Privacy Policy
AKOLIYA GROUP (“we,” “us,” “our”) is dedicated to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, process, and safeguard your information when you access our website, akoliyagroup.com (the “Site”), and engage with our B2B services. As a global organization operating from the United Kingdom, we comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA).
Article 1: Data Controller
For the purposes of the UK GDPR and EU GDPR, the data controller is:
AKOLIYA GROUP, LONDON, UNITED KINGDOM
Email for data protection inquiries: [email protected]
Article 2: Personal Data We Collect
We collect personal data to provide, enhance, and secure our services. The data collected may include:
Identifiers:
- Full name, business name, postal address, email address, telephone number, account username, IP address.
- Company registration numbers and tax identification numbers (e.g., VAT/GST).
Commercial Information:
- Records of products purchased, considered, or inquired about.
- Purchase and consumption histories, transaction details, and secure payment information.
- Shipping details.
Internet or Other Electronic Network Activity Information:
- Browsing history, search history, and interactions with our Site (see our Cookie Policy for details).
Professional or Employment-Related Information:
- Job titles, organizational affiliations, and other work-related details.
KYC/AML Compliance Data:
- Government-issued identification, proof of address, and corporate documentation for due diligence.
Article 3: How We Collect Your Data
Directly from You:
- When you create an account, place an order, or contact us.
- Through subscription to newsletters or interactions with customer service.
Automatically:
- Via cookies and similar technologies that collect technical data about your device and browsing activities.
From Third Parties:
- Data received from payment processors, logistics providers, and other service partners necessary for fulfilling our obligations to you.
Article 4: Legal Basis for Processing (UK/EU GDPR)
For individuals within the UK or EEA, we process personal data on the following legal grounds:
Contractual Necessity:
- To perform our contract with you, including processing orders and delivering goods.
Legitimate Interest:
- To improve our Site and services, ensure network security, prevent fraud, and conduct direct marketing of similar products to existing clients (where permitted).
Legal Obligation:
- To meet regulatory and compliance obligations, including AML/KYC requirements.
Consent:
- Where legally required, such as for non-essential cookies or marketing communications to prospective clients. You may withdraw consent at any time.
Article 5: How We Use Your Personal Data
We use collected data to:
- Create and manage your B2B account.
- Process transactions, manage payments, and coordinate shipping.
- Comply with legal obligations, including AML/KYC requirements.
- Enhance our Site, products, and services.
- Communicate regarding your account, orders, and inquiries.
- Send marketing communications and promotional offers (subject to your preferences).
- Prevent fraud and maintain the security of our digital assets.
Article 6: Data Sharing and Disclosure
We do not sell personal data. However, we may share information with:
Logistics Providers and Secure Couriers:
- Partners such as UPS, FedEx, and Brinks to facilitate deliveries.
Payment Processors:
- To securely manage payment transactions.
IT and System Administration Providers:
- Providers hosting and maintaining our infrastructure.
Professional Advisors:
- Legal, banking, and insurance consultants for operational needs.
Government and Regulatory Authorities:
- In compliance with legal requirements or for customs and tax purposes.
Article 7: International Data Transfers
As an organization based in the UK with a global client base, personal data may be transferred internationally. When transferring data from the UK, EEA, or Switzerland to other countries, we ensure robust safeguards, including Standard Contractual Clauses (SCCs) or other legally accepted transfer mechanisms.
Article 8: Data Security
We implement industry-standard technical and organizational measures, such as encryption and access controls, to protect your data. While we strive to ensure security, no method of online transmission is completely secure.
Article 9: Data Retention
We retain personal data only as long as necessary to fulfill its purpose, including legal, tax, and accounting requirements. Factors influencing retention include the data’s nature, sensitivity, and applicable legal mandates.
Article 10: Your Data Protection Rights
Depending on your jurisdiction, your rights may include:
- Right to be informed: About our data practices.
- Right of access: To obtain copies of your personal data.
- Right to rectification: To correct inaccuracies.
- Right to erasure: To request deletion of your data.
- Right to restrict processing: To limit how we use your data.
- Right to data portability: To transfer data to another service.
- Right to object: To processing, particularly for marketing.
- Right to opt-out: Of data sales (CCPA-specific).
- Right to lodge a complaint: With the UK Information Commissioner’s Office (ICO) or other supervisory authority.
To exercise these rights, contact us at [email protected].
Article 11: Policy for Minors
Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors.
Article 12: Changes to this Privacy Policy
We may periodically update this Privacy Policy to reflect legal or operational changes. Updated versions will include a “Last Revised” date and take effect immediately upon publication.
For any questions or concerns, please contact us at [email protected].