The protection of your personal data is important to us. In this Privacy Policy, we inform you about which personal data we process when you visit our website www.komoder.co.uk, use our offers, or interact with us in connection with inquiries, orders, payments, newsletter subscriptions, appointment bookings, deliveries, installations, and customer communication.

Personal data means any information that can be used to personally identify you, for example your name, email address, telephone number, place of residence, IP address, inquiry details, order information, payment data, delivery information, or information about your use of our website. 

We process your personal data in accordance with applicable data protection laws. 

This Privacy Policy is intended for the United Kingdom website www.komoder.co.uk. References to data protection law in this Privacy Policy mean, where applicable, the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

The controller responsible for data processing on this website is: 

KOMODER LTD 
154 Marylebone Road
London, NW1 5PN
UK 

Email: contact@komoder.co.uk 
Website: www.komoder.co.uk 

Represented by: RUS ADRIAN COSMIN

If you have any questions about the processing of your personal data or wish to exercise your data protection rights, you can contact us at any time: 

Email: contact@komoder.co.uk 

Contact person for data protection matters: 

RUS ADRIAN COSMIN 

KOMODER LTD 
154 Marylebone Road 
London, NW1 5PN 
UK 

Email: contact@komoder.co.uk

We process personal data only to the extent necessary to provide our website, respond to customer inquiries, prepare offers, organize test appointments, manage newsletter subscriptions, process orders, enable payments, plan deliveries and installations, comply with legal obligations, or where you have given us your consent. 

Processing is carried out in particular on the basis of the following legal grounds: 

 - Art. 6(1)(a) UK GDPR, where you have given us your consent; 
 - Art. 6(1)(b) UK GDPR, where processing is necessary for the performance of pre-contractual measures or for the performance of a contract; 
 - Art. 6(1)(c) UK GDPR, where we are legally obliged to process the data; 
 - Art. 6(1)(f) UK GDPR, where processing is necessary to protect our legitimate interests.

Our website is hosted by Vercel, Inc., which operates a global platform primarily using Amazon Web Services (AWS) infrastructure. The platform uses 20 compute-capable regions strategically located around the globe to provide fast and reliable content delivery. You can find more information about Vercel's infrastructure and data handling practices at https://vercel.com/docs/security/compliance For DNS management, technical security, performance optimization, and reliable accessibility of our website, we also use services provided by Cloudflare. 

When you visit our website, Vercel and Cloudflare may process technical data that is necessary for the provision, security, stability, and performance of the website. This may include in particular: 

 - IP address; 
 - date and time of access; 
 - pages accessed; 
 - referrer URL; 
 - browser and device information; 
 - operating system; 
 - DNS and network data; 
 - technical log data. 

Processing is carried out on the basis of Art. 6(1)(f) UK GDPR. Our legitimate interest lies in the secure, fast, and reliable provision of our website, the management of DNS settings, and the protection of the website against technical attacks, misuse, and outages. 

Where Vercel or Cloudflare process personal data on our behalf, this is done on the basis of corresponding data processing agreements in accordance with Art. 28 UK GDPR.

When you visit our website, information is automatically collected by the server and technical systems. This information may include in particular: 

 - IP address; 
 - date and time of access; 
 - pages accessed; 
 - browser used; operating system used; 
 - referrer URL; 
 - hostname of the accessing computer; 
 - amount of data transferred; 
 - technical device information. 

This data is processed in order to technically provide the website, ensure the stability and security of the website, and detect technical errors. The legal basis is Art. 6(1)(f) UK GDPR. 

Our legitimate interest lies in the secure, stable, and error-free provision of our website.

If you contact us via a form on the website, by email, by telephone, or through other communication channels, we process the data you provide in order to handle your inquiry. 

This applies in particular if you: 

 - submit a price inquiry; 
 - request an offer; 
 - request information about a Komoder massage chair; 
 - request a test appointment or product demonstration; are interested in a specific product. 

For interested persons, the following data may be processed in particular: 

 - name; 
 - email address; 
 - telephone number; 
 - IP address; 
 - searched keywords FBCLID, GCLID, GBRAID 
 - place of residence or city; 
 - nearest Komoder store or showroom; 
 - desired type of massage or preferred massage type; 
 - content of your inquiry; desired product or product interest; 
 - desired appointment or location; 
 - communication history; 
 - origin of the inquiry, insofar as this is recorded via tracking parameters and is legally permitted. 

This data is processed in order to respond to your inquiry, provide you with an offer, enable consultation appointments, organize test appointments, and conduct further communication with you. 

For interested persons who only submit a price inquiry, request an offer, or arrange a test appointment, we generally process only the data necessary to handle the inquiry. 

Additional data, such as full delivery address, payment information, or detailed delivery information, is generally collected and processed only when the interested person becomes a customer and this information is necessary for the order, payment, delivery, installation, or performance of the contract. 

Processing is carried out on the basis of Art. 6(1)(b) UK GDPR, where your inquiry relates to pre-contractual measures, and on the basis of Art. 6(1)(f) UK GDPR for handling general inquiries and organizing our customer communication.

Contact, inquiry, and customer data submitted through our website or other communication channels may be stored in our CRM system Zoho CRM and in our CMS platform, which is based on Strapi Cloud and hosted via Strapi Cloud.

This applies in particular to data provided by interested persons in connection with a price inquiry, product inquiry, newsletter subscription, or appointment booking, for example: 

 - name; 
 - email address; 
 - telephone number; 
 - IP address; location; 
 - nearest Komoder store or showroom; 
 - desired type of massage or preferred massage type; 
 - requested product; type of inquiry; 
 - offer status; appointment status; 
 - communication history; 
 - origin of the inquiry, insofar as legally permitted. 

For customers, additional data required for orders, payments, deliveries, installations, service, and documentation may also be stored, for example: 

 - full billing and delivery address; 
 - street and house number; 
 - postal code; 
 - city; 
 - federal state or region; 
 - country; 
 - purchased product; 
 - amount paid; 
 - payment status; 
 - delivery and installation status; 
 - service information; 
 - images of the delivery location provided by the customer, insofar as these are necessary for planning the delivery or installation. 

Storage in Zoho CRM and Strapi Cloud CMS is carried out in order to efficiently process inquiries, follow up on offers, document consultation discussions, organize test appointments, manage orders, plan deliveries and installations, and manage customer communication. 

The legal basis is Art. 6(1)(b) UK GDPR, where processing is necessary for the performance of pre-contractual measures or for the performance of a contract, as well as Art. 6(1)(f) UK GDPR. Our legitimate interest lies in the structured handling of customer and interested-person inquiries and the efficient organization of our sales, service, delivery, and administrative processes. 

Where Zoho CRM or Strapi Cloud process personal data on our behalf, this is done on the basis of corresponding data processing agreements in accordance with Art. 28 UK GDPR.

Our website currently does not offer the possibility to create a customer account. 

Therefore, we do not store customer account passwords via the website and do not process login data for customer accounts.

If you order a product from KOMODER LTD, we process the personal data required to handle and carry out your order. 

Unlike interested persons, for whom we generally process only the contact and inquiry data required for an inquiry, we require additional data from customers in order to properly carry out the purchase contract, payment, delivery, installation, and, where applicable, service. 

This may include in particular: 

 - name; 
 - billing address; 
 - full delivery address, including street, house number, postal code, city, federal state or region, and country; 
 - email address; 
 - telephone number; 
 - ordered or purchased product; 
 - purchase price or amount paid; 
 - payment information; 
 - payment status; 
 - delivery and shipping information; 
 - desired delivery or installation date; 
 - invoice data; 
 - customer communication; 
 - information required for planning the delivery or installation. 

Processing is carried out for the performance of the contract in accordance with Art. 6(1)(b) UK GDPR. Where statutory retention obligations exist, processing is additionally carried out on the basis of Art. 6(1)(c) UK GDPR.

We use the payment service provider Stripe for payment processing. 

If you make a payment via Stripe, payment data is transmitted to Stripe and processed there. 

This may include in particular: 

 - name; 
 - email address; 
 - billing address; 
 - payment amount; 
 - payment method; 
 - transaction data; 
 - payment status; 
 - technical payment information. 

Processing is carried out for the purpose of payment processing and thus for the performance of the contract in accordance with Art. 6(1)(b) UK GDPR. Where legal obligations exist, processing is additionally carried out on the basis of Art. 6(1)(c) UK GDPR. 

Further information on data processing by Stripe can be found in Stripe’s privacy information.

For the delivery, installation, maintenance, or repair of our products, we process personal data that is necessary for the organization and performance of these services. 

This additional data is generally collected only from customers, not from interested persons, unless a delivery, installation, or contractual service must be carried out. 

This may include in particular: 

 - name; 
 - full delivery address, including street, house number, postal code, city, federal state or region, and country; 
 - telephone number; 
 - email address; 
 - order data; 
 - purchased product; 
 - amount paid; 
 - payment status; 
 - delivery or installation date; 
 - service or repair information; 
 - special notes regarding delivery or installation; 
 - information about the accessibility of the delivery location, insofar as this is necessary for planning the delivery. 

In certain cases, we may ask customers to provide images of the delivery location, for example entrances, staircases, elevators, doors, hallways, access routes, or other relevant areas. These images are used exclusively to better assess the difficulty, duration, and feasibility of the delivery or installation and to plan the delivery safely and efficiently. 

Please make sure that such images do not include any persons, sensitive information, or unnecessary private details wherever possible. 

Processing is carried out for the performance of the contract in accordance with Art. 6(1)(b) UK GDPR and on the basis of our legitimate interest pursuant to Art. 6(1)(f) UK GDPR in safe, efficient, and proper delivery, installation, and service processing.

If you subscribe to our newsletter or give us corresponding consent, we use your email address to send you information about Komoder products, offers, promotions, and news. 

We use Campaign Monitor to send and manage our newsletters. 

This may include in particular: 

 - email address; 
 - name, if provided; 
 - subscription date; 
 - consent status; 
 - newsletter interactions, such as opens and clicks; 
 - technical information, such as device type or email client; 
 - unsubscribe status. 

Processing is carried out on the basis of your consent in accordance with Art. 6(1)(a) UK GDPR. 

You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter or by sending a message to contact@komoder.co.uk 

Where Campaign Monitor processes personal data on our behalf, this is done on the basis of a corresponding data processing agreement in accordance with Art. 28 UK GDPR. 

Where we use your email address within the context of an existing customer relationship for direct advertising of similar products, this is done only to the extent permitted by law. You may object to this use at any time. 

Marketing emails and transactional emails: You may unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting contact@komoder.co.uk. We may still send necessary transactional or service emails connected with your inquiry, price request, appointment, order, payment, delivery, installation, warranty, or customer service matter.

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. They may be necessary to technically provide the website, or they may be used for analytics, comfort functions, marketing, conversion tracking, or personalized advertising. 

Technically necessary cookies are used to provide basic website functions. Processing is carried out on the basis of Art. 6(1)(f) UK GDPR and, where applicable, Regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR). 

Non-essential cookies and similar technologies, in particular for analytics, marketing, remarketing, conversion tracking, heatmaps, or session recording, are used only with your consent. The legal basis is Art. 6(1)(a) UK GDPR and Regulation 6 of PECR. 

Necessary cookies may also be used to remember information entered into online forms, prevent unauthorised or automated form submissions, maintain website security, and ensure the reliable operation of the website. 

You may change your cookie settings or withdraw your consent at any time via our cookie consent tool.

We use a cookie consent tool provided by CookieScript ( www.CookieScript.com - GDPR | CCPA | ePR cookie compliance solution ) on our website to manage your consents for cookies and similar technologies. 

CookieScript helps us scan cookies on the website, display cookie categories, and document your consents or rejections. 

This may include in particular: 

 - consent status; 
 - date and time of consent; 
 - cookie categories; 
 - technical information about the browser and device; 
 - IP address or shortened IP address; 
 - consent ID or comparable technical identifier. 

Processing is carried out for the management and documentation of your consent and to comply with statutory proof obligations. The legal basis is Art. 6(1)(c) UK GDPR and Art. 6(1)(f) UK GDPR.

Our legitimate interest lies in the legally compliant management and documentation of cookie consents.

The specific list of cookies and similar technologies used on our website is provided through the CookieScript cookie consent tool and is regularly updated based on the cookie scan. 

There you can see: 

 - which cookies are used; 
 - which category they belong to; 
 - what purpose they serve; 
 - what their duration is; 
 - which provider is responsible. 

You can access and change your cookie settings at any time via the cookie icon at the bottom left of the screen.

Our website uses Google Tag Manager. 

Google Tag Manager is used for the central management and deployment of website tags. In particular, analytics, marketing, and conversion tracking tags are integrated on our website via Google Tag Manager. 

Google Tag Manager may be used in particular to control the following services: 

 - Google Analytics; 
 - Google Ads / Google AdWords; 
 - Meta Pixel / Meta Conversions; 
 - Hotjar; 
 - conversion tracking for newsletter subscriptions; 
 - conversion tracking for offer or price inquiries; 
 - conversion tracking for test appointment or demonstration requests. 

Google Tag Manager itself is generally used to manage tags. However, the services triggered through Google Tag Manager may process personal data if they are activated. 

Non-essential tracking, analytics, and marketing tags are deployed only after your consent via the CookieScript cookie consent tool. Technical control is carried out through the correct integration of Google Tag Manager with the CookieScript cookie consent system. 

The legal basis for non-essential tags is Art. 6(1)(a) UK GDPR and Regulation 6 of PECR.

Our website uses Google Analytics, provided that you have given your consent. 

Google Analytics helps us understand how visitors use our website, which pages are accessed, how users interact with content, and how we can improve our website. 

This may include in particular: 

 - IP address; 
 - device and browser information; 
 - pages accessed; 
 - time spent on the website; 
 - click behavior; 
 - scroll behavior; 
 - traffic source; 
 - referrer URL; 
 - campaign parameters; 
 - approximate location information; 
 - technical usage data. 

Processing is carried out only on the basis of your consent in accordance with Art. 6(1)(a) UK GDPR and Regulation 6 of PECR. 

You can withdraw your consent at any time via the cookie settings.

Our website uses Google Ads / Google AdWords and Google conversion tracking, provided that you have given your consent. 

These services help us measure the effectiveness of our advertising campaigns and understand whether users perform certain actions on our website after clicking on an ad. 

The following conversion actions may be measured in particular: 

 - newsletter subscription; 
 - request for an offer or price; 
 - request or booking of a test appointment; 
 - interactions with certain forms or buttons. 

This may include in particular: 

 - Google Click ID or similar parameters; 
 - UTM parameters; 
 - pages visited; 
 - interactions with the website; 
 - technical device and browser information; 
 - IP address; 
 - time of visit; 
 - referrer information; 
 - conversion status. 

Processing is carried out only on the basis of your consent in accordance with Art. 6(1)(a) UK GDPR and Regulation 6 of PECR.

Our website uses Meta Pixel and Meta conversion tracking, provided that you have given your consent. 

These services may be used to measure the success of advertising campaigns on Facebook and Instagram, analyze target groups, optimize ads, and display interest-based advertising. 

The following conversion actions may be measured in particular: 

 - newsletter subscription; 
 - offer or price inquiry; 
 - test appointment or demonstration request; 
 - interactions with certain forms or buttons. 

This may include in particular: 

 - Meta Click ID or similar parameters; 
 - campaign and ad information; 
 - pages visited; 
 - interactions with the website; 
 - technical device and browser information; 
 - IP address; 
 - time of visit; 
 - referrer information; 
 - conversion status. 

Processing is carried out only on the basis of your consent in accordance with Art. 6(1)(a) UK GDPR and Regulation 6 of PECR. 

The data processed via Meta services may also be processed by Meta for its own purposes. Further information can be found in Meta’s privacy information.

Our website uses Hotjar, provided that you have given your consent. 

Hotjar helps us understand how users interact with our website. This can help us improve the usability, structure, and content of our website. 

Hotjar may provide the following functions in particular: 

 - heatmaps; 
 - scroll maps; 
 - click analyses; 
 - session recording; 
 - analysis of user interactions. 

This may include in particular: 

 - device information; 
 - browser information;  
 - IP address in shortened or technical form; 
 - pages visited; 
 - clicks; 
 - scroll behavior; 
 - mouse movements; 
 - interactions with page elements; 
 - usage duration; 
 - technical usage data. 

Processing is carried out only on the basis of your consent in accordance with Art. 6(1)(a) UK GDPR and Regulation 6 of PECR. 

We do not use Hotjar to intentionally collect sensitive personal content. Form inputs and sensitive fields should, insofar as technically configured, be masked or excluded from recording.

We measure certain actions on our website in order to improve the effectiveness of our campaigns and the functionality of our website. 

The conversion actions we measure include in particular: 

 - newsletter subscription; 
 - request for an offer or price; 
 - request or booking of a test appointment; 
 - interaction with relevant forms, contact options, or call-to-action elements. 

These conversion events are managed via Google Tag Manager and may, depending on your cookie consent, be transmitted to services such as Google Analytics, Google Ads, Meta Pixel / Meta Conversions, or Hotjar. 

Processing is carried out only on the basis of your consent in accordance with Art. 6(1)(a) UK GDPR and Regulation 6 of PECR, unless only technically necessary processes are involved.

We use tracking and marketing technologies to understand through which channels interested persons reach our website and how successful our advertising campaigns are. 

Processing serves the following purposes: 

 - measuring the success of advertising campaigns; 
 - assigning inquiries to marketing channels; 
 - optimizing advertisements; 
 - improving our website and offers; 
 - statistical analysis of website usage; 
 - improving the user experience; 
 - optimizing forms, landing pages, and product pages. 

Where cookies, pixels, or comparable technologies are used for this purpose, processing is carried out only on the basis of your consent.

We may maintain profiles on social networks and platforms in order to communicate with customers, interested persons, and users and to provide information about our products and offers. 

When you visit our social media profiles, personal data may be processed by the respective platform operators. The privacy policies of the respective platforms also apply. 

If you interact with our profiles, for example by commenting, sending messages, liking, or sharing content, we process the resulting data for communication and public relations purposes on the basis of Art. 6(1)(f) UK GDPR.

Our website may contain embedded content, for example videos (Vimeo, Youtube), maps, product displays, social media content, or other external content. 

When such content is accessed, personal data may be transmitted to the respective provider. This may include in particular IP address, device information, browser information, and usage data. 

Where consent is required for this, processing is carried out only on the basis of your consent in accordance with Art. 6(1)(a) UK GDPR.

We disclose personal data only where this is legally permitted, necessary for the performance of a contract, required by law, or where you have given your consent. 

Recipients of personal data may include in particular: 

 - hosting service providers, in particular Vercel; 
 - DNS, security, and performance service providers, in particular Cloudflare; 
 - CRM service providers, in particular Zoho CRM; CMS and cloud platform service providers, in particular Strapi Cloud; 
 - payment service providers, in particular Stripe; 
 - newsletter service providers, in particular Campaign Monitor; 
 - shipping and logistics service providers; 
 - installation and service partners; 
 - IT and technical service providers; 
 - cookie consent and cookie scanning providers, in particular CookieScript; 
 - marketing, analytics, and tracking providers, in particular Google, Meta, and Hotjar; 
 - tax advisors, auditors, and legal advisors; 
 - authorities, where legally required; 
 - affiliated companies of the Komoder Group, insofar as this is necessary for internal administrative purposes, customer service, contract processing, or legitimate business interests.

Where we use external service providers who process personal data on our behalf, we conclude corresponding data processing agreements with these service providers in accordance with Art. 28 UK GDPR, where legally required. 

These service providers may process personal data only in accordance with our instructions and only for the agreed purposes.

This applies in particular to providers such as Vercel, Cloudflare, Zoho CRM, Strapi Cloud, Campaign Monitor, CookieScript, and other technical service providers, insofar as they act as processors.

Some of the service providers we use, in particular in the areas of hosting, DNS management, CRM, CMS, payment processing, newsletter, marketing, tracking, analytics, session recording, or IT infrastructure, may process personal data outside the United Kingdom. 

A transfer outside the United Kingdom takes place only where the legal requirements for a restricted transfer are met. This may include a UK adequacy regulation, appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules where applicable, or an exception permitted by UK data protection law. Where required, we take additional steps to assess and protect the transfer of personal data and to ensure that the service provider is contractually required to protect personal data in accordance with this Privacy Policy and applicable data protection law.

We store personal data only for as long as this is necessary for the respective purposes or as long as statutory retention obligations exist. 

Contact data as well as CRM and CMS data from price inquiries, offer requests, newsletter subscriptions, test appointment requests, orders, deliveries, installations, and service cases are generally stored without a fixed deletion period, as long as this is necessary for handling the inquiry, customer communication, offer preparation, appointment organization, contract performance, delivery and installation planning, customer service, documentation of the business relationship, legitimate business interests, or statutory proof obligations. 

For interested persons, this may include in particular name, email address, telephone number, IP address, location, nearest Komoder store or showroom, desired type of massage or preferred massage type, requested product, type of inquiry, and communication history. 

For customers, we additionally store the data required for orders, payments, deliveries, installations, service, and statutory proof obligations. This may include in particular full delivery addresses, invoice data, payment information, purchased products, amounts paid, delivery information, and images of the delivery location provided by the customer. 

Deletion or restriction of processing takes place when the data is no longer required for the stated purposes, when statutory retention periods have expired, or when a data subject legitimately requests deletion and no statutory retention obligations or overriding legitimate interests prevent deletion. 

Images of the delivery location are generally stored only for as long as this is necessary for the planning, execution, and documentation of the delivery, installation, or service, unless statutory retention obligations or legitimate interests justify longer storage. 

Newsletter data is generally stored for as long as your newsletter consent exists. After unsubscribing, data may be stored insofar as this is necessary to prove consent or to prevent further mailings. 

Tracking and cookie data are stored according to the durations stated in the cookie consent tool. 

Order data, invoices, and business correspondence may be retained for several years due to commercial and tax law obligations. 

Data processed on the basis of consent is generally stored until consent is withdrawn, unless another legal basis exists for further storage. 

You may request deletion of personal data by contacting contact@komoder.co.uk. We will comply where we are legally required to do so, unless we must retain the data for contractual, legal, tax, accounting, warranty, service, security, or legitimate business purposes.

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, alteration, or disclosure. 

Where technically possible, our website uses SSL or TLS encryption to protect the transmission of confidential content. 

Our technical and organisational measures may include access controls, encryption where appropriate, backups, redundancy, secure hosting, and internal confidentiality obligations for employees and service providers.

Within the scope of the statutory provisions, you have the following rights: 

 - right of access to your stored personal data; 
 - right to rectification of inaccurate data; 
 - right to erasure of your data; 
 - right to restriction of processing; 
 - right to data portability; 
 - right to object to certain processing activities; 
 - right to withdraw consent granted, with effect for the future; 
 - right to lodge a complaint with a competent data protection supervisory authority. 

To exercise your rights, you can contact us at any time: contact@komoder.co.uk 

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the UK data protection supervisory authority.

If you have given us consent to process personal data, you may withdraw this consent at any time with effect for the future. 

This applies in particular to consents for newsletters, cookies, analytics, marketing, tracking, conversion tracking, and Hotjar. 

The lawfulness of processing carried out before the withdrawal remains unaffected by the withdrawal.

If we process personal data on the basis of our legitimate interest pursuant to Art. 6(1)(f) UK GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. 

If your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

The provision of certain personal data may be necessary for us to process your inquiry, send you an offer, organize a test appointment, send you the newsletter, process an order, plan a delivery or installation, or perform a contract with you. 

If you do not provide the required data, we may be unable to process your inquiry, organize an appointment, send you the newsletter, plan a delivery or installation, or conclude or perform a contract with you.

Automated decision-making, including profiling within the meaning of Art. 22 UK GDPR, does not take place.

We reserve the right to amend this Privacy Policy if legal requirements, technical developments, or our data processing procedures change. 

The current version published on this website applies. 

Last updated: 27 June 2026