Last updated: 2026-09-23
This policy explains how personal information is handled when you browse KENZO, create an account, buy a digital product, use Market Scan, request support or connect an optional service. It describes our store, not the separate practices of your broker or other third-party websites.
1. Who is responsible
The operator responsible for this store is KenzoEA, based in cambodia. Public contact address: Cambodia, Phnom Penh. Contact support@kenzoea.com for privacy questions or requests.
2. Information we handle
Account and order information can include your name, email address, account identifier, billing/contact details, purchased items, order status and payment transaction references. Payment providers handle payment processing under their own privacy policies. Do not send complete payment-card details through support.
Support information includes the messages, attachments and troubleshooting details you choose to provide. Optional reviews, community submissions and Telegram connections can include the profile identifiers, messages or files needed for those features.
Technical information can include IP addresses, device/browser information, cookies, session identifiers, website access/security logs and checkout attribution information. Market Scan records include the requested market, strategy/timeframe, request times, quota/credit activity and analysis results.
Website support tickets and messages can be stored in WordPress and the private control center. For connected accounts, website support messages and staff or AI replies can also be delivered through Telegram. Optional wish lists, cart reminders and campaign features can record saved items, reminder consent, campaign choices and interaction or conversion events.
3. Why we use it
We use information to provide accounts, process and confirm orders, make authorized downloads available, maintain credit balances, provide scans, respond to support, prevent abuse and investigate errors. We also keep records needed for payment reconciliation, disputes and legal obligations.
Where data-protection law requires a lawful basis, processing may be necessary to perform your requested contract, meet a legal obligation, pursue proportionate security/service-administration interests, or rely on your consent for optional activities. The applicable basis depends on the activity and the law that applies to you. Optional marketing is separate from order and service communications.
4. Local AI and Market Scan
Market Scan uses a local worker and local AI explanations when connected. The worker receives the scan job and supported market data needed to produce the analysis; the website associates usage with an account or guest allowance. Local AI does not mean every part of the website remains on your device. Hosting, network logs, payment services and external chart/data services are separate.
Guest daily quotas use a salted hash derived from the network address. The raw address can still be processed by the web server or security providers; hashing the quota identifier is not a promise of anonymous browsing.
Published market setups and price-path outcomes omit customer account identifiers and private scan request keys. They describe market observations, not a public history of your broker account. Do not submit broker passwords, private keys or other secrets to an AI or support conversation.
Local support AI may receive your current question, ticket subject and recent conversation context, including personal information you put in that conversation. Do not assume that an input has been anonymized before it reaches the local model. This differs from market explanations, which use strategy and price-data observations.
5. Service providers and optional connections
Information may be processed by providers needed for hosting, security, payments, email delivery and the features you choose to use. The store includes WooCommerce integrations; payment options may include PayPal and KHQR/KHPay where offered at checkout. Provider availability can change.
TradingView charts/calendar, market-data sources, social embeds and linked websites may receive technical request information when their content loads or you follow a link. They operate under their own policies. An optional Telegram connection shares information needed to link your Telegram identity to the store and deliver the requested account/support features.
Providers or infrastructure may be located outside your country. Applicable cross-border protection requirements must be considered for the service used; contact us for relevant transfer information. We do not claim that all providers store information in one country.
6. Public information and choices
A review or other contribution you submit for public display may be visible to other visitors. Check names and screenshots before sharing and remove account balances, identifiers or other information you do not want public.
We distinguish private support from feedback approved for publication. Contact us about a correction or removal request; legal recordkeeping obligations or copies independently held by third parties may affect what can be removed.
Feedback sent in a connected private Telegram group may be recorded privately before any request to share it publicly. Withdrawal of permission for a public post removes that publication through the available process; it does not automatically erase private support, bot-update or source records.
Photos submitted through the website gallery are uploaded to website media storage and may be reachable through a direct file link before gallery approval. Upload only images you intend to share publicly and remove private information and unnecessary image metadata first. Gallery approval is not a promise of private file storage.
7. Cookies and embedded content
Essential account, cart, security and consent functions may use cookies or similar storage. Other integrations can use attribution, analytics, social or advertising technologies according to their configuration and applicable requirements. A session identifier or technical identifier can still relate to a person.
Use the available cookie controls and browser settings to manage preferences. Blocking essential storage may prevent login, checkout or other requested features from working. Some external chart content loads when a page opens; the economic calendar loads when requested. External services apply their own privacy and storage practices.
8. Retention and security
Retention depends on why the information is needed: account/service access, downloads, credit accounting, technical support, security, financial records and unresolved disputes can require different periods. We consider the applicable legal requirements and whether the information is still needed for those purposes. Closing a browser does not automatically delete account, order, support or credit records.
You may ask us about the retention criteria for your information or request deletion. Some records may need to be retained for a legal obligation or a live dispute, and backups/provider copies may follow separate retention cycles. We cannot promise an immediate deletion from every backup.
We use access controls and other measures intended to protect information, but no website or transmission method can be guaranteed completely secure. Keep your password private and tell support promptly if you suspect unauthorized access.
Some features have defined technical lifetimes: Telegram connection codes expire after 10 minutes; saved-cart recovery records use a configurable retention period (30 days by default); completed or failed marketing AI jobs are cleaned up after 30 days. These limits do not describe the retention of order, support, private Telegram-source or credit records. Contact us about those records.
9. Your privacy rights
Depending on the law that applies, you may have rights to information, access, correction, deletion, restriction, portability, objection or withdrawal of consent. Withdrawing consent does not automatically make earlier lawful processing unlawful. You may also have a right to complain to a competent data-protection authority.
Contact support@kenzoea.com and explain your request. We may need proportionate identity verification to protect your account and will respond within the applicable legal time limit. We will explain any lawful reason a request cannot be fully fulfilled; a request is not a reason to demand unnecessary financial secrets.
10. Children, changes and contact
KENZO’s trading-related products and services are intended for people legally able to use them and enter the relevant contracts. They are not directed to children. If you believe a child has provided personal information, contact us.
We may update this notice to reflect service or legal changes. Check its version date and contact support@kenzoea.com with questions about the information described here.
Optional recent purchase notices
Public recent-sale notices may show a purchased product and its approximate payment time for eligible paid orders from the past seven days. Buyer names and countries are omitted by default.
If you opt in under My Account → Account details → Recent purchase notices, these notices may also show your billing first name and billing country. The notices do not expose surnames, email addresses, street addresses, cities, or order and customer numbers.
Sharing is optional. You can withdraw permission by unchecking the preference and saving your account details. Newly loaded notices will then omit your name and country. A notice already loaded in another visitor’s browser may remain briefly.
Optional offers and product activity
Email signup is optional and requires inbox confirmation. We store your email address and confirmation time until you unsubscribe or request removal. Pending requests are removed after seven days. You can use the unsubscribe link in your confirmation email or contact support to remove your subscription.
Product activity counts browser sessions using a hashed session identifier retained for 24 hours. Active visits cover two minutes; recent visits cover 24 hours. These are visits, not verified individuals. A short-lived hashed network identifier limits signup abuse.
Recent product order counts use up to the 100 latest paid orders in seven days. Refunded orders and free gifts are excluded. Counts contain no customer names or contact information.