The policy states that Oura processes personal data for online advertising on behalf of Oura and its partners, using cookies and similar technologies to create advertising audiences, and authorizes direct marketing communications with an opt-out option.
This analysis describes what Oura's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes advertising-related data processing on behalf of third-party partners in addition to Oura itself, with the details of those partner relationships and data flows deferred to a separate Cookie Policy. The scope of partner advertising data sharing may require evaluation under CPRA's opt-out-of-sharing requirements and GDPR's legitimate interest or consent requirements for behavioral advertising.
Interpretive note: The specific advertising partners and data categories shared are not identified in this document but are deferred to the Cookie Policy, limiting assessment of the full scope of advertising data flows.
The agreement authorizes Oura to process user data for advertising on behalf of itself and unnamed partners using cookie-based tracking. Users can opt out of direct marketing communications from Oura and manage cookie-based advertising preferences through the Cookie Policy.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
Monitoring
Oura has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We process marketing-related personal data to provide online advertising and other marketing communications on behalf of Oura and our partners. For example, as explained more fully in our Cookie Policy, we use cookies and similar technologies on our website to create audiences for online advertisement. You can opt out of direct marketing communications from Oura.— Excerpt from Oura's Oura Privacy Policy
1) REGULATORY LANDSCAPE: This provision implicates GDPR and ePrivacy Directive requirements for cookie-based advertising consent, CCPA/CPRA opt-out-of-sale and opt-out-of-sharing obligations for advertising data, and FTC Act standards for unfair or deceptive advertising practices. The Finnish DPA, EU national supervisory authorities, and the California Privacy Protection Agency are the primary enforcement bodies. 2) GOVERNANCE EXPOSURE: Medium. The policy states advertising is conducted on behalf of 'our partners' without identifying those partners in this document, deferring to the Cookie Policy. This structure may create disclosure adequacy concerns under CCPA/CPRA, which requires identification of categories of third parties with whom personal information is shared for advertising purposes. 3) JURISDICTION FLAGS: California residents have CPRA rights to opt out of sharing of personal information for cross-context behavioral advertising. EU/EEA users require consent (not merely legitimate interest) for behavioral advertising cookies under the ePrivacy Directive. UK users are subject to PECR in addition to UK GDPR. 4) CONTRACT AND VENDOR IMPLICATIONS: Advertising and analytics partner agreements should be reviewed to confirm whether data shared through cookie-based audience creation constitutes a 'sale' or 'sharing' under CPRA and whether appropriate opt-out mechanisms and data processing agreements are in place. 5) COMPLIANCE CONSIDERATIONS: Legal teams should audit the Cookie Policy for completeness of partner disclosures, verify that consent management platform mechanisms meet applicable standards for EU and UK users, and confirm that CPRA opt-out-of-sharing signals (including Global Privacy Control) are honored for California residents.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes advertising-related data processing on behalf of third-party partners in addition to Oura itself, with the details of those partner relationships and data flows deferred to a separate Cookie Policy. The scope of partner advertising data sharing may require evaluation under CPRA's opt-out-of-sharing requirements and GDPR's legitimate interest or consent requirements for behavioral advertising.
The agreement authorizes Oura to process user data for advertising on behalf of itself and unnamed partners using cookie-based tracking. Users can opt out of direct marketing communications from Oura and manage cookie-based advertising preferences through the Cookie Policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Oura.