Privacy Policy

You must read and accept the Privacy Policy before placing your order.

Last Updated: September 18 2026

1. Introduction

Kuycon L.L.C-FZ ("Kuycon," "we," "our," or "us") operates the e-commerce website kuycon.us, which sells Kuycon-branded computer monitors to customers in the United States and in the other countries listed on our Delivery page. We are a company established in Dubai, United Arab Emirates, and sell across borders; our registered address is Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. Your personal data is therefore processed in the UAE, where we are established, and by our fulfilment partners abroad, which store and ship the products. This Privacy Policy ("Privacy Policy") explains what personal data we collect, why we collect it, how long we keep it, to whom we disclose it, and the rights U.S. consumers have regarding their information. The Policy applies to all visitors, customers, and any other end-users of kuycon.us (collectively, "users").

2. Definitions

3. Data Collection

3.1 Types of Personal Data Collected

• Contact details (name, email address, telephone number)
• Order information (billing and shipping address, products purchased)
• Payment details (payment method and transaction identifiers; card details are entered on our payment provider's own page or form and never reach our systems — from the provider we receive only the card scheme and the last four digits)
• Account identifiers (the e-mail address you sign in with; sign-in itself is handled by our identity provider and we never hold a password for your account)
• Device and usage data (IP address, browser type, referring URLs, log files)
• Marketing preferences and communication history

3.2 Methods of Collection

• Website forms (checkout, account registration, contact forms)
• Support tickets and live-chat transcripts
• Cookies, pixel tags, and analytics scripts (see Section 7)
• First-party checkout analytics — de-identified events that record how visitors move through the purchase steps (for example, which step or form field they leave on) so we can improve the checkout. These events are not stored with directly identifying data for visitors located in the EU, EEA, or United Kingdom, and do not retain your IP address.
• Site analytics — a cookieless analytics tool (Rybbit) that we host on our own servers records page views, clicks, errors and page-load performance, and may record a replay of a visit with form fields and page text masked, so we can find what makes the site hard to use. For visitors located in the EU, EEA, or United Kingdom it loads only after they accept analytics cookies.
• Integrated services (e.g., payment gateways, analytics platforms, shipping carriers)

4. Legal Basis for Processing

We process personal data only when at least one lawful ground applies:

• Consent — e.g., when you opt in to marketing emails. You may withdraw consent at any time.
• Contract Performance — to fulfill an order or provide requested services.
• Legitimate Interests — such as fraud prevention, site security, or improving services, balanced against user rights.
• Legal Obligation — to comply with tax, accounting, or other applicable laws.

5. Use of Personal Data

5.1 Core Uses

• Order processing, payment, shipping, and confirmations
• Customer support and warranty services
• Marketing communications in compliance with the CAN-SPAM Act (with clear opt-in/opt-out)
• Website analytics, optimization, and security monitoring

5.2 Sale and Sharing of Personal Data

We do not sell your personal data for money. We do use Google Analytics and Google advertising tags on this Site, which share online identifiers such as your device and cookie identifiers with Google so that our advertising can be measured and directed. Under California law that counts as "sharing" for cross-context behavioural advertising. Unless you are in the European Economic Area, the United Kingdom or Switzerland — where we ask first — these cookies are active when you arrive, and you may opt out of them at any time through the cookie settings on this Site or by using a Global Privacy Control signal in your browser, which we honour automatically.

6. Data Sharing & Disclosure

7. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Essential / Functional — remember cart contents and login state
• Analytics — measure traffic and performance (e.g., Google Analytics)
• Advertising — deliver interest-based ads

Analytics and advertising cookies are asked for in advance if you are in the European Economic Area, the United Kingdom or Switzerland, and are active when you arrive everywhere else. Either way you can switch them off at any time through the Cookie Settings link in the footer of every page, or disable cookies in your browser. Some features may not function without certain cookies.

8. Data Retention

9. Your Privacy Rights (U.S.)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) you have the right to:

• Know what personal data we collect and why
• Access specific pieces of personal data
• Request deletion (subject to legal exemptions)
• Correct inaccuracies
• Opt out of sale or sharing of personal data
• Receive equal service and price, even if you exercise these rights

To exercise any right, email [email protected] or call +1 (213) 510-3548. We will verify your identity (or your authorized agent's) and respond within 45 days.

10. Your Rights in the European Economic Area and the United Kingdom

This Section applies to you if you are in the European Economic Area — the European Union plus Norway, Iceland and Liechtenstein — or in the United Kingdom. We no longer sell or ship to those destinations from this Site: orders for them are placed at kuycon.it, our European store, operated by our partner MMG Service Srl. We do still hold the personal data of customers there who ordered from us before that change, and we continue to serve them under warranty — so the General Data Protection Regulation, and for the United Kingdom the UK GDPR, governs what we do with that data. Where anything else in this Policy differs from this Section, this Section is the one that applies to you.

10.1 Who is responsible for your data

The controller is Kuycon L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates — the company that operates this Site, holds the payment accounts and runs the systems your order passes through. Write to [email protected], or to the postal address above, about anything in this Section.

10.2 What we do with your data, and on what legal basis

The name, delivery address, email address and telephone number on the checkout page are required: we cannot accept or deliver an order without them, and a carrier will not take a parcel that has no recipient telephone number. Everything else you tell us is optional.

10.3 Where your data comes from, and who receives it

Most of it you type in yourself. We also learn things about you from others: our payment provider tells us whether a payment succeeded, which card scheme was used and the last four digits of the card — never the card number, its expiry date or its security code — and the delivery carriers tell us where your parcel has reached.

These are the recipients, and each one gets only what its own purpose needs:

• Nomod and Mamo Pay — our card payment providers. You enter your card details on their page or in their form, and those details never reach us. Nomod acts as our commercial agent when it collects a card payment for an order placed with us, so a payment made to Nomod discharges what you owe us.
• The carrier that delivers your parcel, and the freight forwarders that move it before that. They receive the recipient's name, address and telephone number, because a parcel cannot be delivered without them.
• 17TRACK — the service that collects carrier checkpoints for us. It receives the tracking number and the carrier, not your name and not your address.
• Cloudflare — sits in front of this Site, so every request your browser makes to it, including your IP address, passes through Cloudflare before it reaches our servers.
• Google — the Google Analytics and Google advertising tags described in Section 5.2, and the address suggestions described above.
• Our fulfilment partners — they hold the stock, pack your monitor and hand it to the carrier, and receive the delivery details in order to do so.
• Our professional advisers, and public authorities where the law requires it.

Two things we do not do, because it is reasonable to assume otherwise: the email about your order is sent from our own mail server rather than through a third-party email provider, and the site-analytics tool named in Section 3.1 runs on our own server rather than a vendor's.

10.4 Your data leaving Europe

We are established in the United Arab Emirates and that is where your personal data is processed; our fulfilment partners in China process the delivery details. Neither country is the subject of a European Commission adequacy decision, and we do not claim that it is. We have no establishment, branch, office or server in the EEA or the United Kingdom, so when you place an order your data comes to us directly and nobody exports it out of Europe on your behalf. That does not put us outside the GDPR — Article 3(2)(a) brings us inside it precisely because we offer goods to people in the Union, and this Policy is how we answer for that. Some of the recipients listed above are likewise outside the EEA and the United Kingdom.

10.5 How long we keep it

The periods in Section 8 apply to you, and they are minimums rather than maximums — we would rather say that plainly than print a deletion date we do not keep. Order records and invoices are held for at least seven years because tax and accounting law requires it, and support correspondence for at least three years, because a warranty claim can arrive that late. The one deletion that happens on its own is our first-party checkout analytics: a daily job removes events older than 180 days. Everything else goes when you ask us to delete it and no law requires us to keep it.

10.6 Your rights

• Access (Article 15) — a copy of the personal data we hold about you, and an account of what we do with it.
• Rectification (Article 16) — have anything inaccurate corrected and anything incomplete completed.
• Erasure (Article 17) — have your data deleted, except what we are required to keep: an order record and its invoice are held for the tax and accounting period in Section 8 and we cannot delete those on request.
• Restriction (Article 18) — have us stop using your data while a dispute about its accuracy, or about our grounds for holding it, is resolved.
• Objection (Article 21) — object to anything we do on the ground of a legitimate interest, including the email about an unpaid order. Where you object to direct marketing we stop, without exception and without asking why.
• Portability (Article 20) — receive the data you gave us in a structured, commonly used, machine-readable file, or have us send it to another controller where that is technically feasible.
• Withdraw consent (Article 7(3)) — at any time, and as easily as you gave it. For cookies, the Cookie Settings link sits in the footer of every page. Withdrawing consent does not make what we did before it unlawful.
• Automated decisions (Article 22) — we do not refuse orders by software alone. Our checks can hold an order back from online card payment, but a member of our staff then decides what happens to it, and you may ask us why.

To exercise any of these, write to [email protected]. We may ask you for enough information to satisfy ourselves that the request is really yours. We answer within one month and charge nothing for it; where a request is complex we may take up to two further months, and we will tell you inside the first month that we are doing so and why.

10.7 Complaining about us

If you believe we have handled your personal data unlawfully, please tell us first at [email protected] — but you are not obliged to. Article 77 gives you the right to complain to the data protection supervisory authority of the EEA country where you live, where you work, or where you believe the problem happened. The European Data Protection Board publishes the list of national authorities at edpb.europa.eu. In the United Kingdom the authority is the Information Commissioner's Office, ico.org.uk.

10.8 Switzerland

The GDPR does not apply in Switzerland, but the Swiss Federal Act on Data Protection gives you comparable rights of access, correction, deletion and objection. Write to the same address to exercise them, and you may complain to the Federal Data Protection and Information Commissioner. For cookies we treat Swiss visitors exactly as we treat visitors in the EEA: we ask before anything but strictly necessary storage.

11. Children's Privacy (COPPA)

Kuycon does not target children under 13 and does not knowingly collect their personal data. If we learn we have collected such information, we will delete it or obtain verifiable parental consent, in accordance with the Children's Online Privacy Protection Act (COPPA).

12. Security Measures

We protect personal data with the measures set out below.

• The Site is served over HTTPS, so what you send us is encrypted in transit.
• Card details are entered on our payment provider's own page or form. We never receive your card number, its expiry date, or its security code — on this Site the provider's form is loaded in its own frame, so those fields are never handled by our code. Mamo Pay states that it is PCI DSS compliant; Nomod states that the regulated payment and banking partners it passes card data to are PCI DSS certified. We publish those as their statements, not as a certification of our own.
• Access to customer data is limited by role to the staff who need it; privileged accounts sign in with two-factor authentication, and the most sensitive actions require re-authentication.
• Our servers and applications keep access logs, and changes made to customer records through our internal systems are recorded in an audit log.
• Backups run automatically every day, are encrypted before they leave the server, and are held off-site; the key that decrypts them is never kept on a server.

No system is completely secure, and we cannot guarantee absolute security. Where a breach of your personal data is likely to put you at risk, we will notify you and the competent authorities as the law requires.

13. International Transfers

We are established in the United Arab Emirates, so your personal data is processed there, and by our fulfilment partners abroad who store and ship the products. Where data reaches a processor in another country, we require it by contract to protect that data and to use it only for the purposes we set. We do not participate in the EU–U.S. Data Privacy Framework, which is open only to organisations established in the United States.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. When we do, we will revise the "Last Updated" date and, if the changes are material, notify users by email or a prominent notice on our website.