Privacy policy

Privacy Policy — Kokoon

Last updated:  22 June 2026

 

Kokoon ("Kokoon", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit or make a purchase at [www.kokoonrest.com] (the "Site"), and tells you about your privacy rights and how the law protects you.

Kokoon is a brand operated by Formae Limited. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR, as applicable, because we offer goods to customers in the UK and EU.


1. The personal data we collect

We may collect and process the following categories of personal data when you visit the Site, place an order, create an account, or contact us:

  • Identity data — name, and any title or username you provide.

  • Contact data — billing address, delivery address, email address, and telephone number.

  • Order data — products purchased, order history, and details of your transactions with us.

  • Payment data — payment is processed by our third-party payment providers; we do not store full card details on our own systems. We may receive limited information such as the payment method and confirmation of payment.

  • Account data — login details and account preferences (if you create an account).

  • Communications data — your messages to us via email, contact forms, chat, or social media, and your marketing and communication preferences.

  • Technical & usage data — IP address, browser type and version, device information, time zone, operating system, and information about how you use our Site, collected via cookies and similar technologies (see Section 7).

We do not knowingly collect any special categories of personal data (such as data about health, race, religion, or political opinions).

 

 

2. How we collect your data

We collect personal data:

  • Directly from you — when you place an order, create an account, sign up for marketing, complete a form, or contact us.

  • Automatically — through cookies and similar technologies as you interact with the Site.

  • From third parties — such as payment providers, delivery partners, and analytics/advertising providers acting on our behalf.

You browse the Site as a guest without providing personal data, but some features (such as placing an order or receiving email updates) require you to provide the information necessary to deliver that service.

 

 

3. How we use your data and our legal basis

We use your personal data only where the law allows us to. Most commonly, we rely on the following legal bases under the GDPR / UK GDPR:

Purpose

Legal basis

To process and deliver your orders, including taking payment, arranging delivery, and handling returns or complaints

Performance of a contract with you

To manage your account and provide customer support

Performance of a contract / Legitimate interests

To send you marketing communications about our products and offers

Consent, or Legitimate interests for existing customers (you can opt out at any time)

To use cookies and similar technologies for analytics and advertising

Consent (where required)

To detect and prevent fraud and ensure the security of our Site

Legitimate interests

To comply with our legal obligations (e.g. tax, accounting, consumer law)

Legal obligation

To improve our Site, products, and customer experience

Legitimate interests

Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms.

 

 

4. Marketing communications

If you are an existing customer, or you have given consent, we may send you offers and promotions about our products by email [and/or SMS, post, or other channels — list only the channels you actually use].

You can opt out at any time by clicking "unsubscribe" in any marketing email, or by contacting us at info@kokoonrest.com. We will action your request as soon as possible, though you may receive communications already in progress for a short time afterward.

 

 

5. Sharing your personal data

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

We share personal data only with trusted service providers ("processors") who help us run our business, and only to the extent necessary. These may include:

  • E-commerce & hosting platform (e.g. Shopify) — [confirm]

  • Payment providers (e.g. [Shopify Payments / Stripe / Klarna / PayPal]) — [confirm]

  • Shipping & fulfilment partners — [confirm]

  • Email & marketing platforms (e.g. [Klaviyo]) — [confirm]

  • Analytics & advertising providers (e.g. [Google, Meta]) — [confirm]

  • Customer support tools — [confirm]

All such providers are required to process personal data in accordance with applicable data protection law and only on our instructions.

We may also disclose your personal data where required by law, to comply with a legal obligation, to enforce our terms, or to protect our rights, property, or safety.

 

 

6. Cookies and similar technologies

We use cookies and similar technologies to make the Site work, analyse traffic, remember your preferences, and (where you consent) deliver relevant advertising.

You can manage or block cookies through your browser settings or our cookie banner at any time. Please note that disabling certain cookies may affect how the Site functions.

[If you maintain a separate Cookie Policy, link it here: [Cookie Policy].]

 

 

7. International data transfers

Some of our service providers are based outside the UK / European Economic Area (EEA). Where we transfer your personal data outside the UK/EEA, we ensure a similar degree of protection by relying on appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision approved by the relevant authority.

[Confirm with your processors which transfer mechanism applies and adjust this section accordingly.]

 

 

8. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy:

  • Order, payment, and transaction records are retained for as long as required by applicable tax and accounting law [insert local retention period, e.g. 6 or 7 years].

  • Account and customer data are kept for as long as your account is active or as needed to provide our services.

  • Data processed on the basis of consent (e.g. marketing) is kept until you withdraw your consent.

When personal data is no longer needed, we securely delete or anonymise it.

 

 

9. How we protect your data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account login details confidential.

 

 

10. Your rights

Under the GDPR / UK GDPR, you have the right to:

  • Access the personal data we hold about you;

  • Rectify inaccurate or incomplete data;

  • Erase your data ("right to be forgotten"), where applicable;

  • Restrict or object to our processing of your data;

  • Data portability — receive your data in a portable format;

  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@kokoonrest.com. We will respond within the timeframe required by law.

You also have the right to lodge a complaint with the relevant supervisory authority — for example, the [UK Information Commissioner's Office (ICO) / Swedish Authority for Privacy Protection (IMY) / other authority for your jurisdiction].

 

 

11. California & other US residents

If you are a resident of California or another US state with applicable privacy laws (such as the CCPA/CPRA), you may have additional rights regarding your personal data, including the right to know, delete, and opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. To exercise these rights, contact us at info@kokoonrest.com.

[Have a US attorney confirm whether CCPA/CPRA or other US state laws apply to your business and expand this section if needed.]

 

 

12. Children's privacy

Our Site and products are not directed at children. We do not knowingly collect personal data from anyone under the age of [16 / or the age required in your jurisdiction]. If you believe we have collected data from a child, please contact us so we can delete it.

 

 

13. Third-party links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.

 

 

14. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on the Site, with the "Last updated" date shown at the top. Significant changes will be communicated where required by law.

 

 

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, contact us at: support@kokoonrest.com

Formae Limited
Unit 308, 3/F., Chevalier House
45–51 Chatham Road South
Tsim Sha Tsui
Hong Kong