Privacy Policy

    Last updated: 1 November 2026

    1. Who We Are

    Kokorology ("we", "us", "our") operates the website kokorology.com. We are committed to protecting your personal data and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

    Contact: For privacy-related enquiries, email us at hello@kokorology.com.

    2. Data We Collect

    We may collect and process the following personal data:

    • Identity data: name, email address
    • Contact data: email, phone number (if provided)
    • Transaction data: purchase history, payment details (processed securely via Stripe)
    • Technical data: IP address, browser type, device information, pages visited
    • Marketing data: newsletter subscription preferences, communication opt-ins
    • Usage data: how you interact with our website, pages visited, time spent

    3. How We Use Your Data

    We use your personal data to:

    • Provide and deliver our products and services
    • Process payments securely through Stripe
    • Send transactional emails (order confirmations, account updates)
    • Send marketing communications (only with your consent)
    • Improve our website, content, and user experience
    • Comply with legal obligations

    4. Legal Basis for Processing

    We process your data based on:

    • Consent: for marketing emails and non-essential cookies
    • Contractual necessity: to fulfil product purchases and deliver services
    • Legitimate interest: to improve our services and website analytics
    • Legal obligation: to comply with tax, accounting, and regulatory requirements

    5. Cookies

    We use essential cookies to ensure our website functions correctly. Analytics and marketing cookies are only set with your consent via our cookie banner. You can manage your preferences at any time. See our cookie consent banner for detailed options.

    6. Third-Party Services

    We share data with the following processors:

    • Stripe: payment processing (PCI-DSS compliant)
    • Kit (ConvertKit): email marketing and newsletter delivery
    • Vercel / Lovable: website hosting and infrastructure
    • Google Ads: advertising measurement and campaign optimisation, subject to your marketing choice. Purchase events include an order reference and value; Protocols account events include a pseudonymous deduplication reference after email confirmation, not your email, name, health plan, reflections or supplement information. The tag may transmit ad identifiers and technical information such as page URL, browser details and IP address. No enhanced customer matching or health-based remarketing is enabled by this measurement.

    We record advertising choices with a visitor reference, time and notice version. In consent-required or unknown regions the Google tag is blocked until you accept marketing; refusals are respected everywhere. Change or withdraw your choice through Cookie settings. Previously refused events are not replayed after acceptance. How Google uses information.

    All processors are bound by data processing agreements and GDPR-compliant safeguards.

    7. Data Retention

    We retain personal data only as long as necessary for the purposes outlined above or as required by law. Purchase records are kept for 7 years for tax compliance. Marketing data is deleted upon unsubscription.

    8. Your Rights (GDPR)

    Under GDPR, you have the right to:

    • Access your personal data
    • Rectify inaccurate data
    • Request erasure ("right to be forgotten")
    • Restrict or object to processing
    • Data portability
    • Withdraw consent at any time
    • Lodge a complaint with your local data protection authority

    To exercise any right, contact us at hello@kokorology.com.

    9. Data Security

    We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), secure hosting, and access controls.

    10. Changes to This Policy

    We may update this policy from time to time. Material changes will be communicated via our website or email. The "last updated" date above reflects the most recent revision.