Privacy policy

Privacy Policy

KURE LTD
Last updated: 7 April 2026

Contact
KURE LTD
86 – 90 Paul Street
London EC2A 4NE
Email: support@kureoxygen.com

Introduction

This Privacy Policy explains how KURE LTD (“KURE”, “we”, “us” and “our”) collects, uses, stores and protects personal data when you visit www.kureoxygen.com, place an order, contact us, submit materials to us, or otherwise engage with us in connection with orders, campaigns, collaborations, reviews, testimonials, trials, ambassador activity or other interactions.

We collect and use personal data to operate our website, supply products, process and deliver orders, respond to enquiries, manage customer relationships, improve our website and services, send relevant communications, comply with legal obligations, and administer campaigns, collaborations, reviews, testimonials, submissions, promotions, trials and other engagements.

We are committed to processing personal data lawfully, fairly and transparently and to taking appropriate steps to keep it secure.

Types of Data Collected

Among the types of Personal Data that this website may collect, by itself or through third parties, are: Trackers; Usage Data; IP address; device and browser information; first name; last name; email address; phone number; delivery address; billing address; order and transaction details; social media handle; written feedback; reviews; testimonials; photos; videos; screenshots; wearable and performance information; and communications or other materials submitted to KURE in connection with enquiries, orders, collaborations, campaigns, reviews, trials, ambassador activity or other engagements.

Personal Data may be freely provided by you or, in the case of Usage Data, collected automatically when you use this website.

Unless otherwise stated, all Data requested by this website is necessary for us to provide the relevant service. If you do not provide mandatory Data, we may be unable to provide the relevant service, process your order, respond to your enquiry, or administer the relevant engagement.

Users who are unsure which Personal Data is mandatory are welcome to contact us.

Any use of Cookies or other tracking tools by this website or by the owners of third party services used by this website serves the purposes described in this Privacy Policy and, where required, is subject to your cookie choices.

You are responsible for any third party Personal Data you provide through this website and confirm that you have the right to provide it.

Mode and Place of Processing the Data

Methods of Processing

We take appropriate technical and organisational measures to prevent unauthorised access, disclosure, alteration, misuse or destruction of Personal Data.

Personal Data is processed using computers, digital systems and other appropriate tools, in accordance with organisational procedures and methods strictly related to the purposes set out in this Privacy Policy.

In addition to KURE, Personal Data may be accessible to persons authorised by us and involved in operating this website and our business, including administration, sales, customer support, marketing, legal and system administration.

We may also share Personal Data with third parties acting on our behalf or otherwise involved in providing relevant services, including hosting providers, IT providers, website and form providers, payment processors, mail carriers and couriers, CRM and email service providers, analytics and tag management providers, marketing or content agencies, professional advisers and other service providers who assist us in operating our website, services, campaigns and business. Where appropriate, such parties will process Personal Data on our behalf as processors.

An up to date list of relevant recipients or categories of recipients may be requested from us at any time.

Place

Personal Data is processed at KURE’s operating offices and in any other locations where the parties involved in the processing are located.

Some recipients of Personal Data may be located outside the UK. Where Personal Data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place, such as adequacy regulations or other approved transfer mechanisms where required.

Retention Time

We retain Personal Data only for as long as is necessary for the purpose for which it was collected and for longer where required or permitted by law, including for legal, accounting, tax, fraud prevention, evidential or regulatory purposes.

Order and transaction records may be retained for accounting, tax and compliance purposes.

Enquiry, submission, review, testimonial, campaign, collaboration and trial records may be retained for as long as necessary to administer the relevant engagement and for a reasonable period afterwards for record keeping, evidential, legal and business purposes.

Marketing suppression records may be retained as necessary to ensure that we respect opt out requests.

Where processing is based on consent, we may retain relevant Data until that consent is withdrawn, unless we are required or permitted to retain it for a longer period under applicable law.

The Purposes of Processing

We may process Personal Data for the following purposes:

  • to operate, maintain and improve this website;

  • to process, fulfil and deliver orders;

  • to manage payments and related records;

  • to respond to enquiries and provide customer support;

  • to send service messages and, where permitted, marketing communications;

  • to administer reviews, testimonials, campaigns, collaborations, submissions, promotions, ambassador activity, product trials and similar engagements;

  • to protect our rights and interests and those of our users and third parties;

  • to detect, prevent and investigate misuse, fraud or other unlawful activity;

  • to create, publish and distribute brand, sales, investor, retailer, PR and marketing materials using submitted content where permitted; and

  • to comply with legal and regulatory obligations.

For specific information about the Personal Data used for each purpose, please see the section headed “Detailed Information on the Processing of Personal Data”.

Detailed Information on the Processing of Personal Data

Order Processing, Fulfilment and Customer Support

We may collect and use your contact details, delivery details, order details, limited payment or transaction information, and related communications to process and fulfil orders, arrange delivery, handle returns or complaints, provide customer support and maintain appropriate business records.

Payments made through this website may be processed by third party payment providers such as Stripe and PayPal. KURE does not need to store your full payment card details in order to fulfil your order, although we may receive limited transaction, payment status or verification information from the relevant payment provider.

Submissions, Testimonials, Campaigns and Collaborations

KURE may collect and process contact details, delivery details, social media handles, written feedback, reviews, testimonials, images, videos, screenshots, wearable and performance information, and related communications where individuals submit materials to KURE or otherwise engage with KURE in connection with reviews, testimonials, campaigns, collaborations, ambassador activity, product trials, promotions or similar interactions.

We use this information to administer the relevant engagement, communicate with participants, arrange delivery where applicable, review and assess submitted materials, consider future collaboration opportunities, and, where appropriate and permitted, use submitted content in marketing, advertising, PR, investor, sales, retailer and brand communications.

Where submitted content includes imagery, video, audio, quotes, testimonials, social handles, likenesses, names, screenshots or other materials, KURE may process, edit, crop, reformat, localise, excerpt, combine with branding and publish that content in accordance with the applicable terms and conditions and any point of collection wording provided to the individual.

Where wearable, physiological or other submitted information amounts to special category data or other sensitive personal data under applicable law, KURE will only process it where it has a valid lawful basis and any additional condition required by law, which may include explicit consent.

Where KURE uses service providers to assist with content handling, campaign operations, communications, storage, analytics, workflow tools, or brand production, those providers may process the relevant information on KURE’s behalf and subject to appropriate safeguards.

Analytics

We use analytics services to monitor and analyse website traffic and better understand how visitors use this website.

Google Analytics 4 (Google Ireland Limited)

Google Analytics 4 is a web analytics service provided by Google Ireland Limited. Google uses the Data collected to track and examine the use of this website, prepare reports on website activity and, where configured, provide other related services.

To understand Google’s use of Data, please review Google’s applicable privacy documentation.

Personal Data processed: Trackers; Usage Data. Place of processing: Ireland.

Contacting the User

Mailing List or Newsletter

Where you subscribe to our mailing list or newsletter, we may use your email address and related contact details to send you updates, marketing communications, news, promotions and other information about KURE. Your contact details may also be added to our marketing database where permitted following a purchase, enquiry or other interaction with us.

You can unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us.

Personal Data processed: email address; first name; last name; phone number.

Tag Management

We use tag management services to manage the scripts and tags used on this website.

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.

To understand Google’s use of Data, please review Google’s applicable privacy documentation.

Personal Data processed: Trackers; Usage Data. Place of processing: Ireland.

Cookie Policy

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the website function properly, improve security, remember preferences, understand how the website is used and, where applicable, support analytics and marketing activities.

How Do We Use Cookies?

We use first party and third party cookies for a range of purposes, including essential site functionality, performance measurement, analytics, user experience improvement and, where permitted, marketing and advertising.

Some Cookies are strictly necessary for the operation of the website and do not require consent. Other Cookies may be used only with your consent, where required by law.

Managing Cookie Preferences

You can manage your cookie preferences through our cookie banner or by changing your browser settings. Disabling certain Cookies may affect the functionality of the website.

You can also consult your browser’s support documentation for more information on how to manage and delete Cookies.

Further Information for Users

Legal Basis of Processing

We may process Personal Data where one or more of the following lawful bases applies:

  • you have given consent for one or more specific purposes;

  • processing is necessary for the performance of a contract with you or in order to take steps at your request before entering into a contract;

  • processing is necessary to comply with a legal obligation to which we are subject;

  • processing is necessary for the purposes of our legitimate interests or those of a third party, except where those interests are overridden by your interests, fundamental rights or freedoms; or

  • another lawful basis applies under applicable law.

In particular, depending on the circumstances, KURE may rely on contract or pre contractual steps to administer orders, applications, programmes or engagements; legitimate interests to operate and improve the business, review submissions, manage collaborations, maintain records, protect the business, and use submitted materials for brand communications; legal obligation where record keeping, accounting, tax, compliance or legal claims require it; and consent where KURE specifically asks for optional permissions.

Where KURE relies on consent, you may withdraw that consent at any time by contacting us using the details at the top of this Privacy Policy. Withdrawal of consent does not affect the lawfulness of processing carried out before consent is withdrawn.

Special Category Data

KURE does not intentionally seek special category data unless it is relevant to a specific engagement and can be processed lawfully.

If wearable, physiological or other submitted information reveals health information or otherwise amounts to special category data, KURE will only process that information where it has both a valid lawful basis under applicable data protection law and an additional condition for processing such data, which may include your explicit consent.

Trustpilot Reviews

We may contact you by email to invite you to review a product or service you received from us, in order to collect feedback and improve our services. We may use Trustpilot A/S to collect such feedback. Where we do so, we may share your name, email address and order or reference information with Trustpilot for that purpose. Trustpilot will process that data in accordance with its own privacy policy.

Further Information About Retention Time

Unless specified otherwise in this Privacy Policy, Personal Data is retained only for as long as necessary for the purpose for which it was collected and may be retained for longer where required or permitted by law.

Personal Data processed for contractual purposes may be retained until the relevant contract or relationship has been fully performed and for an appropriate period afterwards for legal, accounting, tax, complaint handling, fraud prevention or evidential purposes.

Personal Data processed for our legitimate interests may be retained for as long as necessary to fulfil those interests, subject to your rights and applicable law.

Where processing is based on consent, we may retain the Data until consent is withdrawn, unless we are required or permitted to retain it for longer.

Once retention is no longer necessary, Personal Data will be deleted, anonymised or otherwise securely disposed of, subject to any legal obligations requiring continued retention.

The Rights of Users Based on the GDPR

Subject to applicable law, you may have the right to:

  • access the Personal Data we hold about you;

  • request correction of inaccurate or incomplete Personal Data;

  • request deletion of your Personal Data;

  • request restriction of processing;

  • object to processing carried out on the basis of legitimate interests;

  • object at any time to the processing of your Personal Data for direct marketing purposes;

  • request portability of Personal Data, where applicable;

  • withdraw consent at any time, where processing is based on consent; and

  • lodge a complaint with the Information Commissioner’s Office if you believe your Personal Data has been processed unlawfully.

You are also entitled to be informed about the legal basis for transfers of Personal Data abroad and about the safeguards used to protect such Data.

Details About the Right to Object to Processing

Where Personal Data is processed for our legitimate interests, you may object to that processing on grounds relating to your particular situation.

Where Personal Data is processed for direct marketing purposes, you may object at any time, free of charge and without giving any reason. If you object to processing for direct marketing, we will stop processing your Personal Data for those purposes.

How to Exercise These Rights

Any request to exercise your rights may be sent to us using the contact details provided in this Privacy Policy.

We will respond as soon as reasonably possible and, in any event, within the time required by applicable law.

Where required, we will inform relevant recipients of any correction, deletion or restriction of processing, unless doing so is impossible or involves disproportionate effort.

Additional Information About Data Collection and Processing

Legal Action

Your Personal Data may be used for legal purposes by KURE in court or in the stages leading to possible legal action arising from improper use of this website or related services.

You acknowledge that KURE may be required to disclose Personal Data in response to lawful requests by public authorities, regulators, courts or law enforcement agencies.

Additional Information About Your Personal Data

In addition to the information in this Privacy Policy, KURE may provide additional and contextual privacy information at the point of collection for specific campaigns, collaborations, submissions, promotions, trials, programmes or services.

System Logs and Maintenance

For operation and maintenance purposes, this website and any third party services may collect files that record interaction with the website, such as system logs, or use other Personal Data such as IP addresses for these purposes.

Information Not Contained in This Policy

If you would like more information about the collection or processing of Personal Data by KURE, please contact us using the details at the top of this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page and, where appropriate, we may also notify you by email or by another suitable method.

If any change materially affects processing that is based on your consent, we will obtain fresh consent where required by law.

Definitions and Legal References

Personal Data (or Data): Any information that directly or indirectly identifies, or can reasonably be linked to, a living individual.

Usage Data: Information collected automatically through this website or through third party services used by this website, which may include IP addresses, browser details, device details, pages visited, time spent on pages, navigation paths, dates and times of access, and other information about how the website is used.

User: The individual using this website who, unless otherwise specified, is also the Data Subject.

Data Subject: The identified or identifiable natural person to whom the Personal Data relates.

Processor: A natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller.

Controller: The natural or legal person, public authority, agency or other body which determines the purposes and means of the processing of Personal Data. For the purposes of this Privacy Policy, the Controller is KURE LTD.

This Website: The website through which Personal Data is collected and processed.

Service: The products, services, content, functionality and related interactions made available through this website or otherwise by KURE.

EU / EEA: Unless otherwise specified, references to the EU or EEA include the current member states of the European Union and the European Economic Area, where relevant.

Cookie: A Cookie is a small file stored on a user’s device that enables website functionality, preferences, analytics or other similar purposes.

Tracker: Any technology, including Cookies, unique identifiers, scripts, pixels, tags or similar tools, that enables the tracking or recognition of users or devices.

Legal Information: This Privacy Policy relates solely to www.kureoxygen.com and KURE’s handling of Personal Data in connection with that website and related interactions, unless otherwise stated.