Privacy policy

This Privacy Policy describes how Clean Air Kits Europe (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit cleanairkits.eu or make a purchase from our store. We comply with the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR)

1. Information We Collect

We collect the following types of information:

A. Information you provide directly

Name, address, email, phone

Payment information (processed securely via third-party shopify gateways)

Order details and shipping information

Warranty requests

Contact form messages

B. Automatically collected information

IP address

Browser type & device details

Pages visited & cart actions

Cookies and tracking technologies

C. Cookies

Cookies are used to:

Operate the website

Maintain cart and checkout functionality

Improve performance and analytics

Personalize the shopping experience

You may control cookies via our Cookie Consent banner tools.

2. How We Use Your Personal Data

We use your information to:

Process and deliver orders

Provide customer support

Send tracking updates and order confirmations

Prevent fraud

Improve website functionality

Maintain legal compliance (VAT, accounting, recordkeeping)

Personalize and improve your browsing experience

We do not sell personal data to third parties.

Veya air-quality app

Veya is our free air-quality companion app (at air.cleanairkits.eu). This section explains what it collects and how we handle it. It applies in addition to the rest of this policy.

What we collect and why

• Your email address — you provide this when you start using Veya. We use it to save your settings so they follow you across devices, to recognise existing CleanAirKits customers, and — only if you tick the optional consent box — to send you air tips and offers. You can use core parts of the app without opting in to marketing. 
• Your approximate location — either your device's location (if you allow it in your browser) or a town/city name you enter. We use it to fetch the outdoor air-quality reading for where you are. We store the coordinates or place name you last used so the reading loads automatically; we do not track your movements or store a location history.
• Your air-quality preferences — the alert threshold you choose, the purifier model you own, your room size for the coverage calculator, and (if you use a smart plug) the plug's device identifier and the name you give it. These are stored so your setup restores after a cache clear or on a new device.
• Smart-plug status (only if you connect one) — when you link a compatible smart plug, we send commands to switch it on/off and read its on/off state, power and energy figures, so you can control it and see running costs in the app. If you turn on Auto-protect, our servers periodically check the outdoor air quality for your saved location and switch your plug on when air quality reaches your chosen threshold — this runs even when the app is closed. Auto-protect never switches your plug off.

We do not collect your name (unless it's part of your email), payment details, browsing history, or contacts through the app.

Where your data is stored

• Cloudflare — the app runs on Cloudflare's platform. Your email and settings are stored in a Cloudflare database (D1) so they can sync across your devices, and requests pass through Cloudflare's network. Cloudflare acts as our hosting and processing provider.
• Shopify — when you give us your email, we may add or match it to a customer record in our Shopify store (tagged so we know it came from Veya), and record your marketing-consent choice. Shopify is our store and customer-data platform. 

Third parties we share data with (processors)

To make the app work, limited data is sent to:

• Open-Meteo / Copernicus CAMS — your location's coordinates are sent to fetch the air-quality reading. No email or identity is sent.
• Tuya — if you connect a smart plug, your plug's device identifier and on/off commands are sent to Tuya's cloud, which operates the plug. Tuya is the plug's manufacturer-cloud service.
• Cloudflare and Shopify — as described above.

We do not sell your personal data, and we do not share it with advertisers.

How long we keep it

We keep your email and settings for as long as you use Veya or remain a customer, and remove them on request (see below). If you withdraw marketing consent we stop sending marketing but may keep a record of your choice. (Set concrete retention periods here that match your wider policy — e.g. "we delete inactive Veya records after 24 months.")

Your choices and rights

Under UK GDPR you can ask us to access, correct, or delete your data, withdraw marketing consent at any time, or object to certain processing. To exercise any of these, contact us at [your privacy contact email].

• Marketing: untick or withdraw consent any time — every marketing email also has an unsubscribe link.
• Location: you can revoke the app's location permission in your browser settings, or clear the town/city you entered.
• Smart plug / Auto-protect: turn Auto-protect off in the app at any time, or unlink the plug, to stop those checks and controls.
• Delete my Veya data: email [your privacy contact email] with the subject "Delete my Veya data" and the email address you used in the app, and we will remove your stored email, settings, and plug identifier. (Operationally: delete the matching rows from the Cloudflare D1 signups and config tables and the ap_log table, and update/anonymise the Shopify customer record as appropriate.)

Legal bases (UK GDPR)

• Saving your settings and providing the app's core features: performance of a service you requested / our legitimate interest in making the app work for you.
• Marketing emails: your consent (the optional box you tick).
• Smart-plug control and Auto-protect: your instruction when you connect a plug and enable the feature.

3. Legal Basis for Processing (GDPR)

We process your data under the following lawful bases:

Contractual necessity — to fulfil your order

Legitimate interest — to improve our services

Legal obligation — VAT, tax, warranty, fraud prevention

Consent — where required for marketing or cookies

4. Sharing Your Information

We only share your information with trusted providers:

Shopify (store hosting)

Payment processors (ShopPay, PayPal, etc.)

Shipping carriers (Royal Mail, UPS, DPD)

Analytics & security services

Email service providers

All partners comply with GDPR or equivalent safeguards.

5. Data Retention

We retain your information only as long as necessary for:

Fulfilling your order

Warranty handling

Legal recordkeeping requirements (typically 6 years — UK law)

You may request deletion at any time unless we are legally required to keep certain data.

6. Your Rights Under GDPR

You have the right to:

Access your personal data

Request correction

Request deletion (“right to be forgotten”)

Withdraw consent

Request data portability

Object to processing

Restrict processing

To exercise your rights, email us at: cleanairkitseurope@gmail.com

7. Security

We use industry-standard measures to secure your information.
Payment data is encrypted and processed by PCI-compliant providers.

8. International Transfers

Your data may be processed outside the UK/EU but is protected by GDPR-approved safeguards (Shopify servers and certified third-party processors).

9. Children’s Privacy

Our site is not intended for children under 16, and we do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy occasionally. Updates will be posted on this page with the “Last Updated” date.

11. Contact Us

For questions about this policy or your data rights: cleanairkitseurope@gmail.com