Hunzalley
Last Updated: [Insert Date]
Hunzalley (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. WHO WE ARE
Hunzalley is a UK-based brand selling organic, cold-pressed apricot kernel oil sourced from the Hunza Valley.
For any privacy-related questions, contact us at:
📧 hunzalley.customerservice@gmail.com
2. PERSONAL DATA WE COLLECT
We may collect and process the following personal data:
- Name
- Billing and shipping address
- Email address
- Phone number
- Payment details (processed securely via third-party providers; we do not store card details)
- Order history and purchase information
- IP address and device/browser information
- Communications you send to us (emails, contact forms)
3. HOW WE COLLECT YOUR DATA
We collect personal data when you:
- Place an order on our website
- Create an account (if applicable)
- Subscribe to our emails
- Contact us for support
- Browse our website (via cookies and analytics tools)
4. HOW WE USE YOUR DATA
We use your personal data to:
- Process and fulfil orders
- Manage payments and deliveries
- Communicate with you about your order
- Provide customer support
- Improve our website and services
- Comply with legal and regulatory obligations
- Send marketing communications (only if you opt in)
5. LEGAL BASIS FOR PROCESSING
Under UK GDPR, we process your data based on:
- Contractual necessity – to fulfil your order
- Legal obligation – accounting and tax compliance
- Legitimate interest – improving services and preventing fraud
- Consent – marketing communications (where applicable)
6. DATA SHARING
We may share your data only with trusted third parties, including:
- Payment processors
- Shipping and courier services
- Website hosting and IT providers
- Analytics providers
All third parties are required to protect your data and use it only for agreed purposes.
7. INTERNATIONAL DATA TRANSFERS
If data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.
8. DATA RETENTION
We retain personal data only for as long as necessary to:
- Fulfil the purposes outlined in this policy
- Meet legal, tax, and accounting requirements
When no longer required, data is securely deleted or anonymised.
9. YOUR RIGHTS (UK GDPR)
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights, email:
📧 hunzalley.customerservice@gmail.com
10. COOKIES
Our website uses cookies to:
- Ensure website functionality
- Analyse website traffic
- Improve user experience
You can manage or disable cookies via your browser settings.
11. DATA SECURITY
We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.
12. MARKETING COMMUNICATIONS
You will receive marketing emails only if you opt in.
You may unsubscribe at any time by using the link in our emails or contacting us directly.
13. CHILDREN’S PRIVACY
Our website is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.
15. COMPLAINTS
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113
16. CONTACT US
For privacy-related enquiries, contact:
Hunzalley
📧 hunzalley.customerservice@gmail.com