GDPR Compliance

KB&A The Home Improvement Store, doing business as KBA Home Living (“KBA Home Living,” “we,” “us,” or “our”), is committed to protecting the personal data of visitors and customers who interact with us from the European Economic Area (EEA), the United Kingdom, and Switzerland. This page explains how we meet our obligations under the General Data Protection Regulation (GDPR) and the UK GDPR. It supplements, and should be read together with, our full Privacy Policy.

1. Who We Are (Data Controller)

KB&A The Home Improvement Store (dba KBA Home Living) is the data controller responsible for the personal data described on this page.

2. What Personal Data We Process

• Contact and account details — name, email address, phone number, billing and shipping address
• Order and service details — products purchased, custom cabinet or vanity specifications, installation scheduling, and service history
• Payment information, processed by our payment processor — we do not store your full card number on our servers
• Messages you send us through our contact form, email, phone, or chat
• Technical data collected automatically — IP address, browser and device information, pages viewed, referring website, and cookies

For the complete list of what we collect and why, see our Privacy Policy.

3. Our Legal Bases for Processing

Under Article 6 of the GDPR, we rely on the following legal bases:

• Contract: to process and fulfill your order, schedule installation, and provide customer service
• Legitimate interests: to secure the Site, prevent fraud, and improve our products and services, balanced against your rights and freedoms
• Consent: for optional marketing communications and non-essential cookies, which you can withdraw at any time
• Legal obligation: to meet tax, accounting, and other legal recordkeeping requirements

4. International Data Transfers

KBA Home Living is based in the United States, and the personal data we collect is processed and stored in the United States. When we transfer the personal data of individuals in the EEA, UK, or Switzerland outside those regions, we rely on appropriate safeguards recognized under GDPR, such as Standard Contractual Clauses, and we require our service providers to protect your data to a comparable standard.

5. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfill the purposes described in this notice — including order history, warranty coverage, and tax and accounting recordkeeping — after which we securely delete or anonymize it, unless a longer period is required by law.

6. Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure (the “right to be forgotten”), subject to legal exceptions
• Restrict or object to our processing of your data
• Data portability — receiving your data in a structured, machine-readable format
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
• Lodge a complaint with your local data protection supervisory authority

7. How to Exercise Your Rights

To exercise any of these rights, contact us using the details in Section 1. We will respond within the timeframes required by GDPR, and we may need to verify your identity before fulfilling your request.

8. Cookies

We use cookies and similar technologies as described in our Privacy Policy. Non-essential cookies are only set with your consent, which you may withdraw at any time.

9. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal data, including secure processing through our payment processor. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Notice

We may update this GDPR Compliance notice from time to time. When we do, we will post the change on this page with a revised “Last updated” date.

11. Contact Us & Supervisory Authority

If you have questions about this notice or how we handle your personal data, contact us: