View cart

Privacy policy

Privacy policy

Last updated: October 2026

1. Controller

KAMASANA GLOBAL LTD
Office 19136, 182-184 High Street North, London E6 2JA, United Kingdom
Email: care@kamasana.global · Phone: +34 962 298 517

Further details are available in our legal notice. For any privacy questions, write to care@kamasana.global.

2. Overview

We process personal data only as far as necessary to operate this online shop, fulfil your orders, communicate with you or – with your consent – for analytics and marketing. The legal bases are the General Data Protection Regulation (GDPR) and, for access to your device, Section 25 TDDDG (Germany) and Article 22(2) LSSI-CE (Spain).

3. Hosting and shop system

Our shop runs on the Shopify platform. Our contracting partner is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes on our behalf all data you enter in the shop or that arises when you visit it (Art. 28 GDPR). Data may be transferred to Shopify companies in Canada and the USA; for Canada there is an adequacy decision of the European Commission, otherwise standard contractual clauses are used.

When you visit the website, technically necessary data is processed (including IP address, date and time, page accessed, browser and operating system) to deliver the website and keep it secure. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

4. Cookies and consent

We use strictly necessary cookies (e.g. for the cart, language setting and storing your cookie choice) without consent, because the shop cannot work without them (Section 25(2) TDDDG, Art. 6(1)(b) and (f) GDPR). All other cookies and similar technologies – for analytics, personalisation and marketing – are used only if you have given consent via our cookie banner (Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via the “Cookie settings” link in the website footer.

5. Orders and customer account

To process your order we use your name, delivery and billing address, email address, phone number (if provided), order and payment data (Art. 6(1)(b) GDPR). If you create a customer account, we additionally store this data for future orders until you delete the account. Order and invoice data are retained for the statutory retention periods, generally up to ten years (Art. 6(1)(c) GDPR).

6. Payment

Depending on the payment method you choose, we pass the data required for payment to the relevant payment provider (Art. 6(1)(b) GDPR):

  • Credit card, Apple Pay, Google Pay, Shop Pay: Shopify Payments, processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland.
  • Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may carry out its own identity and credit checks; see Klarna's privacy notice for details.
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

7. Shipping

For delivery we pass your name and delivery address to the shipping company we use (Art. 6(1)(b) GDPR). We only pass on your email address or phone number so that the carrier can notify you about delivery, where this is necessary for delivery or you have consented.

8. Contact and forms

If you contact us by email, phone or via a form, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). For the contact form on our B2B page we use the app “Powerful Form Builder” (PowerfulForm, powerfulform.com), which stores the submitted data on our behalf.

9. Newsletter

If you subscribe to our newsletter, we use your email address to send you information about products and offers (Art. 6(1)(a) GDPR). Subscription uses double opt-in: you receive an email in which you confirm your subscription. Newsletters are sent via Shopify. You can unsubscribe at any time using the link in every email or by writing to us.

10. Product reviews

For product reviews we use Judge.me (JUDGE.ME LTD, 2nd Floor, 1-3 Worship Street, London EC2A 2AB, United Kingdom). When you submit a review, your name, email address and review content are processed; only your name (possibly shortened) and the review are published. We send review requests by email only if you have consented (Art. 6(1)(a) GDPR). Judge.me stores data on servers in the USA; transfers are based on standard contractual clauses.

11. Analytics and marketing (only with consent)

If you have consented via the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), we use:

  • Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyse how our shop is used;
  • Meta Pixel (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) to measure and optimise advertising on Facebook and Instagram;
  • Microsoft Clarity (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) to understand how visitors use our pages.

These services may transfer data to the USA. The providers are certified under the EU-U.S. Data Privacy Framework; standard contractual clauses apply in addition. Without your consent these services are not loaded.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future. Please contact care@kamasana.global.

You may also lodge a complaint with a data protection supervisory authority, in particular in the member state where you live – in Germany with the data protection authority of your federal state, in Spain with the Agencia Española de Protección de Datos (www.aepd.es).

13. Retention

We store personal data only as long as necessary for the respective purpose or as required by statutory retention obligations. After that, the data is deleted.

14. No automated decision-making

We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR. Any credit check by Klarna is carried out under Klarna's own responsibility.

15. Changes

We update this privacy policy when our shop or the legal situation changes. The version published here applies.