Privacy Policy

What information we collect

We collect information you provide when you place an order, create an account, contact us, or sign up to our mailing list. This includes your name, email address, postal address, phone number, and payment information (processed securely by Shopify Payments - we do not store card details).

We also automatically collect certain information when you visit our website, including your IP address, browser type, pages viewed, time spent on the site, and the page that referred you.

How we use your information

We use the information we collect to:

• Process and fulfil your orders and send related communications
• Send you marketing emails if you have opted in (you can unsubscribe at any time)
• Respond to your enquiries and provide customer support
• Improve our website and understand how customers use it
• Meet our legal and regulatory obligations

We will never sell your personal data to third parties.

Legal basis for processing

We process your personal data on the following legal bases:

• Contract performance - to process and fulfil your orders
• Legitimate interests - to improve our services and prevent fraud
• Consent - for marketing emails (you can withdraw consent at any time)
• Legal obligation - to comply with applicable law

Who we share your data with

We share your data only with trusted third parties who help us run our business:

• Shopify Inc. - our e-commerce platform, which processes orders and payments on our behalf
• Royal Mail / courier partners - to deliver your orders
• Email marketing providers - to send marketing emails (only if you have opted in)
• Google Analytics - anonymous website usage statistics

All third parties are bound by appropriate data processing agreements and are prohibited from using your data for their own purposes.

Cookies

We use cookies to make our website work, remember your preferences, and understand how people use our site. Essential cookies cannot be disabled as they are necessary for the site to function.

• Essential - cart, session, and security cookies required for the site to function
• Analytics - Google Analytics cookies to understand site usage (anonymised)
• Marketing - used to serve relevant ads if you have consented

How long we keep your data

We keep your order data for 7 years to comply with UK tax law. Account data is retained for as long as your account is active. Marketing data is retained until you unsubscribe. Website usage data is retained for 26 months.

You can request deletion of your personal data at any time by contacting us at hello@harastudio.co.uk, subject to any legal obligations to retain certain records.

Your rights

Under UK GDPR you have the following rights:

• Right of access - to request a copy of the personal data we hold about you
• Right to rectification - to request correction of inaccurate data
• Right to erasure - to request deletion of your data (subject to legal obligations)
• Right to restriction - to request we limit how we use your data
• Right to portability - to receive your data in a machine-readable format
• Right to object - to object to processing based on legitimate interests
• Right to withdraw consent - for any processing based on your consent

To exercise any of these rights, email hello@harastudio.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our website uses SSL encryption and our e-commerce platform (Shopify) is PCI DSS compliant for payment processing.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page shows when it was last updated.

Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us:

• Email: hello@harastudio.co.uk
• Post: Hara Studio, Unit 9, The Parade Shopping Centre, Shrewsbury SY1 1DL

You can also contact the Information Commissioner's Office (ICO) if you are not satisfied with our response: ico.org.uk or 0303 123 1113.