Privacy notice · Karma Collect

Last updated: November 2026.

This notice explains how Nakarma Ltd, trading as Karma Collect (“we”, “us”), uses personal information when you visit karmacollect.co.uk, send us an enquiry, work with us as a stockist, or were a customer of our former online shop.

1. Who we are

Nakarma Ltd is the controller of your personal information. Registered in England and Wales, company number 16741139. Registered office: 89–91 Hampstead Road, London, England, NW1 3EL. Email: nakarmaltd@gmail.com.

2. What information we collect

When you send an enquiry or contact us: your name, business name (for business enquiries), email address, phone number if you give it, town or postcode, the type of enquiry and your message, and the emails we exchange with you.

If you are a stockist or business partner: contact details for you and your staff, your business name and address, details of our agreement, orders, deliveries and invoices, and the shop information we publish on Find a shop with your permission.

If you were a customer of our former online shop: your name, billing and delivery addresses, email address, phone number, order history and, if you created one, your account login. Card payments were handled by Stripe; we never received your full card number.

When you visit the website: our server records technical information for security and to keep the site working (IP address, browser type, pages requested and the time).

Cookies: we only use cookies that are strictly necessary, such as login cookies for our own staff. We do not use advertising or tracking cookies, so we don’t ask for cookie consent.

3. How we use it and our lawful basis

Replying to your enquiry and, for businesses, discussing stocking our Oripa: our legitimate interests, or steps you ask us to take before a contract.
Managing our relationship with stockists: our contract with you and our legitimate interests.
Keeping records of past online-shop orders: legal obligation (tax and company records) and our legitimate interests in handling any claims.
Keeping the website secure: our legitimate interests.
News about new Oripa: your consent, which you can withdraw at any time.

We don’t sell your information and we don’t use it for automated decision-making.

4. Who we share it with

Trusted providers who handle information for us and only on our instructions: Vultr (website hosting, servers in London), Google (email) and DigitalOcean (hosting of our former website, until it is closed down). We may also share information with professional advisers and with authorities where the law requires it. Stripe processed payments for our former online shop and keeps some records itself as an independent controller.

5. International transfers

Some providers, such as Google, may process information outside the UK, including in the United States. Where they do, the transfer is protected by an approved safeguard such as the UK–US data bridge or the ICO’s International Data Transfer Agreement.

6. How long we keep it

Enquiries that don’t lead to a business relationship: 24 months after they arrive, then deleted.
Stockist and business partner records: for the relationship, then 6 years.
Past online-shop orders and invoices: 6 years from the end of the financial year of the order.
Web server logs: up to 30 days. Backups: overwritten within 30 days.

7. Your rights

You can ask for a copy of your information, ask us to correct or delete it, restrict or object to how we use it, ask for a portable copy, and withdraw consent where we rely on it. Email us to use any of these rights; we reply within one month, normally free of charge.

8. Complaints

If you’re unhappy with how we’ve handled your information, please tell us first at nakarmaltd@gmail.com. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

9. Changes

We will update this notice if the way we use personal information changes. The date at the top shows when it was last updated.