Privacy policy
PRIVACY POLICY
Last updated: August 1, 2026
This Privacy Policy explains how Oxbeak Ltd, trading as ELAMARA (“ELAMARA,” “we,” “us” or “our”), collects, uses, stores and shares personal information when you visit, use or make a purchase from https://elamara.store (the “Website”), contact us, subscribe to our marketing or otherwise interact with us.
Oxbeak Ltd is the data controller responsible for the personal information described in this Privacy Policy.
BUSINESS DETAILS
Trading name: ELAMARA
Legal entity: Oxbeak Ltd
Company registration number: 15926865
Registered office: Unit 7–8 Silverlink Business Park, Wallsend, United Kingdom, NE28 9NX
Privacy and customer-support email: support@elamara.store
Website: https://elamara.store
If you have questions about this Privacy Policy or would like to exercise a privacy right, contact us using the details above.
SCOPE OF THIS POLICY
This Privacy Policy applies to personal information collected through:
• The ELAMARA Website
• Purchases and attempted purchases
• Customer accounts
• Email, website forms and customer-support communications
• Newsletter and promotional subscriptions
• Reviews, surveys, promotions and competitions
• Cookies, pixels and similar technologies
• Our advertising and social-media activities
This policy does not cover websites or services operated independently by third parties. Their own privacy policies apply when you use those services.
PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with ELAMARA.
Information you provide directly
We may collect:
• Your name
• Billing and delivery addresses
• Email address
• Telephone number
• Account login information
• Products ordered or viewed
• Order, payment and transaction information
• Delivery preferences and instructions
• Returns and refund information
• Communications sent to customer support
• Reviews, survey answers and promotional entries
• Marketing preferences
• Any other information you choose to provide
Payment information
Payments are processed through Shopify and the payment providers available at checkout.
ELAMARA does not normally receive or store your complete payment-card number. Payment providers may collect and process your card number, security code, billing details and other information required to authorize and protect the transaction.
Information collected automatically
When you use the Website, we and our service providers may automatically collect:
• IP address
• Device and browser type
• Operating system
• Device identifiers
• Cookie identifiers
• Website pages viewed
• Products viewed or placed in your cart
• Search activity
• Referring website or advertising source
• Approximate location derived from your IP address
• Dates and times of visits
• Checkout and purchase activity
• Interactions with emails and advertisements
• Technical, diagnostic and security information
Information received from other sources
We may receive personal information from:
• Shopify and Shopify services
• Payment providers
• Supliful, our fulfilment provider
• Shipping and delivery carriers
• Analytics and advertising providers
• Social-media platforms
• Email and customer-communication providers
• Fraud-prevention and security services
• Review, survey or promotion services
• Publicly available sources, where lawful
HOW WE USE PERSONAL INFORMATION
We may use personal information to:
Provide products and services
This includes:
• Processing and fulfilling orders
• Taking and confirming payment
• Arranging packaging, shipping and delivery
• Providing order and delivery updates
• Managing customer accounts
• Processing returns, refunds and cancellations
• Responding to customer enquiries
• Providing requested products and services
The lawful basis under UK data-protection law is normally that processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
Operate and improve ELAMARA
This includes:
• Operating and maintaining the Website
• Understanding how customers use the Website
• Improving our products, content and customer experience
• Troubleshooting technical problems
• Measuring store and advertising performance
• Managing stock, fulfilment and business operations
• Conducting internal analysis and reporting
We normally rely on our legitimate interests in operating, understanding and improving our business. Where cookies or similar technologies legally require consent, we rely on your consent.
Communicate with you
We use contact information to:
• Confirm orders and payments
• Send delivery and service messages
• Answer questions
• Notify you about returns, refunds or account issues
• Provide important changes to products, policies or services
• Respond to complaints and disputes
We normally process this information to perform our contract with you, comply with legal obligations or pursue our legitimate interests in providing effective customer service.
Marketing
Where permitted, we may use your information to:
• Send promotional emails
• Tell you about ELAMARA products, offers and content
• Measure engagement with marketing messages
• Personalize advertising
• Build or use advertising audiences
• Show advertisements on search engines, social-media platforms and other websites
We will obtain consent where required. In limited circumstances, we may rely on legitimate interests or the “soft opt-in” for marketing to existing customers where legally permitted.
You can unsubscribe from promotional emails at any time by using the unsubscribe link in the message or emailing support@elamara.store.
Unsubscribing from marketing does not prevent us from sending essential order, account, delivery, safety or customer-service communications.
Security and fraud prevention
We may use personal information to:
• Verify transactions
• Detect suspicious activity
• Prevent fraud, misuse and security incidents
• Protect customers, ELAMARA and our service providers
• Enforce our terms and policies
• Establish, exercise or defend legal claims
We normally rely on our legitimate interests and, where relevant, our legal obligations.
Legal and regulatory requirements
We may process or disclose information when necessary to:
• Maintain tax, accounting and transaction records
• Respond to lawful requests from courts, regulators and public authorities
• Comply with consumer-protection, product-safety and other applicable laws
• Investigate or resolve legal complaints
• Exercise or defend legal rights
The lawful basis is compliance with legal obligations or our legitimate interests in protecting the business and its legal rights.
COOKIES AND SIMILAR TECHNOLOGIES
The Website uses cookies, pixels, tags, local storage and similar technologies.
These technologies may be used to:
• Keep the Website and checkout functioning
• Remember your cart and preferences
• Protect the Website against fraud and misuse
• Understand Website traffic and performance
• Measure sales and advertising
• Personalize content and advertising
• Limit repeated advertisements
• Remember your privacy choices
Essential cookies are required for the Website, cart and checkout to function.
Where required by law, analytics, advertising and other non-essential technologies will not be activated unless you consent through our cookie banner.
You can accept, reject or adjust non-essential cookies through the cookie settings available on the Website. You can also control cookies through your browser, although blocking essential cookies may prevent parts of the Website or checkout from working correctly.
Withdrawing consent does not affect the lawfulness of processing that occurred before consent was withdrawn.
ADVERTISING AND ANALYTICS
Subject to your choices and applicable law, we may use services provided by companies such as:
• Google, including Google Analytics, Google Ads and Merchant Center
• Meta, including Facebook and Instagram advertising
• Shopify’s analytics, marketing and customer-audience tools
These providers may collect identifiers, device information, Website activity, product interactions and purchase or conversion information.
This information may be used to measure advertising, understand customer activity, create audiences and show more relevant advertisements.
Some disclosures to advertising providers may be treated as “sharing,” “targeted advertising” or a “sale” under certain US state privacy laws, even where no money is exchanged.
Where applicable, you can opt out through:
• The Website’s cookie settings
• The “Your Privacy Choices” or data-sharing opt-out link displayed on the Website
• Browser or device privacy controls supported by the relevant service
• Emailing support@elamara.store
We do not sell personal information in exchange for money.
HOW WE SHARE PERSONAL INFORMATION
We may share personal information with the following categories of recipients where necessary:
Shopify
Our store is hosted and supported by Shopify. Shopify processes information required to operate the Website, checkout, payments, customer accounts and related services.
You can learn more in the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
Fulfilment and delivery providers
We share relevant order information with Supliful and applicable shipping carriers so that products can be prepared, dispatched, delivered, tracked and, where necessary, returned.
This may include your name, delivery address, contact details, products ordered and order reference.
Payment providers
Payment providers process transaction information to authorize payments, manage refunds, prevent fraud and resolve payment disputes.
Business-service providers
We may use providers for:
• Website hosting and technical support
• Email and customer communications
• Analytics and performance measurement
• Advertising and social media
• Product reviews and surveys
• Fraud prevention and information security
• Accounting, legal and professional advice
• Data storage and business administration
These providers may process personal information only to the extent necessary to provide their services, subject to their contractual and legal responsibilities.
Legal and regulatory disclosures
We may disclose information to regulators, law-enforcement authorities, courts, government bodies or professional advisers where required by law or reasonably necessary to protect legal rights.
Business transactions
If ELAMARA or Oxbeak Ltd is involved in a merger, acquisition, restructuring, financing or sale of all or part of the business, personal information may be disclosed to relevant advisers and potential purchasers subject to appropriate confidentiality safeguards.
We do not allow service providers to use personal information for unrelated purposes unless they independently act as a data controller and explain their own processing to you.
INTERNATIONAL TRANSFERS
ELAMARA is operated from the United Kingdom, while some customers and service providers are located in other countries, including the United States.
Your personal information may therefore be transferred to, stored in or accessed from countries outside the United Kingdom or the country where you live.
Where UK data-protection law applies, we use an appropriate transfer mechanism where required, which may include:
• UK adequacy regulations
• The UK International Data Transfer Agreement
• The UK Addendum to the European Commission’s Standard Contractual Clauses
• Contractual and organizational safeguards
• Another legally recognized transfer mechanism
Although privacy laws differ between countries, we take reasonable steps to require appropriate protection for information transferred internationally.
Contact support@elamara.store if you would like more information about the safeguards used for relevant international transfers.
HOW LONG WE RETAIN PERSONAL INFORMATION
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including legal, tax, accounting, security and dispute-resolution requirements.
Our usual retention approach is:
• Order, transaction, tax and accounting records: generally six years after the end of the relevant financial period
• Customer-service and complaint records: generally up to three years after the matter is closed, unless needed for a legal claim
• Returns, refunds and payment-dispute information: for the applicable accounting period and any relevant limitation period
• Customer accounts: while the account remains active and for a reasonable period afterward
• Marketing records: until you unsubscribe, withdraw consent or we determine the information is no longer needed
• Marketing suppression records: limited information may be retained to ensure we continue honoring your opt-out
• Security and technical logs: for a limited period appropriate to security, fraud prevention and troubleshooting
• Cookie and advertising information: according to the lifespan of the relevant cookie, your privacy choices and the provider’s retention settings
We may retain information longer where required by law, necessary for an active dispute or reasonably required to protect legal rights.
When information is no longer required, we will delete or anonymize it in accordance with our retention practices.
AUTOMATED DECISION-MAKING
We do not currently make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning customers.
Automated systems may help us or our service providers identify potentially fraudulent, suspicious or high-risk transactions. These systems may flag an order for further review or lead a payment provider to decline a transaction under its own procedures.
Advertising and analytics services may use automated profiling to select or measure advertisements. This does not normally produce a legal or similarly significant effect.
DATA SECURITY
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.
These measures may include:
• Secure HTTPS connections
• Restricted access to business systems
• Account authentication controls
• Security monitoring
• Contractual protections with service providers
• Payment processing through established payment providers
• Staff and administrative access controls
No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.
If you believe your personal information or ELAMARA account has been compromised, contact support@elamara.store promptly.
YOUR UK AND EUROPEAN PRIVACY RIGHTS
Depending on where you live and the law that applies, you may have the right to:
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of your information
• Request restriction of processing
• Object to processing based on legitimate interests
• Object at any time to direct marketing
• Request transfer of certain information in a portable format
• Withdraw consent at any time
• Complain to a data-protection authority
• Request information about international-transfer safeguards
• Challenge certain solely automated decisions
These rights are not absolute. A request may be restricted where an exemption applies or where we must retain information to comply with the law, complete a transaction or protect legal rights.
To exercise a right, email support@elamara.store.
We may ask for information needed to verify your identity and locate the relevant records. We will respond within the period required by applicable law.
UK complaints
If you are in the United Kingdom and are dissatisfied with how we use your information, please contact us first so we can try to resolve the concern.
You also have the right to complain to the UK Information Commissioner’s Office:
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
EU and EEA complaints
If you are located in the European Union or European Economic Area, you may complain to the data-protection authority in the country where you live, work or believe an infringement occurred.
UNITED STATES PRIVACY DISCLOSURES
Residents of certain US states may have additional rights where the relevant state privacy law applies to ELAMARA.
These rights may include:
• The right to know or access personal information
• The right to correct inaccurate information
• The right to request deletion
• The right to obtain a portable copy of information
• The right to opt out of targeted advertising
• The right to opt out of certain sales or sharing of personal information
• The right to limit certain uses of sensitive personal information
• The right not to be discriminated against for exercising a privacy right
• The right to appeal a decision concerning a privacy request
Requests may be submitted to support@elamara.store or through the privacy-choice tools provided on the Website.
We may need to verify your identity before completing a request. Where allowed, an authorized agent may submit a request on your behalf, but we may require proof of the agent’s authority and verification of your identity.
California disclosures
During the preceding 12 months, we may have collected the following categories of personal information:
• Identifiers, such as name, email address, postal address, telephone number, IP address and account identifiers
• Customer-record information, such as contact, payment and order details
• Commercial information, such as products purchased, viewed or placed in a cart
• Internet or electronic activity, such as Website use, advertising interactions and device information
• Approximate geolocation derived from an IP address
• Inferences, such as likely product interests or advertising audiences
• Communications and other information you submit to us
We obtain this information from you, your device, Shopify, payment providers, fulfilment and delivery providers, advertising platforms and other service providers.
We use and disclose these categories for the business and commercial purposes described in this Privacy Policy.
We may disclose identifiers, commercial information, internet activity and related inferences to advertising and analytics providers. Under some US privacy laws, this may be considered sharing for cross-context behavioral advertising.
We do not knowingly sell or share the personal information of anyone under 16.
We do not use or disclose sensitive personal information to infer characteristics about customers.
The rights described in this section apply only where the relevant US law applies to Oxbeak Ltd and the individual making the request.
MARKETING CHOICES
You can stop promotional emails by:
• Clicking the unsubscribe link in a marketing email
• Adjusting available account preferences
• Contacting support@elamara.store
You may control analytics and advertising technologies through the Website’s cookie settings or privacy-choice page.
We may retain limited suppression information to ensure we do not send marketing after you opt out.
CHILDREN’S PRIVACY
The Website and ELAMARA products are intended for adults.
We do not knowingly collect personal information directly from children under 16, and we do not knowingly sell or share the personal information of anyone under 16.
If you are a parent or legal guardian and believe a child has provided personal information to us, contact support@elamara.store so that we can investigate and, where appropriate, delete it.
PRODUCT AND HEALTH INFORMATION
ELAMARA sells adult wellness and dietary-supplement products. Purchasing or viewing a product does not necessarily mean that we collect medical or legally defined health information about you.
Please do not send medical records, diagnoses or other unnecessary sensitive health information through ordinary customer-support channels.
If you voluntarily provide sensitive information that is necessary to address a product-safety concern, we will use it only as reasonably necessary to handle the enquiry, comply with applicable obligations and protect health or legal rights.
THIRD-PARTY WEBSITES AND SOCIAL MEDIA
The Website may contain links to third-party websites, social-media platforms and services.
We do not control the privacy, security or content of independent third-party services. Review their privacy policies before providing information to them.
When you interact with ELAMARA through a social-media platform, both ELAMARA and the platform may receive information about that interaction in accordance with the platform’s own terms and privacy policy.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes to our business, service providers, technology or legal obligations.
The revised policy will be posted on the Website with a new “Last updated” date.
Where a change is material and legally requires additional notice or consent, we will provide that notice or request consent as appropriate.
CONTACT US
For privacy questions, complaints or requests, contact:
ELAMARA
Operated by Oxbeak Ltd
Company registration number: 15926865
Registered office: Unit 7–8 Silverlink Business Park, Wallsend, United Kingdom, NE28 9NX
Email: support@elamara.store
Website: https://elamara.store