Privacy Policy

OKURA LTD, registered in England & Wales, company number 16755177, registered office 71 to 75 Shelton Street, London, WC2H 9JQ. For anything to do with your data, email office@okurawellness.com.

Name, email address, delivery and billing address, and phone number where you give it. Order data: what you bought, order value, order and subscription history, deliveries, returns and refunds. Payment data: payment is handled by Stripe. We receive confirmation of payment and the card type and last four digits. We never see or store your full card number. Account and waitlist data, and your marketing preferences. Emails you send us and our replies. Technical and usage data such as IP address, device and browser, collected through cookies. See our Cookie Policy.

Orders, subscriptions, delivery and support — performance of our contract with you. Payment and fraud prevention, through Stripe — contract, and our legitimate interest in preventing fraud. Marketing emails and waitlist updates — your consent, or our legitimate interest where you are an existing customer and we tell you about similar products. You can opt out at any time. Advertising and measurement cookies, including the Meta Pixel and Conversions API — your consent, given through our cookie banner. Running and securing the site — our legitimate interest. Accounting, tax and legal requests — our legal obligations.

We send marketing emails where you have asked us to, or where you have bought from us and we are telling you about similar products. Every email has an unsubscribe link. We do not send marketing by SMS or post, and we do not sell or rent your data.

We use a consent banner provided by Cookiebot. Necessary cookies are always on; nothing else is set until you choose. Where you consent to marketing, we use the Meta Pixel and Meta Conversions API to measure our advertising and show you OKURA on Facebook and Instagram; for that, OKURA and Meta act as joint controllers. You can change or withdraw consent at any time through Cookie settings in the footer.

Huboo — our fulfillment partner. Stripe — payments and fraud prevention, also a controller in its own right for those purposes. Klaviyo — sending our emails. Meta — advertising and measurement, where you have consented. Cookiebot — recording your cookie choices. Supabase and our website host — hosting and the database behind the site, orders and waitlist. Advisers and authorities — accountants, lawyers and insurers, and any authority where the law requires it. We do not sell your personal data.

We keep data in the UK or the European Economic Area where we can. Where a provider stores data elsewhere we rely on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the UK International Data Transfer Agreement or Addendum.

Orders, invoices and tax records: six years after the end of the relevant tax year. Account and subscription data: while your account is open and for a reasonable period afterwards. Waitlist and marketing data: until you unsubscribe or ask us to delete it. Cookie consent records: 12 months. Support emails: for as long as we need them to deal with the query.

We limit access to personal data to the people who need it, and our providers are held to contracts that require them to keep it secure and use it only on our instructions.

You can ask us for a copy of your data, to correct it, to erase it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time. It is free and we respond within one month. Email office@okurawellness.com. We may ask you to confirm your identity.

If you are unhappy with how we have handled your data, email office@okurawellness.com with "Data complaint" in the subject line. We will acknowledge it within 30 days, look into it, keep you updated and give you an outcome as soon as we can. You can also complain to the Information Commissioner's Office at ico.org.uk.

Our products and this site are for adults, and we do not knowingly collect data from anyone under 18. We may update this policy; the current version is always posted here.