Last updated: 16 October 2026
This policy explains what personal data we collect through this website, why we collect it, the legal bases we rely on, who we share it with, how long we keep it, and the rights you have. It also explains which cookies and similar technologies we use and how you control them.
1. Who we are (Data Controller)
This website, global.kromedispense.com (“Krome Dispense”, “we”, “us”, “our”), sells beer and beverage dispensing equipment and related products and serves customers internationally, with warehouses in India and the USA.
For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and related data-protection laws, Krome Dispense is the data controller for the personal data processed through this website. You can contact us about this policy or your personal data at:
- Email: info@kromedispense.com
- Telephone: +91 9175400006
- Website: https://global.kromedispense.com
2. The personal data we collect
Depending on how you use the site, we may process:
| Category | Examples | Source |
|---|---|---|
| Account & order data | Name, email, telephone, billing/shipping address, order and enquiry history, account credentials | Provided by you (account / orders / enquiries) |
| Enquiry / quote data | Name, email, phone, company and the content of your message | Provided by you via contact / enquiry / quote forms |
| Payment data | Where a payment is taken, the payment method and transaction confirmation. Full card details are handled by our payment provider and are not stored on our servers beyond the order record. | Provided by you; processed by the payment provider |
| Technical & usage data | IP address, device/browser information, pages viewed and interactions, and identifiers set by cookies | Collected automatically (subject to consent for non-essential cookies — see Section 9) |
| Security & server logs | IP address, request metadata and security events | Collected automatically for security |
We do not intentionally collect special-category data through this website. Please do not submit such data to us.
3. How and why we use your data, and our legal bases
We only process personal data where we have a lawful basis under Article 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Operating the website and processing orders, accounts, deliveries, payments and customer service | Contract (Art. 6(1)(b)) |
| Responding to contact, quote and enquiry requests | Legitimate interests, and/or consent where provided (Art. 6(1)(f) / (a)) |
| Analytics and site improvement via Google Analytics 4 | Consent (Art. 6(1)(a)) — denied by default, activated only if you opt in |
| Loading embedded media (Vimeo) when you choose to | Consent (Art. 6(1)(a)) — click-to-load |
| Security, bot/abuse protection and content delivery via Cloudflare | Legitimate interests (Art. 6(1)(f)) |
| Meeting legal, tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have balanced those interests against your rights. You can object to such processing (see Section 7).
4. Who we share your data with
We share personal data only where necessary, with: our payment provider (to process any payments); shipping and logistics providers (to deliver orders); the service providers listed in Section 9 (Google, Vimeo, Cloudflare); our hosting provider, GoDaddy (Managed WordPress); and professional advisers or authorities where required by law. Each processor acts under a data-processing agreement and may only process your data on our instructions. We do not sell your personal data.
5. International data transfers
Some service providers are located outside the European Economic Area (EEA) / UK, including in the United States — Google LLC (Analytics, Tag Manager), Vimeo, Inc. and Cloudflare, Inc. Where personal data is transferred outside the EEA/UK, we rely on an appropriate safeguard such as the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. You can request more information using the contact details in Section 1.
6. How long we keep your data
We keep personal data only for as long as necessary for the purposes described above, and as required by applicable tax, accounting and legal obligations. Account and enquiry data are kept while they remain relevant to our relationship with you and then deleted or anonymised. Erasure on request is enabled: when you make a verified erasure request, personal data within your orders and any download access are removed, except where we are legally required to retain certain records.
7. Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and — where we rely on consent — to withdraw that consent at any time without affecting processing carried out before withdrawal (see Section 9 for how). To exercise any of these rights, contact us using the details in Section 1; we will respond within the time required by law (generally one month) and may need to verify your identity. You also have the right to lodge a complaint with your local data-protection supervisory authority.
8. Children
This website and shop are intended for adults and business customers. We do not knowingly collect personal data from children. Visitors under the age of 16 should not consent to optional (non-essential) services themselves — a parent or guardian should agree on their behalf. If you believe a child has provided us data without appropriate consent, please contact us and we will delete it.
9. Cookies and similar technologies
We use cookies and similar technologies to operate the website and, with your consent, to analyse usage and show embedded media. We use Real Cookie Banner to obtain and manage your consent, together with Google Consent Mode v2.
How consent works: when you first visit, our cookie banner lets you Accept all, Continue without consent, or set your preferences individually by category. No non-essential cookies are set and no analytics or tracking data is sent before you consent — Google Consent Mode defaults to “denied”, so Google services do not load or collect data until you opt in. Only strictly necessary (essential) technologies run without consent. You can change or withdraw your consent at any time — as easily as you gave it — using the floating “Cookie settings” widget shown on every page, which lets you revoke consent, change your choices and view your consent history.
Essential — always active (strictly necessary): Real Cookie Banner (self-hosted; software by devowl.io; your consent choices are stored on our own server) — stores your cookie-consent choices; WooCommerce (self-hosted) — shopping cart, checkout, session and order functionality; Cloudflare (Cloudflare, Inc.) — content delivery, security and bot/abuse protection.
Functional — opt-in: Vimeo (Vimeo, Inc.) — plays embedded videos; videos are blocked until you click to load them, so no data goes to Vimeo until you choose to watch.
Statistics — opt-in: Google Analytics 4, delivered via Google Tag Manager (Google LLC) — measures how visitors use the site so we can improve it; it loads only after you consent to the Statistics category, and consent is signalled to Google via Consent Mode.
Marketing: we currently run no marketing or advertising cookies on this website. If this changes, we will update this policy and request your consent before any such service loads.
You can also control or delete cookies through your browser settings; blocking essential cookies may stop parts of the site (such as the cart or checkout) from working.
10. How we protect your data
We use appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), access controls and a security/CDN layer (Cloudflare). No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authority of any breach where legally required.
11. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you or ask for renewed consent.
12. Contact
For any privacy question or to exercise your rights, contact us at info@kromedispense.com or +91 9175400006.