Privacy policy

Last updated: 27 October 2026

This policy explains how Hana London ("we") collects, uses and protects your personal data when you visit hanalondon.com or place an order. We process your data in line with the UK General Data Protection Regulation, the EU General Data Protection Regulation (GDPR) and the laws that apply in your country of residence.

1. Data controller

Hana London · 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States · contact@hanalondon.com

2. Data we collect

  • Identity and contact details: first and last name, email address, delivery and billing address, phone number (optional).
  • Orders: products bought, amounts, order history, messages with our customer service.
  • Payment: handled directly by our secure payment providers. We never store your card details.
  • Browsing: IP address, device and browser type, pages viewed, data from cookies (see section 8).
  • Newsletter: your email address, if you sign up.

3. Why we use it (purposes and legal bases)

  • To process and deliver your orders and handle returns, refunds and customer service: performance of a contract.
  • To meet our accounting, tax and legal obligations: legal obligation.
  • To prevent fraud and keep the site secure: legitimate interest.
  • To improve the site and measure its audience: consent (analytics cookies).
  • To send you our offers and news by email: consent, which you can withdraw at any time using the unsubscribe link in every email.
  • To show personalised ads on other sites and social networks: consent (advertising cookies).

4. Who we share it with

We never sell your data. We only share it with the service providers we need to run our business, who act on our instructions:

  • our e-commerce platform and host (Shopify);
  • our payment providers;
  • our carriers and logistics partners, for delivery;
  • our email and customer service tools;
  • with your consent, our analytics and advertising partners (for example Meta or Google);
  • public authorities, when the law requires it.

5. Transfers outside the UK and the European Economic Area

Some of our service providers, as well as Hana London, are based outside the UK and the European Economic Area (in particular in the United States and Canada). These transfers are covered by appropriate safeguards, such as the standard contractual clauses approved by the European Commission and the UK, or the EU–US Data Privacy Framework and its UK extension.

6. How long we keep it

  • Order and billing data: 10 years, to meet our accounting obligations.
  • Customer account: until you delete it, or 3 years after your last activity.
  • Marketing (newsletter): 3 years after our last contact, or until you unsubscribe.
  • Cookies: 13 months at most.

7. Your rights

You have the right to access, correct, delete, restrict, object to the processing of and port your data, the right to withdraw your consent at any time and, where the law provides for it, the right to give instructions about your data after your death. To use these rights, email contact@hanalondon.com. We reply within one month.

If you think your rights haven't been respected, you can complain to the data protection authority of your country (in the UK, the ICO: ico.org.uk; in France, the CNIL: www.cnil.fr).

8. Cookies

We use cookies that are needed for the site to work (cart, checkout, security, language preferences), which don't require your consent. Analytics and advertising cookies are only set with your agreement, given through the banner shown on your first visit. You can change your choices at any time from that banner or in your browser settings.

9. Security

The site uses HTTPS and payments are encrypted. Access to your data is limited to the people and service providers who need it.

10. Children

The site is intended for adults. We don't knowingly collect data from children under 16.

11. Changes

We may update this policy. The date of the last update is shown at the top of this page.