Privacy policy

Last updated: April 28, 2026

This Privacy Policy explains how Earnovex Ltd, trading as Carnikit ("we", "us", "our"), collects, uses, and protects your personal information when you visit carnikit.com or purchase one of our digital products. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

We are Earnovex Ltd, a company registered in England and Wales under company number 16382842, with its registered office at 124 City Road, London, EC1V 2NX. Carnikit is a trading name of Earnovex Ltd. For all data protection enquiries, contact us at support@carnikit.com.

2. The Information We Collect

When you visit our site or make a purchase, we may collect the following:

  • Identity and contact data — your name, email address, billing address, and country.
  • Transaction data — details of products purchased, order history, and payment confirmation. We do not store full payment-card details; these are processed directly by Shopify Payments and our other payment providers.
  • Technical data — IP address, browser type, device information, time-zone setting, and the pages you visit on our site. This is collected automatically through cookies and similar technologies (see our Cookie Policy).
  • Marketing data — your preferences for receiving communications from us, and your responses to those communications.
  • Communications data — messages you send us via email or contact form.

3. How We Use Your Information

We process your personal data for the following purposes, on the following legal bases:

  • To fulfill your order (legal basis: contract). We need your email and billing details to deliver your digital products and provide customer support.
  • To run and improve our store (legal basis: legitimate interest). We use analytics to understand which products and pages perform well.
  • To send marketing communications (legal basis: consent). Only if you have opted in. You can unsubscribe at any time using the link in any of our emails.
  • To meet legal and accounting obligations (legal basis: legal obligation). We retain transaction records as required by UK tax and company law.
  • To prevent fraud and protect the security of our store (legal basis: legitimate interest).

4. Who We Share Your Information With

We share your data only with trusted service providers who help us run our business. These include:

  • Shopify — our e-commerce platform, which hosts our store and processes payments.
  • Payment processors — Shopify Payments, Stripe, and PayPal, who handle card transactions on our behalf.
  • Email marketing platform — currently Klaviyo, which manages our subscriber list and automated emails.
  • Analytics providers — Google Analytics, Meta (Facebook/Instagram), Pinterest, and TikTok, which help us understand site performance and ad attribution.
  • Digital delivery providers — services that fulfil your download links.

We never sell your personal data to third parties.

5. International Data Transfers

Some of the providers listed above are based outside the UK and the European Economic Area (EEA), including in the United States. Where data is transferred internationally, we rely on UK-approved transfer mechanisms — typically the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses — to ensure your data remains protected.

6. How Long We Keep Your Data

  • Order and transaction records: retained for at least six years to meet UK tax and accounting requirements.
  • Marketing data: retained for as long as you remain subscribed, and deleted on request.
  • Analytics data: retained according to the policies of our analytics providers, typically up to 26 months.

7. Your Rights

Under UK GDPR, you have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate data;
  • request erasure of your data ("right to be forgotten");
  • object to or restrict processing;
  • request transfer of your data to another provider (data portability);
  • withdraw consent at any time, where processing is based on consent;
  • complain to the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email support@carnikit.com. We will respond within one calendar month.

8. Children

Our products and store are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently done so, please contact us and we will delete the data promptly.

9. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be notified to subscribers by email.

11. Contact Us

For any questions about this Privacy Policy or how we handle your data, contact us at support@carnikit.com.

Earnovex Ltd 124 City Road, London, EC1V 2NX. Company number: 16382842