Privacy policy

Prepared as a draft on 11 October 2026. The owner should have it reviewed before launch.

Who is responsible

Setup required. The legal name of the data controller has not been published. Set BUSINESS_LEGAL_NAME before you collect personal information for real orders or marketing.

Setup required. No privacy contact email is published yet.

What this website does with personal information today

• Your basket is stored in this browser. It is not sent to a shop database.
• Your cookie choice is stored in this browser and in a cookie named hhk_cookie_consent.
• The newsletter form does not store email addresses, because no mailing service is connected.
• The contact form does not send or store messages, because no inbox is connected.
• If Stripe is later connected, Stripe processes the payment. The shop intends to receive the payment status and amount, not your full card number.

Why information would be used

Order details would be used to take payment, deliver goods and handle returns. Newsletter details would be used only with the separate consent on that form. The owner must confirm the lawful basis for each purpose before going live. This draft does not pretend that analysis has already been done.

Cookies

A necessary cookie remembers whether you accepted, rejected or customised non-essential cookies. Analytics and marketing cookies stay off unless you choose them. This build does not load analytics or advertising tags at all, including after consent, because none have been installed. Any future tag must check that consent first. You can change the choice at any time with Cookie settings in the footer.

Newsletter consent

The newsletter box is separate from checkout and is never ticked in advance. Consent for email is not the same thing as the information needed to process an order.

How long information is kept

Basket contents stay in your browser until you remove them or clear site data. The cookie choice is kept for about six months. Nothing from the newsletter or contact forms is kept on the server in this build. Order records are not stored here yet. If Stripe is used, Stripe keeps payment records under its own terms.

Who else may process information

The site is intended to be hosted on Vercel, which may process technical logs. Stripe may process payments if it is connected. Personal information is not sold. The owner must confirm whether these providers move information outside the United Kingdom and put suitable safeguards in place. This draft does not claim that those safeguards are already complete.

Your rights

People in the United Kingdom can usually ask for access, correction, deletion, restriction, or a copy of their information, and can object to some uses. You can also complain to the Information Commissioner’s Office. To use a right with this shop, email the published contact address. If none is published, the owner has not yet provided a way to make that request.

Children

The shop is not directed at children, and it does not knowingly ask children for personal information.

See the terms and contact page.