Privacy Policy

Kut (Kut) is the operator of this website and acts as the data controller for personal information collected through kut.tn or related domains we operate, in line with Tunisia's personal data protection framework (INPDP).

• Order data: name, email, phone (optional), delivery address, items, order number, status.
• Account data: name, email, password hash (if you register with email), profile image (if using Google sign-in).
• Technical data:session cookies for login, cart contents in your browser's local storage, and basic analytics events if enabled (see below).

We do not intentionally collect payment card numbers on this site.

• Process and deliver pre-orders (contract).
• Communicate about your order (contract / legitimate interest).
• Maintain accounts and order history (contract).
• Secure the site and prevent abuse (legitimate interest).
• Improve the storefront with aggregated analytics (legitimate interest).

We do not sell your personal data. We may share data with:

• Hosting & database providers that run this application (e.g. Vercel, database host).
• Googleif you choose “Sign in with Google” (authentication only).
• Delivery partners as needed to ship to your address (name, phone, address).
• Authorities when required by law.

Supplier platforms used to source products receive only what is needed to fulfill an order (typically shipping details and product identifiers), not your full account history.

• Session cookies — keep you signed in (NextAuth).
• kut-cart — stores cart items in localStorage until you checkout or clear it.
• Analytics — Vercel Analytics may collect anonymous usage metrics (page views, performance).

You can clear local storage and cookies in your browser settings. Blocking session cookies will prevent account login.

Order records are kept for as long as needed for accounting, disputes, and legal obligations, then deleted or anonymised when no longer required.

Account data remains while your account is active, subject to orders we must retain for legal or dispute purposes.

Subject to applicable law, you may:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion where we have no overriding legal need to keep it.
• Object to certain processing based on legitimate interest.

After signing in, you can review order history tied to your account. Where the law requires correction or deletion beyond what the site displays, we act on valid requests tied to your registered email or checkout email on file.

You may also lodge a complaint with the Tunisian data protection authority (INPDP) if you believe your rights were violated.

Passwords are stored hashed. We use HTTPS in production and limit admin access to authorised staff. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

This shop is not directed at children under 16. We do not knowingly collect data from children. We will delete such data if discovered.

We may update this policy. The “Last updated” date at the bottom will change. Material changes to how we use order data will be reflected on this page; continued use after an update constitutes notice where permitted by law.

See also our Terms of Sale.