Privacy Policy

1. Introduction

This Privacy Policy explains how KERLITH, LLC collects, uses, stores, shares, and protects personal information when you visit, interact with, or make a purchase through kerlith.com.

We are committed to handling personal information responsibly and using it only for legitimate business, transactional, security, legal, and customer service purposes. By using our website or submitting information through it, you acknowledge the practices described in this Privacy Policy, subject to any rights available to you under applicable law.

2. Website Platform & Store Infrastructure

kerlith.com is a self-hosted online store built on WordPress and powered by WooCommerce. WordPress provides the website content management framework, while WooCommerce provides ecommerce functionality such as product pages, shopping carts, checkout, customer accounts, order management, and transaction-related records.

Because the store is self-hosted, KERLITH, LLC manages or arranges hosting for the website rather than operating the store through a fully hosted marketplace. Hosting providers, technical service providers, security providers, and infrastructure vendors may process limited technical information where necessary to operate, secure, maintain, or troubleshoot the website.

3. Information We Collect

We may collect personal information that you voluntarily provide when placing an order, creating or using an account, contacting customer support, submitting a form, requesting a return or refund, subscribing to communications, or otherwise interacting with kerlith.com.

Depending on how you use the website, this information may include your name, email address, telephone number, billing address, shipping address, order details, purchased items, transaction references, customer service communications, return information, refund information, and other information reasonably necessary to provide the requested service.

4. Order & Transaction Information

When you place an order, WooCommerce may create and maintain an order record containing information necessary to process and administer the transaction. This may include the order number, products ordered, quantities, transaction amount, applicable shipping charges, billing and shipping information, payment status, selected payment method, order status, shipment information, and refund status.

We use this information to verify orders, fulfill purchases, arrange shipping, provide tracking information, process returns and refunds, respond to customer inquiries, maintain accounting records, prevent fraud, and resolve transaction or payment disputes.

5. Payment Information & Third-Party Payment Providers

Payments made through kerlith.com are processed by third-party payment service providers, primarily Stripe and PayPal. Depending on the payment method selected at checkout, Stripe may process card transactions and supported digital wallet payments, while PayPal processes payments completed using the PayPal service.

KERLITH, LLC does not store customers' complete payment card numbers, CVV or CVC security codes, PayPal passwords, digital wallet credentials, or complete payment authentication credentials on our website or servers.

Sensitive payment credentials are submitted to and processed through the secure infrastructure of the applicable payment provider. We may receive limited transaction-related information such as transaction identifiers, payment status, card brand, limited card information provided by the processor, billing details, payment method type, fraud or risk indicators, and refund status where this information is necessary to administer the transaction.

6. Stripe & PayPal Payment Processing

Stripe and PayPal operate independently as third-party payment service providers and process payment information according to their own privacy, security, fraud-prevention, and compliance procedures.

When you use a payment method processed by Stripe or PayPal, certain information may be transmitted directly to the applicable provider in order to authorize the payment, authenticate the transaction, perform fraud screening, manage payment risk, process refunds, or address payment disputes.

We do not control how Stripe, PayPal, banks, card networks, card issuers, or digital wallet providers independently process information within their own systems. Their handling of payment information is subject to their respective privacy policies and legal obligations.

7. Payment Security

We use commercially reasonable safeguards designed to protect payment-related activity conducted through kerlith.com. Connections between a customer's browser and our website are protected using HTTPS and SSL/TLS encryption, which helps protect information while it is transmitted across networks.

Sensitive payment credentials are processed through Stripe or PayPal rather than stored directly by KERLITH, LLC. Depending on the payment method and transaction, payment security may also involve tokenization, PCI DSS-compliant payment processing infrastructure, 3D Secure authentication, automated fraud screening, transaction risk analysis, card issuer verification, and digital wallet authentication.

These technologies are intended to reduce unauthorized access, fraudulent transactions, and unnecessary exposure of sensitive payment credentials.

8. How We Use Personal Information

We may use personal information to operate and administer kerlith.com, process purchases, verify payments, prepare orders, arrange worldwide shipping, provide shipment updates, manage customer accounts, respond to customer inquiries, process returns and refunds, investigate damaged or missing shipments, prevent fraud, maintain security, and comply with applicable legal obligations.

We may also use limited information for internal administration, technical troubleshooting, website performance monitoring, record keeping, accounting, risk management, and improving the usability and reliability of our services.

We do not use personal information in ways that are materially unrelated to the purposes for which it was collected unless permitted or required by applicable law.

9. Shipping & Logistics Providers

Because kerlith.com provides worldwide shipping, we may share information necessary to deliver an order with postal services, shipping carriers, logistics providers, fulfillment providers, customs intermediaries, and local last-mile delivery partners.

Information shared for delivery purposes may include the recipient's name, shipping address, telephone number, email address where required, order reference, package information, and customs-related information required for international delivery.

We provide these third parties only with information reasonably necessary to perform shipping, delivery, customs clearance, tracking, or related logistics services.

10. Customer Service, Returns & Refund Information

If you contact us regarding an order, return, refund, damaged shipment, incorrect item, delivery issue, or other customer service matter, we may retain the information you provide as part of the corresponding customer service record.

This may include emails, photographs, order numbers, tracking information, descriptions of the issue, return shipping information, refund records, and other documentation reasonably necessary to investigate and resolve the request.

Such records may also be used where necessary to establish that a return, refund, replacement, delivery, or other transaction-related issue was appropriately handled.

11. Payment Disputes, Chargebacks & Transaction Evidence

If a customer initiates a payment dispute, chargeback, unauthorized-payment claim, PayPal dispute, Stripe dispute, or similar financial claim, we may use and disclose relevant transaction information for the purpose of responding to that claim.

Information submitted to the applicable payment provider, bank, card network, or card issuer may include order records, payment authorization information available to us, billing details, customer communications, applicable store policies, shipping records, tracking numbers, carrier scans, proof of delivery, return requests, refund records, and other information reasonably necessary to document the transaction.

We maintain these records to protect customers, respond accurately to payment disputes, prevent fraudulent activity, demonstrate fulfillment of legitimate orders, and comply with the procedures of Stripe, PayPal, banks, card issuers, and applicable financial networks.

12. Cookies & Similar Technologies

kerlith.com may use cookies and similar browser technologies to provide essential website functionality and improve the operation of the store. Cookies may be used to maintain shopping cart contents, recognize customer sessions, support account login, remember certain preferences, provide checkout functionality, and help protect the website from malicious activity.

WordPress, WooCommerce, payment integrations, security services, and other technical tools may place cookies that are necessary for their functions.

Where required by applicable law, non-essential cookies will be handled according to applicable consent requirements. Browser settings may allow customers to restrict or delete certain cookies, although disabling essential cookies may prevent portions of the website or checkout from functioning correctly.

13. Server Logs & Technical Information

When you access kerlith.com, our hosting infrastructure and security systems may automatically receive certain technical information, including IP address, browser type, device information, operating system, access date and time, referring pages, requested pages, and technical error or security logs.

This information may be used to maintain website functionality, diagnose technical problems, identify abusive traffic, investigate suspicious activity, protect against unauthorized access, improve performance, and maintain network and information security.

14. Data Security Measures

KERLITH, LLC uses reasonable administrative, organizational, and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, loss, or misuse.

Depending on the applicable system and service, these safeguards may include HTTPS and SSL/TLS encryption, secured administrative access, role-based access controls, least-privilege access practices, strong authentication procedures, software and plugin updates, security patches, firewall or web application firewall protections, malware monitoring, malicious login protection, automated backups, server monitoring, security logging, and restricted database access.

Administrative access to WordPress, WooCommerce, hosting systems, and related services is limited to persons or service providers who require appropriate access for legitimate operational purposes.

We also seek to maintain current versions of core website software and relevant extensions and to apply reasonable security updates when appropriate.

15. Data Minimization & Access Controls

We seek to collect only information reasonably necessary to complete transactions, provide requested services, operate the website, protect against fraud, and satisfy legal or business requirements.

Access to customer and order information is restricted according to operational need. Employees, contractors, or service providers who require access to information should have access only to information reasonably necessary for their assigned responsibilities.

We do not intentionally make customer order records or personal information publicly available.

16. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including order administration, customer service, returns and refunds, fraud prevention, security monitoring, accounting, dispute resolution, and compliance with applicable laws.

For general operational purposes, we aim to retain personal information for no longer than approximately one year after it is no longer actively required, unless a longer retention period is reasonably necessary or legally required for accounting, taxation, fraud prevention, payment disputes, chargebacks, contractual claims, or other legal obligations.

Information may be deleted, anonymized, or securely archived once it is no longer reasonably required, subject to applicable legal and technical requirements.

17. Sharing of Personal Information

We do not sell customer payment credentials or provide complete payment card information to third parties for advertising purposes.

We may share limited personal information with service providers where necessary to operate the business, including hosting providers, WordPress and WooCommerce-related service providers, Stripe, PayPal, shipping carriers, logistics providers, security providers, email service providers, technical support providers, accountants, professional advisers, and other service providers performing legitimate services on our behalf.

We may also disclose information where reasonably necessary to comply with law, enforce our policies, investigate fraud or security incidents, protect legal rights, respond to lawful government requests, or resolve a payment or transaction dispute.

18. International Data Transfers

Because KERLITH, LLC operates an online store that serves customers worldwide and uses international technology, payment, hosting, and logistics service providers, personal information may be processed or transferred outside the country in which the customer resides.

Different countries may have different data protection laws. Where applicable law requires specific protections for international transfers, we seek to use service providers and transfer mechanisms designed to provide appropriate protection for personal information.

International transfers may also occur where necessary to process an international order, payment, shipment, customer service request, refund, fraud investigation, or legal obligation.

19. European Economic Area, United Kingdom & GDPR Rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction applying similar data protection requirements, you may have rights under the General Data Protection Regulation (GDPR) or applicable national data protection law.

Depending on the circumstances, these rights may include the right to request access to your personal information, correction of inaccurate information, deletion of certain information, restriction of processing, objection to certain processing, and portability of certain information.

Where GDPR applies, we may process personal information because processing is necessary to perform a contract with you, such as processing an order or providing a refund; because processing is necessary to comply with a legal obligation; because we have a legitimate interest in operating and securing our business; or, where required, because you have provided consent.

Consent may be withdrawn where consent is the applicable legal basis, although withdrawal does not affect processing that was lawful before consent was withdrawn.

Customers wishing to exercise applicable privacy rights may contact us at [email protected]. We may request reasonable information to verify the identity of the requester before fulfilling a privacy request.

20. United States Privacy Rights

Residents of certain U.S. states may have privacy rights under applicable state privacy laws. Depending on your state of residence and whether the applicable law applies to KERLITH, LLC, these rights may include requesting access to personal information, requesting correction or deletion of certain information, or obtaining information about certain categories of personal information collected or disclosed.

We do not discriminate against customers solely because they exercise a privacy right available to them under applicable law.

KERLITH, LLC does not sell complete payment credentials or customers' complete card information. Where applicable U.S. privacy laws provide additional rights concerning the sale, sharing, or use of personal information, requests may be submitted to [email protected].

We may need to verify a request before responding and may retain information where retention is necessary to complete transactions, detect fraud, maintain security, comply with tax or accounting requirements, establish or defend legal claims, or satisfy another lawful exception.

21. Data Breaches, Children's Privacy & Legal Compliance

If we become aware of a security incident involving personal information, we will investigate the incident and take reasonable steps to contain, remediate, and document the issue. Where applicable law requires notification to affected individuals, regulators, service providers, or other parties, we will seek to provide such notification in accordance with applicable requirements.

kerlith.com is intended for general ecommerce use and is not directed specifically to children. We do not knowingly seek to collect personal information directly from children who are below the minimum age permitted to independently provide such information under applicable law.

If we become aware that personal information has been collected from a child in circumstances requiring parental authorization and appropriate authorization has not been obtained, we may take reasonable steps to delete the information.

We may preserve or disclose personal information when reasonably necessary to comply with applicable laws, valid legal processes, fraud investigations, payment-provider requirements, security obligations, or the establishment, exercise, or defense of legal claims.

22. Privacy Requests, Policy Updates & Contact Information

Customers may contact KERLITH, LLC regarding this Privacy Policy, the personal information associated with their orders, or an applicable privacy request by using the following contact information:

Company: KERLITH, LLC
Website: kerlith.com
Email: [email protected]
Telephone: +1(503)235-7665
Address: 525 NE Oregon St, Ste 510, Portland, OR 97232, US

When submitting a privacy request, please provide sufficient information for us to identify the relevant account, transaction, or record. For security reasons, we may request reasonable verification before providing, correcting, or deleting personal information.

We may update this Privacy Policy from time to time to reflect changes to our website, WooCommerce configuration, payment providers, shipping services, security practices, legal requirements, or business operations. The version published on kerlith.com will represent the current Privacy Policy applicable to use of the website.

If a change materially affects how personal information is handled, we may provide additional notice where reasonably appropriate or required by applicable law.