Privacy policy
Updated: 2026-11-08
Who is responsible
The controller of your personal data is Kotoh Labs LLC, 382 NE 191st St, Miami, FL 33179, USA, trading as Kotoh Brands. Contact for any privacy question: [email protected].
What we collect
- Order data: name, email, delivery address, phone number if you give it, products ordered and order history.
- Quiz and preference answers you choose to give on a brand site (for example your birth date for a crystal set).
- Payment data: processed by Stripe; we receive confirmation of payment and limited details (such as card brand and last four digits), never your full card number.
- Messages you send to support.
- Technical data: IP address, browser and device information and basic usage data needed to run and secure the sites.
Why we use it, and the legal basis
- To take, deliver and support your order and any subscription (performance of a contract).
- To prevent fraud and keep the sites secure (legitimate interests).
- To keep accounting and tax records and handle legal claims (legal obligation; legitimate interests).
- To send marketing emails, only if you agree; you can unsubscribe at any time with one click (consent).
Who we share it with
We use service providers who process data on our behalf and under contract: Stripe (payments and fraud prevention), Cloudflare (website hosting, security and email routing), our email delivery provider (order and service emails) and delivery carriers (to deliver your parcel). We don't sell your personal data.
International transfers
We are based in the United States and some providers process data outside the European Economic Area. Where that happens we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider is certified.
How long we keep it
Order and accounting records for as long as tax law requires (generally up to 6 years); support messages for up to 3 years after the last contact; marketing data until you unsubscribe.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Email [email protected] and we'll respond within one month. You also have the right to lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.
Cookies
Our sites use cookies and similar technologies that are necessary for the site and checkout to work. If we use analytics or advertising cookies, we ask for your consent first and you can change your choice at any time.