or investigate fraudulent or malicious activity.
- Communicating with you — to provide customer support and respond to your enquiries.
- Legal reasons — to comply with applicable law, respond to valid legal process, and enforce or investigate potential breaches of our terms.
Our lawful bases for processing
Under the UK GDPR we rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Processing and fulfilling your order | Performance of a contract |
| Customer support | Performance of a contract |
| Marketing emails and advertising cookies | Consent |
| Fraud prevention and site security | Legitimate interests |
| Improving the Services | Legitimate interests |
| Retaining transaction records | Legal obligation |
How we disclose personal information
We may disclose your personal information:
- To Shopify, and to vendors and service providers who act on our behalf — payment processing, fulfilment and shipping, IT, analytics, customer support and cloud storage.
- To business and marketing partners to provide marketing services and advertise to you. These partners use your information in accordance with their own privacy notices.
- Where you direct or consent to disclosure, such as to ship your order or through your use of social media widgets.
- Within our corporate group.
- In connection with a business transaction such as a merger, or to comply with legal obligations, enforce our terms, or protect our rights and the rights of others.
We do not sell your personal information.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify and third parties that may be located in countries other than the one you live in.
We also use certain Shopify enhanced features that incorporate data from your interactions with our store, other merchants, and Shopify. In these circumstances Shopify is responsible for the processing of your personal information, including responding to requests to exercise your rights over that processing. To learn more, see the Shopify Consumer Privacy Policy at privacy.shopify.com.
Third-party websites and links
The Services may link to websites operated by third parties. If you follow those links, you should review their privacy and security policies. We are not responsible for the privacy or security of those sites. Our inclusion of a link does not imply endorsement.
Children's data
The Services are not intended for use by children, and we do not knowingly collect personal information from anyone under 18. If you are the parent or guardian of a child who has provided us with their personal information, contact us using the details below and we will delete it.
Security and retention
No security measure is perfect, and we cannot guarantee absolute security. Any information you send to us may not be secure while in transit. Please do not use unsecure channels to send us sensitive information.
How long we retain your personal information depends on why we hold it:
| Information | Retention period |
|---|---|
| Order and transaction records | 6 years, to meet accounting and tax obligations |
| Account information | While your account is active, plus 12 months |
| Marketing preferences | Until you withdraw consent, plus a record of the withdrawal |
| Customer support correspondence | 2 years from the date of the enquiry |
| Website analytics | As set by the relevant provider |
Your rights
If you are in the United Kingdom, you have the following rights over your personal information. These rights are not absolute and may not apply in every circumstance.
- Access — to request a copy of the personal information we hold about you.
- Rectification — to have inaccurate information corrected.
- Erasure — to request deletion of your personal information.
- Portability — to receive your information in a portable format and have it transferred to another controller.
- Restriction — to ask us to restrict how we process your information.
- Objection — to object to processing based on our legitimate interests, and to object to direct marketing at any time.
- Withdrawal of consent — where we rely on consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, email hello@khylan.com. We will respond within one month as required by the UK GDPR. We may need to verify your identity first.
You can opt out of marketing emails at any time using the unsubscribe link in any email we send. We may still send you non-promotional messages about your account or orders.
We will not discriminate against you for exercising any of these rights.
Complaints
If you have a complaint about how we handle your personal information, please contact us at hello@khylan.com so we can try to resolve it.
You also have the right to lodge a complaint with the UK's data protection authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.ukInternational transfers
We may transfer, store and process your personal information outside the United Kingdom, including in the United States where our company is registered.
Where we transfer personal information out of the UK, we rely on recognised safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or a finding of adequacy in respect of the destination country.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the revised policy on this page, update the "Last updated" date, and provide notice where required by law.
Contact
If you have questions about this Privacy Policy or would like to exercise any of your rights, contact us at hello@khylan.com.
Store name: KHYLAN
Company name: Redline Commerce LLC
Registration number: L26000398236
Address: 7901 4th St N #35152, St. Petersburg, FL 33702, United States
Email: hello@khylan.com
Phone: +44 7853 300272
Customer Service Hours: Monday to Friday, 9am to 6pm (GMT). Saturday and Sunday closed.