KJs Holdings Inc Trading as Home Improvement & Hardware Supplies

Privacy policy

Last updated: 30 August 2026

This Privacy Policy explains how KJs Holding Inc, a Barbados limited liability company trading as Home Improvement & Hardware Supplies ("KJS", "we", "us" or "our"), collects, uses, shares and protects personal information when you:

  • visit www.homeimprovementbb.com or account.homeimprovementbb.com;
  • create or use a customer account;
  • place an online order, request delivery or pickup, or make a return;
  • contact our team or use our customer-support services; or
  • otherwise interact with our online services.

KJS is the data controller for the processing we carry out for our own purposes. Shopify and certain other providers may act as independent data controllers for processing described in their own privacy notices. Our contact details are in the Contact us section below.

Personal information we collect

The information we collect depends on how you interact with us.

Information you provide

  • Contact and identity information, such as your name, email address, telephone number, billing address and delivery address.
  • Account information, such as your account email, one-time login information, authentication identifiers, session information, sign-in preferences and account activity. Shopify manages the authentication process; KJS does not receive your login codes or other authentication secrets.
  • Order and transaction information, such as products purchased, order totals, pickup or delivery instructions, payment method and status, returns, refunds and related records.
  • Communications, including information you provide by email, telephone, chat, forms, reviews or other support channels.
  • Marketing preferences, such as whether you asked to receive news, offers or other promotional messages.

Information collected automatically

When you use our website or customer account, we and our providers may collect:

  • IP address, browser type, device type, operating system, language, approximate location and similar technical information;
  • pages, products, searches and links viewed;
  • cart, checkout, account and purchase activity;
  • dates, times, referring pages and interactions with messages or advertisements; and
  • cookies, pixels, local storage identifiers and similar technology data.

Information from other sources

We may receive information from Shopify, payment and fraud-prevention providers, delivery providers, analytics and advertising services, customer-support services, social sign-in providers you choose to use, and our order-management systems. We may combine this information with information we already hold when permitted by law.

Why we use personal information

We use personal information for the following purposes and legal bases:

  • To provide products and services and perform our contract with you. This includes creating and managing accounts, processing orders and returns, arranging pickup or delivery, sending service messages, and providing customer support.
  • To take steps you request before entering a contract. For example, answering a product, stock, delivery or quotation enquiry.
  • To meet legal obligations. This includes maintaining tax, accounting and transaction records, responding to lawful requests, and complying with consumer-protection and other applicable laws.
  • For our legitimate interests. These include operating a reliable store, protecting customers and our business, preventing fraud and misuse, resolving disputes, improving products and services, understanding website performance, and communicating with existing customers where permitted. These interests must be balanced against your privacy rights.
  • With your consent. We rely on consent when required, including for certain marketing, social sign-in features or non-essential tracking technologies. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

Information that is required or optional

Your name, contact information, order details, selected fulfilment method and any information needed to record payment are normally contractually required to accept and fulfil an order. After a purchase, we are legally required to keep certain invoice, transaction, tax and accounting records. If you do not provide the required information, we may be unable to accept or fulfil the order, arrange delivery or pickup, issue a refund, or answer a related request.

Creating a customer account, using Google sign-in, using Facebook sign-in when it is available, and subscribing to marketing are optional. If you do not create or use an account, account-only features will not be available. Declining marketing does not prevent you from making a purchase. Information in an optional enquiry or support message is voluntary, but we may not be able to resolve the matter without enough information to identify the product, order or issue.

Customer accounts and social sign-in

Shopify provides our customer-account service. Shopify processes account identifiers, login, session and security information to authenticate you, operate the account and protect the service.

Google sign-in is available. If you choose it, Google authenticates you and provides the information needed for the sign-in flow. Shopify states that the only customer data synchronized to Shopify through social sign-in is your email address. KJS does not receive your Google password, access token or other authentication secret.

We may also offer Facebook sign-in. When it is enabled and you choose it, Meta authenticates you and provides the information needed for the sign-in flow. Shopify states that the only customer data synchronized to Shopify through social sign-in is your email address. KJS does not receive your Facebook password, access token or other authentication secret.

Shopify uses the synchronized email address to authenticate you and match or create your Shopify customer account. KJS uses the resulting customer account to provide account features and support account security. We do not use information received specifically through social sign-in for advertising, and social sign-in does not by itself subscribe you to marketing. If you separately subscribe, we may use the same email address for marketing. The email address may also be processed through Shopify's Enhanced Services as explained below.

If you use Google or Facebook sign-in, you can remove that connection through the linked-app settings of the relevant provider. You would need to authorize the connection again to use that sign-in method later. Removing the connection does not automatically delete your KJS customer account or order records. Contact us if you want to request deletion of eligible information. Learn more in the Google Privacy Policy, Google's information about connections with third-party apps and services, the Meta Privacy Policy and Facebook Apps and Websites settings.

Orders, payments, pickup and delivery

We use contact, order and transaction information to confirm orders, collect or record payment, coordinate pickup or delivery, provide receipts, process returns or refunds, prevent fraud and maintain required business records.

Our online checkout currently offers manual payment methods, including Cash on Delivery and Manual Bank Transfer. Pickup orders may also be paid in store. Shopify records the order amount, selected payment method and payment status. Manual-payment orders remain pending or unpaid until KJS receives and records payment. When you use Manual Bank Transfer, KJS may receive transaction details such as the payer name, transfer reference or proof of payment needed to match the payment to your order. We do not ask for your online-banking password, PIN or one-time security code, and you should never send those credentials through email, chat or an unsecured form. We do not currently collect card or digital-wallet credentials through online checkout.

Marketing communications

Marketing signup is optional. The marketing checkbox shown at checkout and sign-in is not selected by default; you must select it or take another affirmative action to subscribe. Creating an account, using Google or Facebook sign-in, or placing an order does not by itself subscribe you to marketing. Where you have consented, or where another legal basis permits it, we may use your contact details and shopping interests to send relevant news, product information and offers.

You can unsubscribe using the link in a marketing email or by sending us a written request. We aim to stop marketing promptly and, in all cases, by the end of 21 days after receiving a written direct-marketing objection, as required by Barbados law. We may retain a minimal do-not-contact record so that we can respect your opt-out.

Cookies, analytics, advertising and personalization

Our website and its providers use cookies, pixels and similar technologies for several purposes:

  • Required: security, account sessions, cart and checkout.
  • Personalization: customer choices and personalized store features.
  • Marketing: advertising, retargeting and campaign measurement.
  • Analytics: visits, searches, product interactions and site performance.

Our Shopify cookie banner is shown worldwide, including at checkout. You can use Cookie preferences in the footer to reopen Shopify's preference panel and change the supported choices at any time.

As of the date of this policy, our Shopify Customer Events settings identify Meta (Facebook and Instagram) and Google & YouTube as active integrations. Our storefront also loads Zoho PageSense as a separately installed website-experience analytics script. These services are used as follows:

  • Meta (Facebook and Instagram): advertising, retargeting, conversion and campaign measurement;
  • Google & YouTube: analytics, advertising, conversion and campaign measurement;
  • Zoho PageSense: website-experience analytics, such as interaction or session analysis, limited to the features actually enabled.

Our storefront also uses or loads services for security and bot prevention (including hCaptcha) and features such as chat, saved items, delivery, inventory display and authentication. Depending on the service and page used, a provider may receive device and cookie identifiers, IP address, browsing or search activity, cart or purchase events, campaign interactions, or information you deliberately submit to that feature. Shopify's privacy controls govern Shopify-managed services and pixels. Independently installed scripts must be configured separately to respect the applicable permission.

We do not sell personal information for money. Some advertising activities may nevertheless be treated as a "sale," "sharing" or targeted advertising under certain privacy laws. You can submit an applicable opt-out request through Your privacy choices, which is also linked in our footer. We also recognize Global Privacy Control signals where required by applicable law. A browser-based signal generally applies to that browser or device; use the page's form for an email-associated request. Cookie preferences and data-sharing opt-outs are related but separate controls.

Shopify Privacy Controls provides additional choices and request tools for Shopify's own processing. It does not control every cookie, pixel or provider used by our store.

For more information about cookies placed by Shopify, see Shopify's Cookie Policy.

Shopify and Shopify Network Intelligence

Shopify hosts our online store and provides services such as customer accounts, checkout, security, fraud prevention, analytics and platform support. Information you submit to our store is shared with Shopify and with third parties, which may be located in countries other than Barbados, to provide these services, including the Enhanced Services described below.

We have enabled Shopify Network Intelligence. Shopify can therefore use information from your interactions and transactions with our store together with information from other Shopify merchants and Shopify to provide and improve Enhanced Services. These services can include advanced customization and personalization, analytics and store performance, and advertising and advertising measurement. For some Enhanced Services, Shopify processes personal information as an independent data controller under its Consumer Privacy Policy.

Some Shopify Network Intelligence activity can be affected by the cookie and data-sharing choices described above. To understand Shopify's processing and your choices, read the Shopify Consumer Privacy Policy and visit Shopify Privacy Controls. These controls do not by themselves govern independently installed Meta, PageSense or other legacy scripts.

How we share personal information

We share only the information reasonably needed for the relevant purpose with:

  • Shopify and ecommerce providers that host and operate our online store, customer accounts, checkout and related services;
  • payment and transaction providers that process or record the payment method you select;
  • delivery, pickup and logistics providers that help fulfil an order;
  • technology and service providers that support search, inventory, point-of-sale, data hosting, security, fraud prevention, communications, customer service and website operation;
  • analytics, advertising and marketing providers that help us understand performance or deliver and measure campaigns, subject to applicable choices and law;
  • professional advisers, such as accountants, auditors, insurers and legal advisers, where necessary;
  • public authorities or other parties when required by law or reasonably necessary to protect rights, safety, customers or our business; and
  • a successor or transaction participant if our business or assets are reorganized, financed, sold or transferred, subject to appropriate confidentiality and legal requirements.

Providers acting on our instructions may process information only for the services described in their agreements with us, subject to applicable law. Shopify and other providers that determine their own purposes and methods for particular processing act as independent controllers and handle information under their own privacy notices and legal obligations.

International processing and transfers

We are based in Barbados. Under Shopify's current terms, a merchant whose store billing address is in Barbados contracts with Shopify International Limited in Ireland. Shopify may transfer customer personal information to Shopify affiliates and subprocessors in Canada, Singapore, the United States and other countries identified in Shopify's current subprocessor list. Some of our other providers also process information outside Barbados. Privacy laws in those countries may differ from Barbados law.

As at the date of this policy, we have not identified a published Barbados adequacy decision covering Canada or the United States, and we do not rely on such a decision. Shopify is bound by its Data Processing Addendum and published privacy and security commitments, including written obligations for subprocessors. Shopify also uses binding corporate rules and contractual clauses for transfers governed by European law. We do not represent that those European mechanisms are safeguards prescribed or authorized by the Barbados Data Protection Commissioner.

Where a transfer is objectively necessary to take steps you request or to perform our contract with you, such as operating checkout and fulfilling an order, we rely on the applicable condition in section 26(b) of the Barbados Data Protection Act. We do not use contract necessity as the basis for optional analytics, advertising, personalization or Shopify Network Intelligence transfers. Where consent is the applicable transfer condition, we obtain specific, informed consent before the transfer. Contact us to ask about the condition and protections applicable to a particular transfer and, where a section 24 safeguard is used, how to obtain a copy.

How long we keep personal information

We keep personal information only for as long as needed for the purpose for which it was collected and for applicable legal, accounting, security and dispute-resolution requirements. Some periods are fixed; where a fixed period is not possible, we use the criteria described below:

  • Account information is generally kept while the customer account is active or while it is needed to provide account services, protect the account or complete an eligible deletion request. Information also contained in an order, security or legal record follows the retention rule or criteria for that record. An email address synchronized through social sign-in is stored in the Shopify customer record; KJS does not keep a separate Google or Meta profile.
  • VAT records and associated transaction records are retained for seven years after the end of the year to which they relate. This includes payment-status information needed to document the transaction. We retain records longer where an objection, appeal, investigation, legal hold or other applicable law requires it. Associated return and delivery information follows this period when it forms part of the VAT or transaction record; otherwise, the criteria below apply.
  • Abandoned checkouts are retained for up to three months and are then deleted automatically by Shopify under Shopify's platform-managed retention rule.
  • Customer-support communications are kept while needed to answer the enquiry, manage an order, return, warranty, complaint or dispute, meet a legal obligation, or establish, exercise or defend a legal claim.
  • Marketing information is kept while your marketing consent remains active or while another applicable legal basis and the relevant marketing programme continue. After an opt-out, we keep only a minimal suppression record needed to respect your choice and avoid contacting you again.
  • Analytics identifiers are kept while needed to understand website performance, search and customer interactions for the disclosed purpose, subject to your applicable consent and choices and the relevant provider's configurable retention settings.
  • Security and fraud-prevention records are kept while needed to protect the service, detect or investigate suspected misuse, resolve a security incident or dispute, establish or defend a legal claim, or meet an applicable legal obligation.

For information without a fixed period, we consider whether an account remains active; whether an order, return, warranty, delivery, support matter, investigation or dispute remains open; applicable tax, accounting, legal and security obligations; your consent and preferences; and the technical settings of Shopify and other providers. Shopify does not provide one configurable retention rule for every category. We periodically review relevant records and provider settings and use deletion, anonymization or redaction where necessary. Exact deletion timing may be affected by legal holds, reasonable backup cycles, platform or provider limitations, and information that must remain linked to an order or legal record. When none of the applicable retention criteria continues to apply and deletion is permitted, we delete, anonymize or securely dispose of the information.

Security

We use reasonable technical and organizational measures designed to protect personal information against loss, misuse, unauthorized access, alteration and disclosure. These include using reputable service providers, access controls, secure connections and appropriate operational procedures. No internet transmission or storage method is completely secure, so we cannot guarantee absolute security.

If a personal-data breach occurs, we will investigate and notify the Data Protection Commissioner and affected individuals when and within the time required by applicable law.

Children

Our store and services are not directed to children under 18. Under Barbados law, processing a child's personal information on the basis of consent requires consent or authorization from the child's parent or guardian, together with reasonable steps to verify that authorization. We do not knowingly create online customer accounts for, or collect personal information directly from, a child without that authorization. If you believe a child has provided personal information to us without proper authorization, please contact us so that we can investigate and take appropriate action.

Your privacy rights

Subject to the Barbados Data Protection Act, 2019-29 and any applicable limits or exceptions, you may have the right to:

  • ask whether we process your personal information and receive access to it and a copy;
  • correct inaccurate information or complete incomplete information;
  • request deletion when the legal conditions apply;
  • request restriction of processing in specified circumstances;
  • receive eligible information in a portable format where processing is automated and based on consent or contract;
  • object to or seek prevention of certain processing, including processing likely to cause substantial unwarranted damage or distress;
  • object to direct marketing at any time;
  • withdraw consent at any time, where we rely on consent;
  • ask for information about international-transfer safeguards; and
  • not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where the law permits it with appropriate safeguards.

We may use automated signals to identify possible fraud or security risks for review. KJS does not currently make decisions that produce legal or similarly significant effects based solely on automated processing.

To exercise a right, contact us using the details below and describe your request. We may ask for information reasonably necessary to verify your identity or authority. We will respond without undue delay and generally within one month of receiving the request. Where the law permits an extension because of complexity or the number of requests, we may take up to two additional months, but we will tell you within the first month and explain why.

You may also complain to the Barbados Data Protection Commission:

Data Protection Commission
Ministry of Industry, Innovation, Science & Technology
5th Floor, SSA Building
Vaucluse, St. Thomas, Barbados
Telephone: (246) 536-1200 or (246) 536-1212
Data Protection Commission information

We encourage you to contact us first so that we can try to address your concern.

Contact us

For privacy questions, requests or complaints, contact:

KJs Holding Inc
Trading as Home Improvement & Hardware Supplies
Home Improvement Building
Green Hill, St. Michael BB12003
Barbados
Email: info@homeimprovementbb.com
Telephone: (246) 538-8833

Changes to this policy

We may update this policy to reflect changes to our services, technology, providers, practices or legal obligations. We will post the revised policy here and update the "Last updated" date. If a change materially affects how we use personal information, we will provide any additional notice or choice required by law.