Privacy policy

PRIVACY POLICY

Kalifora LLC Last Updated: September 15, 2026

1. Introduction

Kalifora LLC (“Company,” “we,” “us,” or “our”), a Wyoming limited liability company located at 30 N Gould St Ste R, Sheridan, WY 82801, USA, respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit the Platform, place an order, or interact with our marketplace services at kalifora.com (the “Platform” or “Website”).

If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

2. Legal Basis and Data Controller

Data Controller. For the purposes of the EU/UK General Data Protection Regulation (GDPR), Kalifora LLC acts as the Data Controller for personal data collected through the Platform.

Joint Control. Regarding data necessary to fulfill an order (recipient name, delivery address, phone number), Kalifora LLC and the relevant Seller act as joint controllers to the extent required for order fulfillment. The allocation of responsibilities is governed by a separate Joint Controller Agreement.

Legal Basis for Processing (Art. 6 GDPR). We process personal data on the following bases:

  • Performance of a contract — for order processing, payment handling, and delivery coordination.
  • Legal obligation — for tax, customs, and accounting compliance.
  • Legitimate interest — for fraud prevention, Platform security, and service improvement.
  • Consent — for marketing communications, where required by law.
  • Vital interests — in exceptional safety-related situations.

Payment Processor. Payment processing is handled by a third-party certified payment provider. Kalifora LLC does not collect or store full payment card numbers, CVV codes, or user banking details.

3. Information We Collect

A. Information You Provide to Us:

  • Account Data: name, email address, phone number, username, password. The password is stored exclusively in an irreversibly hashed form using modern cryptographic algorithms and is not accessible to Company employees in plain text.
  • Order & Delivery Data: recipient name, delivery address, recipient phone number, order history.
  • Seller Data: business registration details, contact information, payout details.
  • Communications: inquiries, feedback, support messages.

B. Information Collected Automatically:

  • Technical Data: IP address, browser type and version, operating system, time zone, device identifiers, pages viewed, clickstream data.
  • Cookies & Tracking Data: information collected via cookies, web beacons, and local storage. See our Cookie Policy for details.

The Company does not collect or process: passport numbers, driver’s license numbers, health data, biometric data, precise geolocation, or full payment card details. We do not classify collected data as “Sensitive Personal Information” under CCPA/CPRA.

4. How We Use Your Information

We use personal data solely for the following purposes:

  • To Provide Services: processing orders, facilitating communication between Buyers and Sellers, managing payments, and fulfilling logistics.
  • Account Administration: registering accounts, providing user support, and delivering transactional notifications.
  • Compliance & Legal Obligations: preventing fraud, complying with international customs laws, and satisfying tax and accounting requirements.
  • Marketing & Communications: sending newsletters, promotional offers, and Platform updates (where permitted by law, subject to your opt-out rights).
  • Platform Security: detecting and preventing malicious activity, fraud, intellectual property violations, and security breaches.

5. Disclosure and Sharing of Personal Data

We do not sell your personal data. We share your information only with third parties in the following circumstances:

  • With Sellers: we share Buyer delivery addresses, names, and order details with Sellers solely to enable order processing and fulfillment.
  • Service Providers: third-party vendors performing services on our behalf, including payment processors, logistics and shipping carriers, cloud hosting providers, customer support tools, and email service providers.
  • Legal Compliance & Safety: when required by law, court order, subpoena, or governmental request, or to protect the safety, rights, or property of Kalifora LLC, its users, or the public.
  • Business Transfers: in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

6. International Data Transfers

Kalifora LLC is based in the United States, and the Platform operates globally. Your personal information may be transferred to, stored, and processed in countries outside of your country of residence (including the US), where data protection laws may differ from those in your jurisdiction.

When transferring data originating from the European Economic Area (EEA), UK, or Switzerland, we ensure adequate safeguards are in place:

  • EU-US Data Privacy Framework (DPF): [specify actual status — certified / not certified].
  • Standard Contractual Clauses (SCCs): where DPF does not apply, we rely on SCCs approved by the European Commission and conduct a Transfer Impact Assessment.
  • UK GDPR: transfers from the UK are covered by the UK International Data Transfer Agreement or UK Addendum.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, or reporting obligations.

Indicative retention periods:

  • Order and transaction data — for the period required by the tax and accounting laws of the applicable jurisdiction.
  • Account data — until the account is deleted by the user or until the period necessary for the purposes for which the data was collected has expired.
  • Marketing communication data — until consent is withdrawn.
  • Technical and log data — for a reasonable period necessary for security and troubleshooting.

When data is no longer needed, it is securely deleted or anonymized.

8. Your Legal Privacy Rights

Depending on your jurisdiction (such as the EEA, UK, California, other US states, and other applicable jurisdictions), you may have the following rights regarding your personal data:

  • Right to Access / Know: request details about the personal data we hold about you.
  • Right to Rectification: request correction of inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): request deletion of your personal data, subject to legal retention exceptions.
  • Right to Restrict or Object: object to or request restriction of data processing, including direct marketing profiling.
  • Right to Data Portability: request a copy of your personal data in a structured, machine-readable format.
  • Right to Withdraw Consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please email us at info@kalifora.com. We will respond within the timeframes required by applicable law.

9. California Privacy Rights (CCPA / CPRA Notice)

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have specific rights:

  • Right to Opt-Out of Sale / Sharing: Kalifora LLC does not sell personal information for monetary compensation. We do not share personal information for cross-context behavioral advertising without consent.
  • Right to Know: request the categories and specific pieces of personal information we collect.
  • Right to Delete: request deletion of personal information, subject to legal exceptions.
  • Right to Correct: request correction of inaccurate data.
  • Right to Limit Use of Sensitive Personal Information: we do not collect Sensitive Personal Information.
  • Non-Discrimination: we will not discriminate against you for exercising any of your privacy rights.

10. Privacy Rights of Residents of Other US States

If you reside in a state with an active comprehensive data privacy law (including, but not limited to: Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, Tennessee, Minnesota, Maryland), you may have rights to access, correct, delete, obtain a copy of your data, and opt out of certain processing activities. To exercise your rights, contact us at info@kalifora.com.

11. Use of Artificial Intelligence

Where the Platform uses artificial intelligence systems — such as support chatbots, automated product recommendations, description generation, or translations — users are informed when interacting with artificial intelligence. We comply with applicable artificial intelligence laws, including the EU Artificial Intelligence Act (AI Act).

12. Security of Your Data

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. However, no internet transmission is completely secure, and we cannot guarantee absolute protection.

13. Third-Party Links

The Platform may contain links to external sites operated by third parties. We are not responsible for the privacy practices or content of third-party websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this policy indicates when the latest revision took effect. Continued use of the Platform after changes are published constitutes your acknowledgment of the updated Privacy Policy.

15. Contact Us & Data Protection Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Kalifora LLC Attn: Privacy / Data Protection 30 N Gould St Ste R Sheridan, WY 82801, USA Email: info@kalifora.com Website: kalifora.com