PRIVACY POLICY (UK)

Last updated: 19 February 2026

This Privacy Policy explains how Bista Group Limited (trading as “Your Kathmandu”) (“we”, “us”, “our”) collects, uses, discloses, and protects personal information when you use our website and services (the “Site”).

Contact for privacy requests: info@yourkathmandu.com

1) Who we are

Controller: Bista Group Limited (trading as “Your Kathmandu”) (UK)

Email: info@yourkathmandu.com

2) Information we collect

We may collect:

Identity & contact details: name, email, phone number, billing and delivery address.
Account information (if you create an account): login details and preferences.
Order and transaction details: items purchased, order history, delivery instructions, returns/refunds, and related communications.
Payment information: payments are processed by Wix Payments and/or Stripe and/or PayPal. We receive payment confirmation and limited details needed to manage your order; we do not store full card details.
Customer support communications: messages you send us (forms, email, chat).
Technical & usage data: IP address, device/browser info, pages viewed, approximate location, and interactions with the Site.
Cookies and similar technologies: identifiers used for essential site functions, preferences, analytics, and advertising measurement.

3) How we collect information

We collect information when you:

place an order or attempt checkout,
create an account,
subscribe to marketing,
contact us,
browse the Site (via cookies and similar technologies)

4) How we use your information

We use personal information to:

operate the Site and provide its features,
process orders, payments, delivery, returns and refunds,
communicate with you about orders, accounts, and support,
improve and secure the Site, prevent fraud, and troubleshoot,
send marketing communications where permitted and according to your preferences,
comply with legal obligations and enforce our terms.

5) Legal bases (UK GDPR)

We process personal information under:

Contract (to fulfil orders and provide services),
Legitimate interests (to operate, improve, and secure our business and Site),
Consent (for certain cookies/marketing where required),
Legal obligation (tax, accounting, compliance).

6) Sharing your information

We may share personal information with:

Wix (website platform services such as hosting, site features, and security).
Payment processors: Wix Payments, Stripe, and PayPal (to process payments and prevent fraud).
Delivery/logistics partners (to deliver orders).
Analytics and advertising partners:
- Google Analytics (to understand Site usage and improve performance), and
- Meta Pixel (to measure advertising performance and help show relevant ads).
Service providers supporting communications, marketing, and operations.
Professional advisers (legal/accounting) where necessary.
Authorities, where required by law or to protect rights, safety, and security.

We do not sell your personal information.

7) Google Analytics and Meta Pixel

We use:

Google Analytics to collect information about how visitors use the Site (e.g., pages visited, time on site, interactions, device/browser).
Meta Pixel to help measure the effectiveness of our ads and understand actions taken on the Site (e.g., page views, add-to-cart, purchases), and to support ad targeting/retargeting.

These tools may use cookies or similar technologies and may receive technical identifiers (such as cookie IDs and IP address) and event data from your browser/device.

8) Cookies and similar technologies

We use cookies and similar technologies for:

Essential functions (security, page navigation, checkout),
Preferences (remembering settings),
Analytics (Google Analytics),
Advertising measurement/targeting (Meta Pixel).

You can manage cookies via your browser settings and, where available, the Site’s cookie banner/preferences.

9) International transfers

Some providers (including Google, Meta, and payment providers) may process data outside the UK. Where this happens, we use appropriate safeguards required by UK data protection law (such as approved contractual protections).

10) Marketing preferences

You can opt out of marketing at any time by using the unsubscribe link in emails or by contacting **info@yourkathmandu.com**.

Service messages (e.g., order confirmations) will still be sent when necessary.

11) Data retention

We keep personal information only as long as needed for the purposes in this policy, including legal, accounting, and reporting requirements.

12) Your rights (UK)

You may have rights to:
access, correct, or delete your personal information,
restrict or object to certain processing,
data portability,
withdraw consent (where processing is based on consent).

To exercise rights, contact info@yourkathmandu.com.

You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk.

13) Security

We use reasonable measures to protect personal information. No system is completely secure, but we work to safeguard your data.

14) Children

Our Site is not intended for children, and we do not knowingly collect personal information from children.

15) Changes to this policy

We may update this policy from time to time. We will post the updated version and update the “Last updated” date.