1. Who We Are

Haniesta is a UK-operated home décor brand offering handcrafted rugs for residential use. For the purposes of UK data protection law, Haniesta acts as the data controller for personal information collected through this website.

For any privacy-related questions, you may contact us at: support@haniesta.com

2. Information We Collect

• Name, email address, and phone number
• Billing and shipping address
• Newsletter subscription email
• Account login email (password-less secure code login)
• Payment details are not stored by Haniesta and are processed securely via Shopify’s hosted checkout.

3. Information Collected Automatically

When you browse our website, limited technical data may be collected such as:

• Device and browser type
• IP address
• Pages visited and interaction data

At launch, Haniesta does not actively use analytics or tracking tools, though tools such as:

• Google Analytics
• Shopify analytics
• Heatmap tools

may be introduced in future phases to improve user experience. Any such use will follow UK-GDPR and cookie consent requirements.

4. How We Use Your Information

• Process and deliver orders
• Communicate order updates and customer support
• Create and manage your account using secure email login codes
• Send marketing or newsletters only where lawful consent is obtained
• Improve website functionality and shopping experience

We do not sell personal data to third parties.

5. Legal Basis for Processing (UK-GDPR)

Under UK data protection law, we rely on:

• Contractual necessity — to process orders and provide services
• Legitimate interests — to operate, secure, and improve our website
• Consent — for marketing emails and optional analytics cookies

You may withdraw consent at any time.

6. Payments & Checkout Security

All payments are processed through Shopify’s secure checkout infrastructure. Haniesta does not store or access full payment card details Shopify acts as a separate data processor and maintains its own privacy and security compliance.

7. Data Storage & Location

Customer data is stored securely within Shopify’s infrastructure. Haniesta does not maintain external customer databases outside Shopify at launch. As we currently sell within the United Kingdom only, data handling follows UK-GDPR standards.

8. Marketing Communications

If you subscribe to our newsletter, we may send:

• Product updates
• Collection launches
• Offers and inspiration

Marketing emails will be sent via Shopify Email or Klaviyo (when activated). You can unsubscribe at any time using the link in any email.

9. Cookies

At launch, Haniesta does not actively deploy marketing or analytics cookies. If cookies are introduced later (e.g., analytics or advertising), a clear cookie consent banner will be provided in line with UK law.

10. Children’s Privacy

Haniesta products may be purchased by individuals aged 16 and above. We do not knowingly collect data from children below this age.

11. Your Rights Under UK Data Protection Law

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to certain processing
• Withdraw marketing consent at any time

To exercise these rights, contact: support@haniesta.com

We may need to verify your identity before fulfilling requests.

11. Data Retention

We keep personal data only as long as necessary to:

• • Fulfil orders
• • Meet legal and accounting obligations
• • Resolve disputes or enforce agreements

After this period, data is securely deleted or anonymised.

12. Changes to This Policy

We may update this Privacy Policy as Haniesta evolves. The latest version will always appear on this page with the updated date.