Privacy & Cookies Policy
Type of website: Ecommerce
Effective date: 19th day of July, 2026
www.ikoprep.co.uk (the "Site") is owned and operated by IkoPrep Ltd. IkoPrep Ltd is the data controller and can be contacted at:
contact@ikoprep.co.uk
66 Paul Street, London, EC2A 4NA
Purpose
The purpose of this privacy policy (this "Privacy Policy") is to inform users of our Site of the following:
-
The personal data we will collect;
-
Use of collected data;
-
Who has access to the data collected;
-
The rights of Site users; and
-
The Site's cookie policy.
This Privacy Policy applies in addition to the terms and conditions of our Site.
GDPR
For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the "GDPR"). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.
We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.
Consent
By using our Site users agree that they consent to:
-
The conditions set out in this Privacy Policy.
When the legal basis for us processing your personal data is that you have provided your consent to that processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make processing which we completed before you withdrew your
consent unlawful.
You can withdraw your consent by: contacting the company at contact@ikoprep.co.uk
Legal Basis for Processing
We collect and process personal data about users in the EU only when we have a legal basis for doing so under Article 6 of the GDPR.
We rely on the following legal bases to collect and process the personal data of users in the EU:
-
Users have provided their consent to the processing of their data for one or more specificpurposes; and
-
Processing of user personal data is necessary for us or a third party to pursue a legitimate interest. Our legitimate interest is not overridden by the interests or fundamental rights and freedoms of users. Our legitimate interest(s) are:
-
Website security and fraud prevention
-
Preventing misuse of the signup form
-
Maintaining basic technical logs
-
Diagnosing website errors
-
Keeping an unsubscribe or suppression record so you do not contact someone again.
Personal Data We Collect
We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.
Data Collected Automatically
When you visit and use our Site, we may automatically collect and store the following information:
-
IP address;
-
Location;
-
Clicked links;
-
Content viewed;
-
Session information;
-
Referral source;
-
Date and time of visits;
-
Cookie-consent choices,; and
-
Website interaction data.
Data Collected in a Non-Automatic Way
We may also collect the following data when you perform certain functions on our Site:
-
First and last name;
-
Age;
-
Date of birth;
-
Sex;
-
Email address;
-
Phone number;
-
Address; and
-
Auto fill data
This data may be collected using the following methods:
-
Filling feedback form;
-
Joining waiting list; and
-
Creating an account.
How We Use Personal Data
Data collected on our Site will only be used for the purposes specified in this Privacy Policy. The data we collect automatically and manually is used for: Communication, Statistics, Market Research, and Marketing.
Who We Share Personal Data With
Employees
We may disclose user data to any member of our organisation who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.
Third Parties
We may share user data with the following third parties:
-
Wix Group Companies;
-
Amazon Web Services;
-
Google Ireland;
-
Fastly;
-
Google Analytics, Mailchimp, Klaviyo, Meta Pixel or Google Ads;
-
SendGrid;
-
Sentry and SparkPost;
-
Snowflake;
-
PerimeterX; and
-
New Relic
We may share the following user data with third parties:
-
Name and email address submitted through the waitlist form IP address and approximate location derived from it Browser, device, operating-system and screen information Pages viewed; and
-
Timestamps and referral source Cookie identifiers and consent preferences Subscription status and email-delivery information.
We may share user data with third parties for the following purposes:
-
Website hosting and operation;
-
Processing and storing waitlist registrations;
-
Delivering launch or subscription emails;
-
Website security, spam prevention and fraud detection;
-
Technical monitoring and troubleshooting;
-
Analytics and performance measurement, subject to cookie consent where required;
-
Recording and respecting cookie and unsubscribe preferences; and
-
Meeting legal or regulatory obligations.
Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose.
Other Disclosures
We will not sell or share your data with other third parties, except in the following cases:
-
If the law requires it;
-
If it is required for any legal proceeding;
-
To prove or protect our legal rights; and
-
To buyers or potential buyers of this company in the event that we seek to sell the company.
If you follow hyperlinks from our Site to another Site, please note that we are not responsible for and have no control over their privacy policies and practices.
How Long We Store Personal Data
User data will be stored until the purpose the data was collected for has been achieved. You will be notified if your data is kept for longer than this period.
How We Protect Your Personal Data
We use strong browser encryption and store data on secure servers. Access is restricted to employees bound by strict confidentiality. While we take precautions, the Internet can be insecure, and we cannot guarantee absolute security.
Your Rights as a User
Under the GDPR, you have the following rights: Right to be informed, Right of access, Right to rectification, Right to erasure, Right to restrict processing, Right to data portability, and Right to object.
Children
The minimum age to use our website is 16 years. We do not knowingly collect personal data from children under 16. If we do, it will be deleted as soon as possible.
How to Access & Modify Data
If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR, please contact our privacy officer here:
Jack Jian Hao Yan
contact@ikoprep.co.uk
66 Paul Street, London, EC2A 4NA
How to Opt-Out
You can opt-out by clicking unsubscribe in any email, rejecting non-essential cookies via our banner, or updating account preferences.
Cookie Policy
A cookie collects browsing habit data. We use functional, analytical, essential, and third-party cookies to improve site design and security. You can disable cookies in your browser, though it may affect site experience.
Modifications & Complaints
This policy may be amended to reflect legal changes. If you have complaints, please contact us. You also have the right to contact supervisory authorities like the ICO (UK) or DPC (Ireland).
Contact Information
Jack Jian Hao Yan
contact@ikoprep.co.uk
66 Paul Street, London, EC2A 4NA