Privacy policy

Last updated: 30 October 2025

This Privacy Policy explains how Creations Studio Ltd T/A YAKU ("YAKU", "we", "us", or "our") collects, uses, and protects your personal information when you visit or make a purchase from yaku.uk (the “Site”) or otherwise communicate with us (together, the “Services”).

By using the Site or our Services, you agree to the collection and use of your information as described below.

1. Who We Are

Creations Studio Ltd T/A YAKU
Charrington Place, St Albans, AL1 3FJ
Email: studio@yaku.uk

We are the data controller responsible for your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect and process personal information you provide directly, as well as limited data automatically when you interact with our Site.

Information you provide directly

Contact details: name, email address, phone number, billing and shipping address.
Order details: products purchased, payment confirmation, order value, delivery details.
Communication: messages or enquiries sent to us via email or our contact form.
Account information (optional): if you choose to create an account in future, we will store your login details securely.

Information we collect automatically

We collect basic analytics and performance data (such as your IP address, browser type, and pages visited) to help us understand how visitors use our site. This is done through cookies and tracking technologies, including the Meta Pixel.

We do not use this information to personally identify you — it’s used to improve our site experience and measure advertising performance.

3. How We Use Your Information

Purpose	Legal Basis
To process and deliver your orders	Performance of a contract
To respond to enquiries and provide customer support	Legitimate interest
To send order updates and transactional emails	Performance of a contract
To send marketing emails (where you’ve opted in)	Consent
To analyse website performance and advertising	Legitimate interest
To comply with tax and legal obligations	Legal obligation

We never sell your personal data, and we only share it where necessary to operate our business or comply with the law.

4. How We Share Information

We may share limited personal information with trusted partners who help us deliver our Services, including:

Shopify (our website and order platform)
Payment processors (for secure payments)
Couriers and fulfilment providers (for shipping orders)
Marketing and analytics tools, such as Meta Pixel

These partners are only given the information needed to perform their services and must keep it secure.

5. Cookies and Analytics

We use cookies to make the Site function properly and improve your experience. Some cookies are essential for checkout and security; others help us understand performance through analytics or measure the reach of our adverts.

You can manage or disable cookies in your browser settings. For details on Shopify’s cookie use, visit: https://www.shopify.com/legal/cookies.

If you block cookies, some parts of the Site may not work correctly.

6. How Long We Keep Your Data

Type of Data	Retention Period
Order and invoice records	Up to 6 years (for tax/legal purposes)
Marketing subscription data	Until you unsubscribe + up to 2 years
Customer emails and enquiries	Up to 2 years
Analytics data	Up to 2 years

After these periods, your data will be securely deleted or anonymised.

7. Your Rights

You have rights over your personal information, including:

Access – to request a copy of your data.
Correction – to update inaccurate information.
Deletion – to request we erase your data (where possible).
Restriction – to ask us to limit how we use it.
Objection – to stop direct marketing or processing based on legitimate interests.
Data portability – to request a copy of your data in a portable format.
Withdraw consent – for marketing emails or other consent-based uses.

You can exercise any of these rights by emailing studio@yaku.uk.
If you’re not satisfied with our response, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.

8. International Data Transfers

We may transfer your data to partners or service providers outside the UK (for example, Shopify and Meta).
Where this happens, we rely on lawful transfer mechanisms such as the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses to keep your data protected.

9. Security

We take appropriate technical and organisational measures to protect your personal information.
While no online system can be guaranteed completely secure, we continually review our security practices and only work with providers who meet strong data protection standards.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons.
When we do, we’ll post the updated version on this page and update the “Last updated” date above.