This Privacy Policy describes how Kenna, LLC, doing business as (DBA) Kenna Group, collects, uses, discloses and otherwise processes personal information or personal data (“personal information”) about you. This Privacy Policy applies to information we collect when you access or use our websites or other services or receive communications from Kenna LLC that link to this Privacy Policy (collectively, our “Services”), or when you otherwise interact with us, such as through email or other communication with Kenna Associates. We may provide different or additional notices of our privacy practices with respect to certain products, services or activities, in which case those notices will state whether they supplement or replace the disclosures in this Privacy Policy.
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy. If we make material changes, we will provide you with additional notice (such as by adding a statement to the Services ). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.
This Privacy Policy does not apply to websites or services that Kenna LLC operates or performs as a service provider for its Clients, including but not limited to e-commerce platforms managed on behalf of Clients. Specifically, Kenna LLC utilizes the Shopify platform to build, maintain, and manage online stores for Clients. As part of this service, we may process personal information of end-users (referred to as “Customers”) on behalf of our Clients in accordance with their instructions.
When acting as a service provider on behalf of its Clients, including in the operation of Shopify-powered stores, Kenna LLC strives to respect and protect the privacy of Customers. We do not control the personal information collected by our Clients through their Shopify stores; rather, we process this information strictly in accordance with our Clients’ directives and their applicable privacy policies.
If you are a Customer of one of Kenna LLC’s Clients and have provided personal information—or believe your personal information has been provided—to a Shopify store managed by Kenna LLC, and you have questions about how your personal information is collected, used, processed, or disclosed, please review that Client’s privacy policy directly. If you need further assistance, you may also contact the Client or Shopify’s privacy team for additional information on how your data is handled within the Shopify platform.
The information we collect about you depends on how you interact with us or use our Services. In this section, we describe the categories of information we collect and the sources of this information.
Information You Provide to Us
We collect information that you provide directly to us. For example, you share information with us when you fill in a form, request information, place an order, request customer support, search on our website, complete a survey or otherwise communicate with us.
The types of personal information we may collect include your name, email address, phone number, shipping address, billing, credit card, or other payment information, or any other information you choose to provide.
If you make a purchase from us through a Shopify-powered store, your payment information is collected and processed by Shopify’s payment processing system or another third-party payment processor integrated with Shopify. Kenna LLC does not store or have direct access to your full payment details. All payment transactions are securely handled in accordance with Shopify’s security and compliance standards, as well as the policies of the designated payment processor.
Information We Collect
We collect certain information about your interactions with us, our Clients, and our Services, including data related to both business-to-business (B2B) transactions for Clients ordering merchandise and business-to-consumer (B2C) transactions where Customers purchase merchandise from Shopify stores we operate on behalf of our Clients.
Information We Derive
We may derive information or draw inferences about you based on the information we collect. For example, we may infer that you are looking to purchase certain products based on your browsing behavior and past purchases.
We Do Not Knowingly Collect Children’s Data
Kenna LLC does not knowingly collect or solicit any information from anyone under the age of 16, or knowingly allow such persons to register an account with us or on our websites or become a Client. In the event that we learn that we have collected personal information from a child under age 16 without appropriate permission from their parents or legal guardian, we will delete that information as quickly as possible. If you believe that Kenna LLC might have information from a minor under the age of 16, please contact us at the email or postal address provided below. Requests will not be accepted by phone.
We use the categories of information we collect to provide Services and to improve our website and Services. We also use the information we collect to:
In certain circumstances, we disclose (or permit others to directly collect) information about you. The list below describes when and to whom we disclose the categories of personal information described in the Collection of Information section above.
We utilize Shopify’s built-in analytics tools to collect data about your interactions with Shopify-powered stores operated by Kenna LLC on behalf of our Clients. These analytics may include information such as pages viewed, time spent on product pages, items added to cart, purchase activity, and other engagement metrics. This data helps us and our Clients understand shopping behavior, optimize store performance, and improve the overall customer experience. Shopify may use cookies, tags, and similar tracking technologies to collect and process this information, subject to Shopify’s Privacy Policy and Cookie Policy.
Kenna LLC is headquartered in the United States, and we have operations and vendors in the United States and other countries. Therefore, we and those that perform work for us may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. Where required by law, we provide adequate protection for the transfer of personal information in accordance with applicable law, such as by obtaining your consent, relying on the European Commission’s adequacy decisions, or executing Standard Contractual Clauses. Where relevant, you may request a copy of these Standard Contractual Clauses by contacting us at dpo@kennagroup.com.
Cookies
Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Services and our website not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.
Advertising Choices
If you wish to minimize the amount of interest-based advertising you receive, you may block third-party cookies in your browser settings, use browser plug-ins/extensions, and use your mobile device settings to limit the use of the advertising ID associated with your mobile device. You can also opt out of interest-based ads from companies participating in the following industry opt-out programs by visiting the linked websites: the Network Advertising Initiative (http://www.networkadvertising.org/managing/opt_out.asp) and the Digital Advertising Alliance (https://optout.aboutads.info). Users in the EEA or UK can visit the European Interactive Digital Advertising Alliance (https://youronlinechoices.eu/). Some of the companies we work with may offer their own opt-out mechanisms. For example, you can learn more about how Google uses cookies for advertising purposes by clicking here and opt-out of ad personalization by Google by clicking here.
Many of the opt-out preferences described in this section must be set on each device or browser for which you want them to apply. Please note that some of the advertising companies we work with may not participate in the opt-out mechanisms described above, so even after opting-out, you may still receive interest-based advertisements from other companies. If you opt-out of interest-based advertisements, you will still see advertisements online but they may be less relevant to you.
Access/Know, Deletion, Correction and Other Rights
Subject to certain limitations and applicable law, you may have the right to:
Kenna LLC adheres to Shopify’s data protection and privacy standards when managing personal information collected through Shopify-powered stores. Shopify provides built-in privacy tools that allow Customers to request access to, modify, or delete their personal data, in accordance with privacy laws such as the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). Any data access or deletion requests submitted to us related to a Shopify store we manage will be processed in compliance with Shopify’s privacy framework and in coordination with our Clients where applicable.
You may make these requests, where applicable, by emailing dpo@kennagroup.com.
We will verify your request by asking you to provide information related to your recent interactions with us, such as the date you requested information or the order number or date of your last purchase. We will not discriminate against you for exercising your rights under applicable data protection laws.
If we receive your request from an authorized agent and they do not provide a valid power of attorney, we may ask the agent to provide proof that you gave them signed permission to submit the request on your behalf. If no valid power of attorney is provided, we may require you to verify your own identity directly with us or confirm that you authorized the agent to act on your behalf.
If you are an authorized agent seeking to make a request, please email dpo@kennagroup.com.
For Customers who made purchases through a Shopify-powered store managed by Kenna LLC, additional privacy rights and tools may be available directly through Shopify’s Privacy Policy and Shopify’s privacy request tools, accessible via the Shopify platform.
The California Consumer Privacy Act or “CCPA” (Cal. Civ. Code § 1798.100 et seq.), as modified by the California Consumer Privacy Rights Act or “CPRA”, affords consumers residing in California certain rights with respect to their personal information. If you reside in California, this section applies to you.
Disclosures
We collect and, in the preceding 12 months, we have collected the following categories of personal information: personal identifiers such as real name, postal or electronic address, unique personal identifier or account name assigned by a Kenna LLC system, internet protocol addresses; commercial information; Internet or other electronic network activity information; audio, electronic, and professional or employment-related information for Associates and people who apply for jobs at Kenna LLC or other similar identifiers as defined under Cal. Civ. Code § 1798.140(o). For details about the precise data points we collect and the categories of sources of such collection, please see the Collection of Information section above. We collect this personal information from the following sources: directly from you (when you provide us with personal information); our Clients; automatically through the use of cookies and similar technologies on the Services; and from other third parties, such as social media platforms, publicly-available sources, business partners, and others. We collect personal information for the business and commercial purposes described in the Use of Information section above. In the preceding 12 months, we have disclosed personal information for the following business or commercial purposes described in the Use of Information section above. We have made the disclosures to the following categories of recipients:
-
Identifiers
A real name, postal address, internet protocol address, email address, job title, or other similar identifiers.
Service providers or contractors who provide services for Kenna LLC’s operations (e.g., sales support, information technology, accounts payable), infrastructure and software platform services (e.g., cloud services), marketing, and data analytics if the service being provided requires access to this information
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
A name, signature, address, telephone number or title or role in the company. Some personal information included in this category may overlap with other categories.
Service providers or contractors who provide services for Kenna LLC’s operations (e.g., sales support, human resources), infrastructure and software platform services (e.g., cloud services), marketing, and data analytics if the service being provided requires access to this information
Commercial information
Products or services purchased, obtained, or considered, or other purchasing histories or preferences.
Service providers or contractors who provide services for Kenna LLC’s operations (e.g., sales support, information technology, accounts payable), infrastructure and software platform services (e.g., cloud services), marketing, and data analytics if the service being provided requires access to this information
Internet or other similar network activity
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with a Kenna website.
Service providers or contractors who provide services for Kenna LLC’s operations (e.g., sales support, information technology, accounts payable), infrastructure and software platform services (e.g., cloud services), marketing, and data analytics if the service being provided requires access to this information
Audio, electronic, visual, or similar information
Teams recording of a Client / Kenna LLC meeting
Service providers or contractors who provide services for Kenna LLC’s operations (e.g., sales support, information technology, accounts payable), infrastructure and software platform services (e.g., cloud services), marketing, and data analytics if the service being provided requires access to this information
Professional or employment-related information
Current or past job history or performance evaluations. Some personal information included in this category may overlap with other categories.
Service providers or contractors who provide services for Kenna LLC’s operations (e.g., sales support, human resources), infrastructure and software platform services (e.g., cloud services), marketing, and data analytics if the service being provided requires access to this information
-
To the extent that we may collect sensitive personal information (as defined under the CCPA), we only use or disclose it for purposes permitted under the CCPA (e.g., to provide the Services, detect security incidents and prevent fraud, and to verify and maintain the quality of the Services). We do not collect or use sensitive personal information for the purpose of inferring characteristics about California residents.
Kenna LLC does not sell or share your personal information with third parties, as those terms are defined under the CPRA. We also do not allow our third-party service providers to sell or share your personal information.
Your California Privacy Rights
As a California resident, you have the rights listed below. Please note, these rights are not absolute, and, in some cases, we may not be able to respond to your request, such as when a legal exemption applies or if we are not able to verify your identity.
You may exercise the rights described above as follows:
If you direct us not to sell/share your personal information, we will consider it a request pursuant to California’s “Shine the Light” law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes.
If you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, you have rights and protections under the law regarding the processing of your personal information, and this section applies to you.
Legal Basis for Processing
When we process your personal information, we will do so in reliance on the following lawful bases:
Data Retention
We store personal data associated with your account for as long as your account remains active. We will delete your account data after two years of inactivity. We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations. If you consent to our use of cookies, we may collect and store data analyzing use of our website for up to two months. See our Cookie Policy for additional information.
Additional Rights
In addition to the Privacy Rights described above and subject to certain limitations, you have the right to object to certain processing, withdraw your consent where we process your information on that basis, and the right to request we restrict certain processing. To exercise any of these rights, please email us at dpo@kennagroup.com.
If you have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the links below:
For individuals in the EEA: https://edpb.europa.eu/about-edpb/board/members_en
For individuals in the UK: https://ico.org.uk/global/contact-us/
For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
If you have any questions about this Privacy Policy, please contact us at dpo@kennagroup.com.
You can also contact our Data Protection Officer directly at: dpo@kennagroup.com
Or in writing at:
Kenna Group
Attn: Data Privacy Officer
300 Lenora St. #1502
Seattle, WA 98121