Skip to content

Privacy policy

Last updated: November 18, 2026

The short version: we collect as little as we can. We use it to take and ship your orders, run our waitlist and measure our ads. We don't sell it. You can ask us to see, fix or delete your data at any time: info@tsurubody.com.

1. Who is responsible

TSURU is run by the seller named in our Legal notice, who is the "controller" of your personal data. We're based in the European Union (Slovakia), so we follow the EU General Data Protection Regulation (GDPR) for everyone, wherever you live.

2. What we collect and why

Waitlist. Your email address, so we can email you when the kits are available again. Legal basis: your consent, which you give by joining. You can withdraw it at any time with the unsubscribe link or by emailing us.

Orders. Your name, shipping address, email address, phone number if you give it, what you ordered and our emails with you. We use them to take payment, ship your order and help you. If you tick the box at checkout, we also send you ritual tips and refill news; you can unsubscribe in any email. Legal basis: our contract with you, and our duties under tax and accounting law. Card and PayPal details go straight to our payment providers. We never see your full card number.

Emails you send us. Your message and contact details, so we can answer. Legal basis: our legitimate interest in helping you, or our contract with you.

Reviews (once reviews open). Your first name, rating, review and email address. We publish your first name and review only with your permission. Legal basis: your consent.

Website and ads. When you visit, our website provider processes technical data such as your IP address, browser and the pages you view, to deliver and protect the site. Where cookies are allowed (see section 7), the Meta Pixel records events such as page views, kits you choose, checkouts and purchases, and waitlist sign-ups, so we can measure our Facebook and Instagram ads and show them to people likely to be interested. Legal basis: your consent where the law requires it, otherwise our legitimate interest in measuring and improving our ads. You can object at any time.

Ad measurement from our server. When you join the waitlist and ad cookies are allowed, we also report that sign-up to Meta through Meta's Conversions API, so it still counts if your browser blocks the Pixel. The report goes through Make, an automation service. Make receives your email address, the kit option you picked, the page and ad link you came from, your browser type and the Meta cookie IDs. Meta receives your email address only in hashed (scrambled) form, with the kit option, the page and your browser type. Legal basis: the same as for the Pixel.

Purchases. When you place an order, our checkout provider also reports the purchase to Meta's Conversions API from its server, so it counts even if your browser blocks the Pixel: the order value, the products, and your contact details in hashed (scrambled) form, with your browser type and, if they are set, the Meta cookie IDs. Legal basis: our legitimate interest in measuring our ads. You can object at any time (section 6).

We don't make automated decisions about you that have legal or similarly significant effects.

3. Who helps us

We share data only with providers who need it to do their job for us:

  • Funnelish (Ginigo Ltd., United Kingdom; servers in the US): our website, forms and checkout.
  • Brevo (Sendinblue SAS, France): our email list and emails.
  • Meta Platforms: the Meta Pixel, the Conversions API and ad measurement. Meta also uses this data under its own privacy policy.
  • Make (Celonis, Inc., United States): passes waitlist sign-ups to Meta's Conversions API.
  • Stripe and PayPal: payments.
  • Shopify: order management, passing your order to our warehouse.
  • Our fulfillment warehouse in New Jersey (Crown Fulfillment, using the Warehance warehouse system) and shipping carriers: to pack and deliver your order.
  • Email and mail services: Namecheap (email forwarding), Google (email inbox) and Anytime Mailbox (our New York mailing address).
  • Our accountant in Slovakia: tax and accounting records.
  • Public authorities, when the law requires it.

We don't sell your personal information. We do use the Meta Pixel and the Conversions API for advertising as described above, and you can switch them off (section 7).

4. Transfers outside the EU

Some of these providers process data in the United States or the United Kingdom. The UK has an EU adequacy decision. For the US, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

5. How long we keep it

  • Waitlist: until you unsubscribe, or 12 months after the launch email, whichever comes first.
  • Orders and invoices: as long as tax and accounting law requires (up to 10 years).
  • Emails with us: up to 3 years after our last contact, or longer if needed for a claim.
  • Reviews: while they're published, or until you ask us to remove them.
  • Meta Pixel cookie (_fbp): up to 90 days.
  • Make: a technical log of each transfer, for a limited period set by Make.

6. Your rights

You can ask us to:

  • show you the data we hold about you and give you a copy;
  • correct it;
  • delete it;
  • restrict how we use it, or object to it, including for ads;
  • move it to another provider;
  • withdraw your consent at any time (this doesn't affect what we did before).

Email info@tsurubody.com. We reply within one month.

If you're not happy with our answer, you can complain to the Slovak data protection authority: Úrad na ochranu osobných údajov Slovenskej republiky, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic (dataprotection.gov.sk), or to the authority where you live.

If you live in the US, your state's law may give you similar rights. We honor the requests above for everyone, and we won't treat you differently for using them.

7. Cookies and your choices

  • Necessary cookies keep the site, checkout and your cookie choice working. Funnelish sets them, and they can't be switched off.
  • Ad cookies (Meta Pixel, for example _fbp) help us measure and improve our ads. If you don't allow them, the Pixel doesn't load and we don't report your waitlist sign-up to Meta from our server. Purchases are still reported from our checkout provider's server, as described in section 2.

How we ask:

  • EU and UK: you see a banner, and the Pixel loads only after you choose "Accept".
  • California: you can choose "Reject" in the banner.
  • Rest of the US: the Pixel loads when you visit. You can block it in your browser's cookie settings or with a tracker blocker, and manage how Meta uses your data in your Facebook or Instagram ad settings.

Our site doesn't change its behavior in response to browser "Do Not Track" signals.

8. Children

Our products and this site are for adults. We don't knowingly collect data from anyone under 16. If you think a child has given us data, email us and we'll delete it.

9. Security

The site runs over HTTPS. Only the people and providers who need your data can access it.

10. Changes

If we change this policy, we update the date at the top. If a change matters for you and we have your email address, we'll tell you.

Contact

info@tsurubody.com · TSURU, 167 Madison Avenue, Ste 205 #4997, New York, NY 10016, USA · Legal notice