KERPOP PRIVACY POLICY

Last updated: 19 January 2026

Kerpop (“Kerpop”, “we”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, store and share personal information when you visit kerpop.com (the “Site”), contact us, sign up for updates, take part in the Magic Bag Challenge (“MBC”), or donate via third-party platforms.

1) WHO WE ARE

Kerpop is the operator of this Site and the organiser of the Magic Bag Challenge campaign. If you have questions, contact:

Email: hello@kerpop.com

Location: United Kingdom

2) WHAT INFORMATION WE COLLECT

We may collect the following categories of information:

A) Information you provide directly

– Name, email address, phone number (if you choose to provide it)

– Messages you send via contact forms, email, or social media DMs

– Delivery details if we are sending you rewards/merch (name, address, delivery notes)

– Optional campaign info you choose to share (e.g., photos/videos or posts connected to MBC)

B) Information collected automatically (website usage)

– Device information (browser type, operating system)

– IP address (which can indicate approximate location)

– Pages viewed, clicks, time on page, referring/exit pages

– Cookies and similar technologies (see “Cookies” section)

C) Donations and payments

Kerpop does not process card payments on this Site. If you donate through a third-party platform (e.g., JustGiving or similar), that platform will collect and process your payment details and donor information under their own privacy policy. We may receive limited information from them (for example, your name, donation amount, message, or whether the donation was made anonymously) depending on your settings on that platform.

3) HOW WE USE YOUR INFORMATION

We use personal information to:

– Provide and operate the Site

– Respond to enquiries and customer support requests

– Send updates if you opt in (campaign news, launch info, event announcements)

– Run and administer the Magic Bag Challenge (e.g., confirming participation, coordinating drop-offs where relevant, contacting winners if applicable)

– Fulfil rewards, merch, or deliveries where offered

– Improve the Site and campaign experience (analytics, performance, debugging)

– Protect Kerpop, our supporters, and the public (fraud prevention, security)

– Meet legal and regulatory obligations

We do not sell your personal information.

4) OUR LEGAL BASES (UK GDPR)

Where UK GDPR applies, we rely on:

– Consent (e.g., newsletter sign-up, optional marketing)

– Contract (e.g., if you request a reward, merch, or delivery)

– Legitimate interests (e.g., improving our services, running MBC, preventing fraud)

– Legal obligation (e.g., compliance, record-keeping where required)

5) MARKETING AND UPDATES

If you subscribe to Kerpop updates, we’ll send you messages about the campaign and Kerpop news. You can unsubscribe at any time using the link in our emails or by contacting us at hello@kerpop.com 

6) MAGIC BAG CHALLENGE (MBC) — IMPORTANT NOTES

The Magic Bag Challenge may involve public participation, user-generated content, and social sharing. Please keep in mind:

– If you post content publicly (e.g., on social media), your content is governed by that platform’s privacy settings.

– If you send Kerpop photos/videos for reposting, we will ask or rely on your permission and you can request removal at any time.

– We may record or photograph public moments at events or activations. We will not intentionally focus on children without appropriate permission.

7) WHO WE SHARE INFORMATION WITH

We may share information with trusted service providers who help us run Kerpop, such as:

– Website hosting and site tools (e.g., forms, security)

– Email and communications providers (newsletter delivery)

– Analytics providers (to understand site usage)

– Delivery/shipping providers (if sending rewards/merch)

– Professional advisers (legal, accounting) where necessary

– Law enforcement or regulators if required by law

We only share what is necessary and expect providers to protect your information.

8) INTERNATIONAL TRANSFERS

Some service providers may store data outside the UK. Where this happens, we use safeguards such as UK-approved transfer mechanisms (e.g., standard contractual clauses) where appropriate.

9) DATA RETENTION

We keep personal information only as long as necessary for:

– The purposes described in this policy

– Running and concluding MBC

– Fulfilling any reward/merch commitments

– Legal and accounting requirements

When we no longer need it, we securely delete or anonymise it.

10) YOUR RIGHTS

Subject to UK GDPR, you may have rights including:

– Access to your personal data

– Correction of inaccurate data

– Deletion (in certain circumstances)

– Restriction or objection to processing

– Data portability

– Withdrawal of consent (where consent is the basis)

To make a request, contact hello@kerpop.com. We may need to verify your identity.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

11) COOKIES

We use cookies and similar technologies to:

– Make the Site work properly

– Remember preferences

– Understand traffic and performance (analytics)

You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

12) SECURITY

We use reasonable technical and organisational measures to protect your information. However, no internet transmission is completely secure, so please take care with what you share online.

13) CHILDREN

Kerpop is not intended for children under 13. If you believe a child has provided personal data to us, contact us and we will delete it where appropriate.

14) CHANGES TO THIS POLICY

We may update this policy from time to time. We’ll post the latest version on this page and update the “Last updated” date.

15) CONTACT

Questions about privacy or this policy:

Email: hello@kerpop.com