Privacy policy

Last updated: 22 October 2026

This Privacy Policy explains how Knock Knock Digital LLC, trading as Aploomb ("we", "us"), collects, uses and discloses your personal information when you visit aploomb.com, buy from us or contact us (the "Services"). It applies to customers in the United Kingdom, the United States and France. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

Who is responsible for your data

The controller of your personal information is Knock Knock Digital LLC, 608 Rio Grande Ave, Santa Fe, New Mexico 87501, United States (email contact@aploomb.com, phone +1 (505) 305-6432). For the purposes of the UK GDPR and the EU GDPR, we are the data controller. We are based outside the UK and the EU.

Personal information we collect

  • Contact details: your name, billing and shipping address, phone number and email address.
  • Financial information: payment card and transaction details. Payments are processed by Shopify Payments and other providers shown at checkout; we never see or store your full card number.
  • Account information: your login details, preferences and settings.
  • Transaction information: items you view, add to your cart, buy, return, exchange or cancel.
  • Communications: what you send us, for example a customer support enquiry.
  • Device and usage information: your device, browser, IP address and how you use the Services, collected through cookies and similar technologies.

Where it comes from

Directly from you; automatically from your device when you use the Services; from our service providers (for example payment, delivery and analytics providers) when they act on our behalf; and from advertising and marketing partners where you have allowed it.

How we use it, and our lawful bases (UK and EU)

  • To take and deliver your order, process payments, returns and refunds, and give customer support — because it is necessary to perform our contract with you.
  • To keep the Services secure and prevent fraud — our legitimate interests in protecting our customers and our business.
  • To improve the Services and understand how they are used — our legitimate interests, and your consent where cookies are involved.
  • To send marketing by email or text and to show you personalised advertising — with your consent where the law requires it (for example under PECR in the UK). You can withdraw consent at any time.
  • To meet legal obligations, such as tax and accounting records and responding to lawful requests — legal obligation.

Cookies

We use cookies that are strictly necessary for the store to work (cart, checkout, login, security). For visitors in the UK and the EU, analytics and advertising cookies are only set if you accept them in our cookie banner, and you can change your choice at any time. Other visitors can manage cookies through their browser settings.

Who we share it with

  • Shopify and other service providers who work for us (hosting, payments, fulfilment and delivery, customer support, analytics, email).
  • Business and marketing partners that help us advertise, where you have allowed it. Depending on where you live, you may have the right to opt out of this; you can do so here.
  • Others when you ask us to, when the law requires it, to protect our rights, or as part of a business sale or reorganisation.

We do not sell your personal information for money.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information about your use of the Services to provide and improve them. We also use certain Shopify enhanced features that use data from your interactions with our store, other merchants and Shopify; for those features Shopify is responsible for the processing, including responding to your requests. See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

International transfers

We are based in the United States, and our service providers may process data in other countries. When personal information from the UK or the EU is transferred to a country without an adequacy decision, we rely on recognised safeguards: the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses for UK data, the EU Standard Contractual Clauses for EU data, or the UK–US Data Bridge / EU–US Data Privacy Framework where the recipient is certified.

How long we keep it

We keep order and transaction records for as long as tax and accounting law requires (generally six years for UK purposes), account information while your account is open, and marketing preferences until you withdraw consent or unsubscribe. We then delete or anonymise it.

Your rights

United Kingdom and France/EU. Under the UK GDPR, the Data Protection Act 2018 and the EU GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its use (including an absolute right to object to direct marketing), to data portability, and to withdraw consent at any time. We respond within one month.

United States. Depending on your state (for example California under the CCPA/CPRA), you may have the right to know, access, correct and delete your personal information, and to opt out of the sale or sharing of personal information for targeted advertising. We honour the Global Privacy Control signal as an opt-out for the browser that sends it. We will not discriminate against you for using these rights, and you may use an authorised agent.

To exercise any right, email contact@aploomb.com. We may need to verify your identity first. You can unsubscribe from marketing emails at any time using the link in each email.

Complaints

Please contact us first at contact@aploomb.com. If you are in the UK, you have the right to complain to the Information Commissioner's Office (ICO), ico.org.uk, telephone 0303 123 1113. In France, you can complain to the CNIL, cnil.fr. Elsewhere, you may contact your local data protection authority.

Children

The Services are intended for adults. We do not knowingly collect personal information from children under 13 (or the age of digital consent in your country), and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has given us their information, contact us at contact@aploomb.com and we will delete it.

Security

We use the security measures provided by Shopify and our providers to protect your information. No system is perfectly secure, so please do not send sensitive information to us by unsecured channels.

Third-party websites

Links to third-party sites are provided for convenience; their own privacy policies apply.

Changes to this policy

We may update this policy from time to time. We will post the new version here, update the date at the top and give notice where the law requires it.

Contact

Knock Knock Digital LLC (trading as Aploomb), 608 Rio Grande Ave, Santa Fe, New Mexico 87501, United States. Phone: +1 (505) 305-6432. Email: contact@aploomb.com.