❤Free shipping on orders over €40

Privacy Policy

Welcome to Okbayco. We see privacy not as a static policy, but as a continuous journey—one where your personal data travels through our systems with purpose, transparency, and your control at every stage. This statement is your map, explaining what we gather, why we use it, who might see it, and when it departs. We are committed to being responsible stewards of your information, using it only as described here and keeping it only for as long as its purpose demands.

Stage 1: Data You Share & Data We Observe

Your journey with Okbayco begins the moment you interact with us. The first layer of data comes directly from you—when you create an account, reach out to our team, join a survey, use our online help or chat, or finalize a purchase. During a transaction, you naturally share payment details, including your credit or debit card number and other card information, alongside your account and authentication credentials, and your billing, shipping, and contact details. This is the information you consciously provide to build our relationship.

Simultaneously, a second layer of data is generated automatically as you browse our websites. Your device type, its unique identifier, your IP address, operating system, and Internet browser type all travel to us. We also collect usage and diagnostic information, and, where available, location data from the devices you use to access our services. This may involve GPS, your IP address, and other technologies to determine a device’s approximate location, all to help us refine and improve your experience.

Stage 2: How Your Data Serves You

Once your data enters our care, it is put to work to create a smoother, safer, and more personalized experience. We use it to provide, improve, and develop our products, services, and advertising, engaging in activities like data analysis, research, and audits. This is rooted in our legitimate interest in ensuring business continuity and delivering a seamless service. If you participate in a contest or promotion, your data administers those programs, which may have their own specific rules.

Communication is another vital part of this service. Subject to your prior express consent, we may use your personal data to send you marketing communications about our own products and services, to keep you informed about your account or transactions, and to update you on our policies and terms. You are always in the driver’s seat; if you no longer wish to receive marketing emails, you can contact us to opt-out. With your prior express consent, we may also share your personal data with third-party partners who may send you marketing communications about their products and services, and we may personalize your experience on third-party websites and applications. You may withdraw your consent at any time by contacting us.

To make all of this possible, we use cookies and similar technologies. These small text files stored on your browser help us provide, protect, and improve our services, personalize content, offer and measure advertisements, understand user behavior, and provide a safer experience. The specific cookies used will vary depending on the websites and services you interact with.

Stage 3: The Path of Data Sharing

Your data’s journey sometimes involves trusted partners. We make certain personal data available to strategic partners who work with us to provide or improve our products, services, and advertising. However, your personal data will not be shared with third parties for their own marketing purposes without your prior express consent.

Stage 4: The Data Lifecycle & Retention

We retain your personal data for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement. This means we keep it to provide you with services, to comply with our legal obligations, and to resolve disputes. The retention clock is tied directly to the purpose for which the data was collected. If a longer retention period is required or permitted by law, we will, of course, adhere to that legal requirement.

Stage 5: Your Control Points & Rights

You are an active participant in your data’s lifecycle, and you have a comprehensive set of rights regarding the information we hold about you. We take reasonable steps to ensure your data is accurate, complete, and up to date. To protect your privacy and security, we may request information from you to confirm your identity and your right to access the data we maintain. The rights you can exercise by contacting us include:

  • The right to access, correct, or delete the personal data we have collected.
  • The right to restrict or object, at any time, to the further processing of your personal data.
  • The right to receive your personal data in a structured and standard format.
  • The right to lodge a complaint with a competent data protection authority regarding the processing of your personal data.

There are instances where applicable laws or regulatory requirements may allow or require us to refuse to provide or delete some or all of the personal data we maintain. We will respond to your request in a reasonable timeframe, and in any event, in less than 30 days.

Special Circumstances: Legal Disclosures & Business Transfers

There are specific circumstances beyond our everyday operations that may require us to disclose your personal data. We may share data with all our affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal data to the relevant third party.

We may also disclose personal data if we determine in good faith that it is reasonably necessary to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users. Furthermore, it may be necessary—by law, legal process, litigation, and/or requests from public and governmental authorities—for us to disclose personal data. This includes disclosures for purposes of national security, law enforcement, or other issues of public importance.

For residents within the European Economic Area (EEA), our processing of your personal data is legitimized as follows: Whenever we require your consent for the processing of your personal data, such processing will be justified pursuant to Article 6(1) of the General Data Protection Regulation (EU) ("GDPR").

A Note on Younger Travelers

Our products and services are designed for adults. We do not knowingly collect, use, or disclose data from children under 16. If we learn that we have collected the personal data of a child under 16, or the equivalent minimum age depending on the jurisdiction, we will take steps to delete the data as soon as possible. Please immediately contact us if you become aware that a child under 16 has provided us with personal data.

The Evolving Map: Policy Updates

The journey of data protection evolves with new technologies, industry practices, and regulatory requirements. We may periodically change this Privacy Statement to reflect these changes. Your continued use of our products and services after the effective date of the revised Privacy Statement means that you accept the updated terms. If you do not agree with the revised statement, please refrain from using our products or services and contact us to close any account you may have created.

External Territories: Third-Party Links

Our websites, products, and services may contain links to third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor for the information or content their products and services contain. This Privacy Statement applies solely to data collected by us through our products and services. We encourage you to read the privacy policies of any third party before proceeding to use their websites, products, or services.

Contacting Your Data Stewards

Your privacy is an ongoing conversation, not a one-time transaction. If you wish to access, review, or close your data file, or if you have any questions about this journey or its implementation, our team is ready to assist you. Reach out to us at [email protected] to start that conversation.