Skip to content
Legal · 01

Privacy Policy

Last updated · 2026-08-26

KaheLock Goods Co. (we, us) respects your privacy. This policy describes what information we collect, how we use it, who we share it with, and the choices you have. By using kahelock.com you agree to this policy.

01 · Information we collect

We collect only what we need to run the business and ship the product.

  • Information you give us: when you place an order, your name, email, phone (if provided), and billing and shipping address, plus the order details — collected on Stripe's hosted checkout. If you submit a review, the name, general location, and review text you enter (which we publish publicly on the site). If you enter your email to join our list, we send you a welcome offer and occasional product updates, and you can unsubscribe at any time. And any message you send us. Payment card details go directly to Stripe — we never see or store your full card number.
  • Information collected automatically: your IP address, browser and device type, and the pages you visit. We use Cloudflare Web Analytics, which measures traffic without cookies. Only if you accept analytics cookies on our cookie banner, we also load the Meta (Facebook) Pixel, which measures how visitors interact with the site and our ads — it does not load if you decline. We also store a one-way hashed version of your IP address to rate-limit and prevent review spam.
  • Information from third parties: order, shipping, and refund status from Stripe and our shipping / postage provider; security and abuse signals from Cloudflare.

02 · How we use it

  • To fulfill your order and provide customer support.
  • To send you the transactional your unit has shipped email tied to your order, and — if you gave us your email for a discount or to join our list — occasional marketing emails you can unsubscribe from at any time.
  • To publish reviews you choose to submit, and to measure and improve the site (and, with your consent, our ads).
  • To detect and prevent spam, fraud, and abuse.
  • To comply with tax, accounting, and other legal obligations.

03 · How we share it

We share information only with the limited service providers we need to operate:

  • Stripe payment processing and checkout
  • Cloudflare hosting, CDN, security, and cookieless web analytics
  • Shipping / postage provider to buy labels and ship your order (your shipping address prints on the label)
  • Email provider order / shipping email, and (for subscribers) our marketing email with one-click unsubscribe
  • Meta (Facebook) advertising and conversion measurement via the Meta Pixel — only after you accept analytics cookies

We do not sell your personal information. We do not share your information for cross-context behavioral advertising beyond the consent-based pixel described above. We may disclose information if required by law or to protect rights, property, or safety.

04 · Data retention

  • Order records: 7 years (tax / audit)
  • Reviews: until you ask us to remove them, or we do
  • Server logs: 90 days
  • Hashed IPs / abuse signals: up to 1 year

05 · Your rights

Depending on where you live (including California under CCPA/CPRA, the EEA under GDPR, and the UK under UK GDPR), you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your information, subject to legal retention requirements.
  • Object to or restrict certain processing.
  • Data portability.
  • Withdraw consent (where processing is based on consent).

Contact us at privacy@kahelock.com to exercise these rights. We will respond within the timeframe required by your local law.

06 · International transfers

We are based in the United States. If you use the site from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your country.

07 · Children

Our products are intended only for adults of legal nicotine age — 21 and over in most jurisdictions. We do not knowingly collect information from anyone under 21. If you believe we have done so, contact privacy@kahelock.com and we will delete the information.

08 · Security

We use industry-standard measures (TLS in transit, encrypted storage, access controls) to protect your information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

09 · Cookies & tracking

We keep tracking to a minimum and gate anything non-essential behind your consent:

  • Strictly necessary: a small number of cookies from Cloudflare (security / bot protection) and, for the admin dashboard only, an access-login cookie. These run core features and are always on.
  • Analytics (cookieless): Cloudflare Web Analytics measures traffic without setting cookies or tracking you across sites.
  • Advertising / conversion (consent-based): the Meta (Facebook) Pixel is off by default and loads only after you click “Accept” on our cookie banner. Decline and it never loads.
  • Stored in your browser: your cookie-consent choice, and a “seen” flag for our one-time welcome discount, are saved in your browser's local storage — not on our servers. Clear your site data anytime to reset them.

10 · Changes

We may update this policy from time to time. The Last updated date at the top reflects the most recent change. Material changes will be communicated through a notice on the site.

11 · Contact

KaheLock Goods Co.
Email: privacy@kahelock.com
Based in Honolulu, Hawaii. For our mailing address or any privacy request, email us at the address above.