At King Speciosa, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and share personal information when
you visit kingspeciosa.eu, create an account, place an order, contact us,
subscribe to communications or otherwise use our website and services.

1. Who We Are

King Speciosa is operated by:

Alta Mensa B.V.
RSIN: 867987273
Vermogenweg 111
3641 ST Mijdrecht
The Netherlands

Email: co*****@**********sa.se
Website: https://kingspeciosa.eu

Alta Mensa B.V. is the data controller responsible for the processing of personal
data described in this Privacy Policy.

2. Personal Data We Collect

The personal data we collect depends on how you use our website and services.
We may process the following categories of personal data.

Information you provide to us

• First and last name
• Billing address
• Shipping address
• Email address
• Telephone number
• Customer account and login information
• Order details and purchase history
• Information provided through contact forms
• Customer service correspondence
• Newsletter and marketing preferences
• Information required for age verification where applicable
• Any other information you voluntarily provide to us

Payment and transaction information

When you place an order, payment information is processed through the payment
provider made available during checkout.

We may receive information such as:

• Payment status
• Transaction or payment reference
• Payment method
• Amount paid
• Date and time of payment

Payments may be processed through NoPayn Payments and its
underlying payment partners.

Complete credit or debit card details are generally processed directly by the
relevant payment service provider and are not stored by King Speciosa.

Technical and usage information

When you use our website, certain technical information may be collected automatically,
including:

• IP address
• Browser type and version
• Device type
• Operating system
• Referring website or URL
• Pages visited
• Date and time of visits
• Browser language
• Approximate country or region
• Cookie and consent information
• Security and fraud-prevention information

3. Where We Obtain Personal Data

Most personal data is provided directly by you when you place an order, create
an account, contact us, subscribe to communications or interact with the website.

We may also receive limited information from service providers involved in your
transaction, such as payment providers, fulfilment providers and shipping carriers.

Technical information may be generated automatically when your browser or device
communicates with our website and its security, analytics or infrastructure services.

4. Why We Process Your Personal Data

Processing and fulfilling orders

We process personal data in order to:

• Receive and process your order
• Process and verify payment
• Prepare and fulfil your order
• Arrange shipping and delivery
• Send order and delivery information
• Handle returns, refunds and complaints
• Provide customer service

Legal basis: Processing is necessary to perform a contract with
you or to take steps at your request before entering into a contract.

Customer accounts

If you create an account, we process your information to create and maintain
your account, provide access to your order history, manage login functionality
and provide customer support.

Legal basis: Performance of our contract with you and our
legitimate interest in providing and securing our services.

Accounting, tax and legal obligations

We retain and process certain order, payment, invoice and transaction information
where necessary to comply with applicable accounting, tax, consumer protection
and other legal obligations.

Legal basis: Compliance with a legal obligation.

Customer service and enquiries

When you contact us by email or through a website form, we process the information
you provide so that we can respond to your enquiry, provide customer service
and resolve problems.

Legal basis: Performance of a contract, steps taken at your
request before entering into a contract, or our legitimate interest in responding
to customers and website visitors.

Security, spam and fraud prevention

We process technical, account, order and communication information where necessary
to protect our website, detect spam or malicious activity, prevent fraud, secure
customer accounts and protect our legal rights.

Legal basis: Our legitimate interest in maintaining a secure
website, preventing abuse and protecting our business and customers.

5. WooCommerce

Our online shop uses WooCommerce to provide shopping cart,
checkout, customer account and order-management functionality.

When you make a purchase or create a customer account, relevant account,
billing, shipping and order information is processed through our WordPress
and WooCommerce systems.

This information is used only where necessary to provide the online shop,
process orders, support customers, comply with legal requirements and protect
the website against fraud or abuse.

6. Payments

We use NoPayn Payments and/or payment partners made available
through NoPayn to process payments.

When you select a payment method, information necessary to complete and secure
the transaction may be transmitted to the relevant payment provider.

This may include:

• Your name
• Billing information
• Email address
• Order amount
• Order or transaction reference
• Payment-related technical information

Payment providers may process certain information as independent data controllers
where they are required to do so for fraud prevention, financial regulation,
anti-money-laundering obligations or other legal requirements.

7. Order Fulfilment and Shipping

Fulfilment

Our order fulfilment is supported by EUKratom.

Where necessary to prepare, package and dispatch your order, relevant order
information may be provided to our fulfilment partner.

This may include:

• Your name
• Shipping address
• Contact information
• Order contents
• Shipping instructions

Shipping providers

We share information necessary for delivery with the shipping carrier selected
or used for your order.

Depending on destination and shipping method, this may include:

• PostNL
• DHL
• DPD
• Other shipping providers made available for a particular destination

Shipping providers may receive your name, delivery address, email address,
telephone number and shipment information where necessary to deliver your parcel
and provide delivery notifications.

8. Email and Brevo

We use Brevo to provide email services.

Brevo may be used for transactional messages such as:

• Order confirmations
• Payment or order-status notifications
• Shipping notifications
• Account-related messages
• Customer service communications

Transactional communications are sent where necessary to provide services that
you have requested or to perform our contract with you.

Marketing and newsletters

If you voluntarily subscribe to marketing communications, we may use Brevo to
send you information such as:

• Product launches
• Special offers
• Promotions
• Company news
• Other King Speciosa marketing communications

Where required by applicable law, these communications are sent only after you
have actively provided consent.

You can unsubscribe at any time by using the unsubscribe option in our emails
or by contacting us.

We may retain limited suppression information after you unsubscribe to ensure
that your request not to receive marketing communications continues to be respected.

Email measurement

Where enabled and permitted by law, our email platform may provide information
about email delivery and interaction, such as whether a message was delivered
or whether links were used.

Where individual-level email tracking requires consent, we will only use such
tracking after the required consent has been obtained. You may withdraw applicable
consent at any time.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies for functionality, security,
preferences, statistics and, where applicable, marketing.

We use Complianz to manage cookie consent and privacy preferences.

Complianz allows visitors to accept, reject and change their choices concerning
optional cookies and services.

Strictly necessary and functional technologies

Certain cookies or similar technologies are necessary for functions such as:

• Shopping cart and checkout
• Customer accounts and login
• Website security
• Fraud and spam prevention
• Language preferences
• Remembering your cookie choices

Where permitted by law, technologies that are strictly necessary to provide
a service requested by you may be used without consent.

Optional cookies and services

Optional technologies used for preferences, statistics, analytics or marketing
are subject to the choices presented through our Complianz consent banner where
consent is required.

You can change or withdraw your cookie preferences at any time using the cookie
settings available on our website.

For detailed information about the individual cookies and services currently
used on the website, their purposes and retention periods, please consult the
Cookie Policy available through our cookie settings or website.

10. Jetpack

Our website uses Jetpack by Automattic for certain website,
security, performance and/or statistics functionality.

Depending on the Jetpack features enabled on our website, Automattic may process
technical information such as:

• IP address
• User-agent and browser information
• Visited URL
• Referring URL
• Timestamp
• Browser language
• Country information derived from the connection
• Website interaction information

Where a Jetpack feature involves optional analytics, cookies or tracking that
requires consent, the relevant service is subject to your cookie preferences.

Security-related processing that is strictly necessary to protect the website
may instead be based on our legitimate interest in protecting our services and users.

11. CleanTalk Anti-Spam and Security

We use CleanTalk anti-spam and security services to protect our
website and forms against spam, automated abuse, malicious activity and security threats.

When a form, registration, login or similar request is submitted, CleanTalk may
process information necessary for spam and security analysis, including:

• IP address
• Email address where submitted
• Website URL
• User-agent and browser information
• Timestamp
• Form submission information where applicable
• Technical or behavioural information used to identify automated abuse

This processing is carried out for the purpose of preventing spam, fraud,
malicious activity and unauthorised access.

Legal basis: Our legitimate interest in protecting our website,
customers and services against abuse and security threats.

12. Hosting and Technical Infrastructure

Our website infrastructure is hosted and supported using services provided by
one.com.

Our hosting and technical providers may process server logs, IP addresses,
website files, database information, backups and other technical information
to the extent necessary to provide hosting, security, maintenance and related services.

Access by service providers is limited to what is necessary to provide the
relevant service or comply with applicable legal obligations.

13. Who We Share Personal Data With

We do not sell your personal data.

We may disclose personal information to service providers where necessary to
operate our website, process your order, communicate with you or comply with
legal requirements.

Recipients may include:

• Website hosting and infrastructure providers
• WooCommerce and website technology providers
• Payment providers
• Order fulfilment providers
• Shipping and delivery companies
• Email and communication providers
• Security and anti-spam providers
• Analytics or statistics providers where enabled and permitted
• Accountants and professional advisers
• Tax authorities
• Regulatory authorities
• Courts or law enforcement authorities where legally required

Where a provider acts as our processor, it is expected to process personal data
only as necessary to provide services to us and in accordance with applicable
data protection requirements.

14. International Transfers

Some of our technology providers or their subprocessors may process personal
information in countries outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA to a country that does not
benefit from an applicable European Commission adequacy decision, appropriate
legal safeguards are used where required.

Depending on the provider and destination, these safeguards may include:

• European Commission Standard Contractual Clauses
• An applicable European Commission adequacy decision
• The EU-U.S. Data Privacy Framework where legally applicable
• Other transfer mechanisms permitted under applicable data protection law

You may contact us for further information about safeguards relevant to transfers
of your personal data.

15. How Long We Keep Personal Data

We keep personal information only for as long as necessary for the purpose for
which it was collected, including where information must be retained to comply
with legal, accounting, tax or dispute-resolution requirements.

Orders, invoices and accounting information

Business, accounting and transaction records that are subject to Dutch statutory
record-keeping requirements are generally retained for at least
7 years.

Certain information may need to be retained for 10 years where
specific tax rules apply, including records subject to applicable EU One Stop Shop
(OSS) requirements.

Customer accounts

Account information may be retained while your account remains active and
afterwards for as long as reasonably necessary for legal, accounting,
fraud-prevention, security and dispute-resolution purposes.

You may request deletion of your customer account, subject to information that
we are legally required or otherwise entitled to retain.

Marketing information

Marketing information is retained while you remain subscribed or until you
withdraw applicable consent.

After an unsubscribe request, limited information may be retained on a suppression
list to ensure that you are not added back to marketing communications unintentionally.

Customer service communications

Correspondence may be retained for as long as reasonably necessary to respond
to your request and establish, exercise or defend legal claims where applicable.

Security and anti-spam information

Security and anti-spam providers may retain technical information for limited
periods in accordance with their service configuration and applicable legal requirements.

16. Legal Bases for Processing

Depending on the situation, we rely on one or more of the following legal bases
under the GDPR:

• Contract: where processing is necessary to provide products or services you request.
• Legal obligation: where we must process or retain information to comply with applicable law.
• Legitimate interests: where processing is necessary for purposes such as website security, fraud prevention, customer service or protecting our legal rights, provided those interests are not overridden by your rights and freedoms.
• Consent: where you have actively consented to processing, for example certain marketing or optional tracking activities.

17. Your Rights Under the GDPR

Subject to the conditions and limitations of applicable data protection law,
you may have the following rights.

Right of access

You may ask whether we process personal data concerning you and request a copy
of the personal data we hold about you.

Right to rectification

You may ask us to correct inaccurate personal information or complete information
that is incomplete.

Right to erasure

You may ask us to erase personal data where the requirements for erasure are met.

This right does not require us to delete information that we are legally required
or otherwise lawfully entitled to retain, such as certain accounting records.

Right to restriction

In certain circumstances, you may ask us to restrict the processing of your
personal data.

Right to object

Where processing is based on legitimate interests, you may have the right to
object to the processing based on your particular circumstances.

You have the right to object at any time to the processing of personal data for
direct marketing purposes.

Right to data portability

Where applicable, you may request personal data you have provided to us in a
structured, commonly used and machine-readable format and may have the right
to transmit it to another controller.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out
before consent was withdrawn.

18. Exercising Your Rights

To exercise a data protection right or ask a privacy-related question, contact:

Alta Mensa B.V. / King Speciosa
Email: co*****@**********sa.se

Please provide sufficient information for us to understand your request.

We may need to verify your identity before fulfilling certain requests in order
to protect personal information against unauthorised disclosure.

We will respond within the period required by applicable data protection law.
There is normally no charge for exercising your data protection rights.

19. Complaints

If you believe that we have processed your personal data unlawfully or have not
respected your data protection rights, we encourage you to contact us so that
we can investigate the matter.

You also have the right to lodge a complaint with a competent data protection
supervisory authority.

As Alta Mensa B.V. is established in the Netherlands, the Dutch supervisory
authority is:

Autoriteit Persoonsgegevens

Depending on the circumstances, you may also have the right to lodge a complaint
with the supervisory authority in the EU or EEA country where you live, work,
or where an alleged infringement took place.

20. Age Requirements

Our online store is intended for customers who are at least
18 years of age.

We may request information necessary to confirm that a customer meets the
applicable minimum age requirement.

Information obtained specifically for age verification will only be used for
that purpose unless its further retention or use is required or permitted by law.

21. Automated Security and Fraud Checks

Our payment, anti-spam and security providers may use automated systems to
identify potentially fraudulent transactions, spam, automated requests or
security threats.

We do not intend to make decisions based solely on automated processing that
produce legal or similarly significant effects on individuals unless such
processing is permitted by applicable law and the required safeguards are provided.

22. Data Security

We use appropriate technical and organisational measures designed to protect
personal information against:

• Unauthorised access
• Accidental loss
• Unlawful disclosure
• Alteration
• Destruction
• Misuse

Measures may include encrypted connections, restricted administrative access,
security monitoring, backups, anti-spam protection and website security systems.

No method of internet transmission or electronic storage can be guaranteed to
be completely secure.

23. Third-Party Websites

Our website may contain links to websites or services operated by independent
third parties.

We are not responsible for the privacy practices of independent third-party
websites. We recommend reviewing their privacy notices before providing
personal information to them.

24. Special Categories of Personal Data

We do not intentionally request or require special categories of personal data
such as information concerning health, religious beliefs, political opinions
or similar sensitive information in the ordinary operation of our online store.

Please do not submit unnecessary sensitive personal information through our
contact forms, customer service channels or other website features.

25. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, service providers,
legal requirements or data-processing practices change.

The latest version will be published on this page and the
Last updated date will be changed accordingly.

Where appropriate, we may provide additional notice of material changes.

26. Contact Us

If you have questions about this Privacy Policy, the processing of your personal
data or your data protection rights, please contact:

Alta Mensa B.V.
King Speciosa
Vermogenweg 111
3641 ST Mijdrecht
The Netherlands

Email: co*****@**********sa.se
Website: https://kingspeciosa.eu

Last updated: 3 October 2026