1) Who we are and how to contact us
This Privacy Policy applies to the Lost Kiwi website and related registration features. The site theme focuses on educational information about investments in handmade designer items and handcrafted artisanal goods, including research frameworks, category notes, and risk-aware explanations. This policy describes what information we collect, why we collect it, and how you can control certain processing activities, including cookies used for analytics and advertising.
Business name: Lost Kiwi
Address: 350 Fifth Avenue, New York, NY 10118
Email: [email protected]
If you have any questions about this policy or want to exercise your rights, you can contact us using the email address above. We may request reasonable information to verify your identity before responding to a request.
2) Cookie categories (three mandatory tiers)
Cookies are small text files stored on your device. We use cookies and similar technologies to provide core site functions, understand how the site is used, and support advertising measurement and remarketing where you consent. We divide cookies into exactly three categories:
ESSENTIAL COOKIES
- Purpose: core site functionality, security, session management
- Examples: session_id, csrf_token, cookie_consent_status
- Consent required: NO, activated automatically
- Retention: session duration or up to 12 months for preference storage
Without essential cookies, the website cannot reliably provide security features, remember cookie choices, or maintain basic sessions. These are always enabled.
ANALYTICS COOKIES
- Purpose: measuring traffic, user behavior, site performance
- Tools: Google Analytics 4
- Examples: _ga, _ga_XXXXXXX, _gid, _gat
- Consent required: YES, activated only after you accept
- Retention: up to 14 months
Analytics cookies help us learn which pages are useful, where users get stuck, and how to improve content clarity for handcrafted market education. If you reject non-essential cookies, analytics remains off.
MARKETING / ADVERTISING COOKIES
- Purpose: remarketing, personalized ad delivery, conversion tracking
- Consent required: YES, activated only after you accept
- Retention: up to 540 days (Google Ads default)
Marketing cookies support advertising delivery and measurement so we can understand whether ads lead to actions such as registrations. You can enable or disable this category in the preferences panel at any time.
3) Marketing cookies (mandatory disclosures)
If you enable marketing cookies, the following disclosures apply. They are written plainly to help you understand how advertising tracking typically works across platforms.
Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.
We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.
We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.
Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.
Tracking technologies we use
We use the following tracking technologies on this website:
- Cookies (first-party and third-party)
- Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
- Device identifiers (browser fingerprint, IP address)
- Conversion event tags
We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.
Technologies active on this site
Advertising and analytics technologies active on this site:
- Google Ads (gtag.js / Google Tag Manager)
- Google Analytics 4
- Google Remarketing Tag
- Meta Pixel (Facebook / Instagram)
Opt-out from personalized advertising
You may opt out of personalized advertising at any time:
- Google Ads Settings: https://adssettings.google.com
- Your Online Choices (EU): https://www.youronlinechoices.eu
- Network Advertising Initiative: https://optout.networkadvertising.org
- Digital Advertising Alliance: https://optout.aboutads.info
Opting out does not remove ads entirely. You will continue to see non-personalized advertisements.
Cookie preference management: use the clearly visible link labeled Manage cookie preferences in the footer or the button on this page to open the consent panel where you can accept or reject each cookie category independently.
4) Consent requirements
Our consent banner offers three options: Accept All, Reject Non-Essential, and Manage Preferences. Analytics and marketing cookies are not activated until you explicitly accept. Your choice is stored in your browser using localStorage for 12 months. You can dismiss without accepting by selecting Reject Non-Essential, which keeps only essential cookies active.
By clicking 'Accept All Cookies', you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.
Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.
You may withdraw consent at any time by clicking 'Manage cookie preferences' in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.
5) Data Sharing with Advertising Partners
We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:
- Google LLC: cookie identifiers, conversion events, anonymized behavioral data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy
- Meta Platforms, Inc.: pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy
We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only, not resold to unaffiliated third parties.
Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.
6) Lead Forms and Contact Requests
When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.
Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).
Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.
You may request deletion of your data at any time by contacting us at the email address in this policy.
A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.
Note: Our registration experience is designed to be minimal and may not request a phone number. Where a field is not requested, we do not collect it. The categories above describe typical form fields across possible contact flows.
7) Google Services and Advertising
This website uses the following Google services:
- Google Analytics 4: collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
- Google Ads Conversion Tracking: records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.
- Google Remarketing: allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).
- Google Tag Manager: deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.
Google's advertising products are governed by: https://policies.google.com/technologies/ads
8) Meta Advertising Services
This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:
- Page views and time on site
- Specific conversion events (form submissions, purchases)
- Custom audience membership for retargeting purposes
We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.
Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy
To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/
9) Prohibited content self-declaration
This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.
10) Landing page integrity statement
The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.
11) Children's privacy
This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor.
12) International data transfers
Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.
These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.
13) User rights (GDPR Articles 15-22)
If you are located in the EEA or UK, you have the following rights:
- Access (Art. 15): request a copy of data we hold about you
- Rectification (Art. 16): correct inaccurate or incomplete data
- Erasure (Art. 17): request deletion (right to be forgotten)
- Restriction (Art. 18): limit how we process your data
- Portability (Art. 20): receive your data in a structured, machine-readable format
- Objection (Art. 21): object to processing based on legitimate interest
- Withdraw consent (Art. 7.3): revoke consent at any time without penalty
To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:
- EU users: https://edpb.europa.eu
- UK users: https://ico.org.uk
14) What data we collect
Depending on how you use the website, we may collect the following categories of information:
- Full name
- Email address
- Phone number
- IP address
- Browser type and version
- Device type and operating system
- Cookies and tracking identifiers
- Usage data (pages visited, time on site, click paths)
- Form submission content
- Conversion events (form submits, calls, purchases)
We aim to minimize collection. Some data, such as IP address and basic device information, may be processed automatically for security and fraud prevention. If you do not submit a form, we do not receive form submission content from you.
15) Legal basis for processing (GDPR Art. 6)
Where GDPR or similar laws apply, we process personal data under the following legal bases:
- Contact form data: consent (Art. 6.1.a) and contract performance (Art. 6.1.b)
- Analytics data: consent (Art. 6.1.a)
- Marketing/remarketing data: consent (Art. 6.1.a)
- Security and fraud prevention: legitimate interest (Art. 6.1.f)
If you choose to reject non-essential cookies, analytics and marketing processing that relies on consent will not be activated on your device.
16) Retention periods
We retain data only as long as needed for the purposes described in this policy, unless a longer retention period is required by law. Our standard retention periods are:
- Contact form submissions: 2 years
- Analytics data (GA4): 14 months
- Marketing cookies (Google Ads): up to 540 days
- Email communications: duration of relationship plus 1 year
- Server logs: 90 days
- Cookie consent records: 3 years (audit requirement)
After the applicable period, data is deleted or de-identified where feasible. If you request deletion, we will act within a reasonable timeframe subject to legal obligations.
17) Security, updates, and how changes are communicated
We use reasonable administrative and technical measures intended to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If this policy changes, we will update the Last Updated and Effective Date at the top of the page. Changes are notified via homepage banner minimum 14 days before taking effect. Continued use of the site after the effective date indicates that you have read the updated policy.