Privacy policy

Last updated: 29 July 2026

Who we are

This policy explains how Kuvr handles your personal information. "Kuvr", "we", "us" and "our" mean:

• In the UK and elsewhere: Janus Ridgeway Ltd, trading as Kuvr.co, a company registered in England and Wales (company number 11650388), address Primrose Business Park, Whites Lane, Blackwell, Derbyshire, DE55 5GX, United Kingdom.
• In the United States: Kuvr LLC, a Wyoming limited liability company, 30 N Gould St, Ste N, Sheridan, WY 82801.

If you have any question about this policy or your data, contact us through our contact form.

What this policy covers

It covers the personal information we collect when you visit kuvr.co, place an order, request a free design or quote, contact us, or interact with our ads and emails. Different laws apply depending on where you are — the UK/EU rights and US privacy rights sections below set out the specifics for each.

The information we collect

Information you give us

• Account and order details: name, email, phone, billing and delivery address, and what you bought.
• Design and quote requests: the measurements, product configuration, photos and notes you provide so we can design a custom cover, plus your contact details. We capture completed configuration and quote values — we do not record your keystrokes.
• Support and reviews: anything you send us through the contact form, email or chat, and any review you leave.

Information we collect automatically when you use the site

• Device and connection data: IP address, general location (e.g. country), browser and device type, and referring pages, where lawful to collect.
• First-party site activity: we use our own tracking (a visitor_id stored in a first-party cookie, _kuvr_vid, and in local storage) together with session identifiers to understand how visitors move through the site — pages viewed, sections engaged with, and steps in the design/quote process. This helps us improve the site and measure our advertising.
• Marketing attribution: where you arrive from an ad, we capture campaign parameters (UTMs) and advertising click identifiers (such as Google gclid/wbraid and Meta fbclid/fbp/fbc) so we can understand which ads lead to orders.
• Cookies and similar technologies: see the Cookies section below and our cookie policy.

We never collect payment card details. Payment is handled by our payment providers (Shopify Payments and Klarna) on their own secure systems; we don't see or store your card number.

Information from third parties

We receive limited data from the providers we use — for example order and payment confirmation from Shopify and our payment providers, and advertising measurement data from the ad platforms below.

How we use your information

• To take, make and deliver your order, and to design your custom cover.
• To provide the free design/quote service and respond to your enquiries.
• To provide customer support and handle warranty and returns.
• To send you marketing where you've agreed to receive it (or where the law otherwise allows), and to let you opt out at any time.
• To measure and improve our advertising and website, including understanding which ads and pages lead to orders.
• To prevent fraud and keep the site secure.
• To meet our legal and tax obligations.

Cookies, tracking and session analytics

We use cookies and similar technologies for essential site functions (like keeping your cart and session working), and — subject to the consent rules below — for analytics and advertising. This includes:

• Our own first-party tracking described above.
• Advertising pixels and measurement: the Meta Pixel and Meta Conversions API, and Google Ads conversion measurement (including Google's Data Manager for delayed conversions). Where we send order or conversion data to these platforms to measure our ads, we do so using hashed (irreversible) identifiers such as a hashed email or phone number, not your raw details.
• Session analytics / replay: Microsoft Clarity, which records anonymised session activity (with personal data masked) to help us find and fix usability problems. These recordings are retained for a short period (around 30 days).
• Email analytics: Klaviyo, our email platform, which tells us whether marketing emails were opened or clicked.

Full detail of the individual cookies is in our cookie policy.

Consent and your choices about tracking

How we ask for consent depends on where you are:

• UK, EEA and Switzerland (opt-in): non-essential analytics and advertising tracking only runs after you agree via our cookie banner (Accept / Decline / Manage preferences). Essential cookies needed to run the site work without consent. You can change your choice at any time.
• United States (opt-out): analytics and advertising tracking runs by default, and you can opt out at any time (see Your US privacy rights below). We honour recognised opt-out signals, including the Global Privacy Control (GPC).

We record your consent choice and apply it to your data. We never grant consent on your behalf.

The providers and partners we share data with

We don't sell your personal information for money. We share it only with the providers that help us run the business, and as required by law:

Provider	Purpose
Shopify	Our store platform and checkout, including its Customer Privacy (consent) tools
Shopify Payments / Klarna	Processing your payment
Klaviyo	Sending and measuring our marketing and service emails
Meta (Facebook/Instagram)	Advertising and conversion measurement (hashed identifiers)
Google	Advertising and conversion measurement (hashed identifiers), and analytics
Google Customer Reviews	Inviting you to rate your experience with us after your order arrives. For this we share your order confirmation email address with Google, along with your order reference, delivery country and estimated delivery date. Google emails you a survey only if you opt in on our order confirmation page, and the rating contributes to our overall store rating on Google. This is a review of our service, not of the product
Microsoft Clarity	Anonymised session analytics / replay to improve the site
Loox	Collecting and displaying product reviews
Google Cloud / Firebase (incl. BigQuery)	Securely storing and analysing our own data
Our manufacturing and delivery partners	Making and delivering your cover

We may also share information where we have to — for example to comply with the law, respond to lawful requests, prevent fraud, or in connection with a sale or reorganisation of our business.

(For US customers: sharing data with advertising platforms for cross-context advertising may be treated as a "sale" or "sharing" under some state laws. You can opt out — see below.)

International data transfers

Kuvr operates in the UK and the US, and some of our providers are based in the United States and elsewhere. Where we transfer personal data outside the UK/EEA, we use appropriate safeguards (such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses, or transfers to countries with adequate protection).

How long we keep your information

We keep personal information only as long as we need it:

• Order and account records: for as long as you're a customer and afterwards as required for tax, accounting and legal reasons.
• Design/quote and marketing records: until you ask us to stop or withdraw consent, then removed or suppressed as appropriate.
• Site analytics events: typically around 90 days.
• Session and visitor records: typically up to around 25 months.
• Session replays (Clarity): around 30 days.
• Support messages: for as long as needed to help you and keep a record of our service.

Your UK/EU privacy rights

If you're in the UK or EEA, under the UK GDPR / GDPR you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and to withdraw consent at any time. The legal bases we rely on are: performing our contract with you, your consent, our legitimate interests (running and improving the business, and measuring advertising, balanced against your rights), and compliance with a legal obligation.

To exercise any of these, contact us through our contact form. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/concerns.

Your US privacy rights

Depending on your state (for example California under the CCPA/CPRA, and similar laws elsewhere), you may have the right to: know what personal information we collect and how we use it; access or delete it; correct it; and opt out of the "sale" or "sharing" of your information and of targeted advertising. We don't sell your information for money, and we don't knowingly process the data of anyone under 16 for targeted advertising. We won't discriminate against you for exercising these rights.

To opt out of advertising-related sharing, contact us through our contact form; we also honour the Global Privacy Control (GPC) signal from your browser. To make an access or deletion request, use the same contact form — we'll verify your identity before acting.

Children

We don't sell to, or market to, children. If you're under 18 you should only use the site with a parent or guardian's involvement, and we don't knowingly collect data from children.

Security

We protect your information with appropriate technical and organisational measures, including encryption of data in transit (SSL/TLS). No system is perfectly secure, but we take safeguarding your data seriously.

Changes to this policy

We'll update this policy when our practices change. The version posted here is the one that applies when you use the site.

Contact us

Questions, requests or complaints about your data: our contact form — or write to Janus Ridgeway Ltd, Primrose Business Park, Whites Lane, Blackwell, Derbyshire, DE55 5GX, United Kingdom (UK) or Kuvr LLC, 30 N Gould St, Ste N, Sheridan, WY 82801 (US).