Privacy Policy
Last updated: 8 December 2025
This Privacy Policy explains how Hatinest (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or make a purchase from www.hatinest.co.uk (the “Website”). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are and contact details
Hatinest is an online retailer of artisan home furnishings and decorations, serving customers in the United Kingdom. If you have any questions about this Privacy Policy or how your data is handled, you can contact us using the contact details shown on our Website or via our main customer service email address: info@hatinest.co.uk.
What data we collect
We may collect and process the following types of personal data:
- Identity data: name, title.
- Contact data: billing and delivery address, email address, and telephone number.
- Order and transaction data: products ordered, order dates, payment status, and delivery information.
- Payment data: limited payment details processed via our payment providers (we do not store full card details on our systems).
- Technical data: IP address, browser type and version, device information, time zone setting, and pages visited on our Website.
- Marketing and communications data: your preferences for receiving marketing emails and your communication preferences.
How we collect your data
We collect data in the following ways:
- Directly from you when you place an order, create an account, contact us, or subscribe to our newsletter.
- Automatically as you use the Website, via cookies and similar technologies that record technical information about your device and browsing.
- From third-party services we use to operate our store (for example, payment processors, delivery companies, and ecommerce platforms).
How we use your data and legal bases
We use your personal data for the purposes and legal bases below:
- To process and deliver your orders, including managing payments, shipping, and returns (performance of a contract).
- To communicate with you about your orders, account, or customer service enquiries (performance of a contract and legitimate interests).
- To manage and improve our Website, services, and customer experience, including troubleshooting, analytics, and security (legitimate interests).
- To send you marketing communications where you have given consent or where permitted by law (consent and legitimate interests).
- To comply with legal and regulatory obligations, such as tax and accounting requirements (legal obligation).
You can ask us to stop using your data for marketing at any time by using the unsubscribe link in our emails or contacting us.
Cookies and tracking technologies
Our Website uses cookies and similar technologies to enable core site functionality, remember your preferences, and understand how visitors use the site. Where required by UK law, we ask for your consent before setting non-essential cookies such as analytics or advertising cookies, and you can change your cookie preferences at any time through our cookie banner or browser settings.
Sharing your data
We only share your personal data with third parties where necessary and in accordance with data protection law. These third parties may include:
- Payment service providers to process your payments securely.
- Courier and delivery companies to deliver your orders.
- Ecommerce platform and technical service providers who host our Website, provide analytics, or support our IT systems.
- Professional advisers (such as accountants) and authorities where required by law.
We do not sell your personal data.
International transfers
Some of our service providers may be located outside the UK or the European Economic Area. Where data is transferred internationally, we take steps to ensure appropriate safeguards are in place, such as using standard contractual clauses or ensuring the recipient is in a country with an adequate level of protection recognised by the UK government.
Data retention
We keep your personal data only for as long as necessary for the purposes set out in this Privacy Policy, including for satisfying any legal, accounting, or reporting requirements. This means order and transaction data may be retained for a number of years to comply with tax and regulatory obligations, while marketing data may be retained until you withdraw your consent or object to marketing.
Your rights
Under data protection law, you have rights in relation to your personal data, which may include:
- The right to access a copy of the personal data we hold about you.
- The right to request correction of inaccurate or incomplete data.
- The right to request deletion of your data in certain circumstances.
- The right to restrict or object to our processing of your data in certain cases.
- The right to withdraw consent where we rely on consent for processing (such as email marketing).
- The right to data portability in certain circumstances.
To exercise any of these rights, please contact us using the details on our Website. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data, though we encourage you to contact us first so we can address your concerns.
Security of your data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse, considering the nature of the data and the risks involved in processing it. These measures may include secure connections (HTTPS), access controls, encryption used by our providers, and regular review of our policies and practices.
Children
Our Website is not intended for children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so it can be removed.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. The latest version will always be available on this page, with the effective date shown at the top.