Privacy Policy

1. DATA CONTROLLER
The controller for personal data processed in connection with the online shop is:
Inkeria Limited (VAT No. 438 7579 41)
Address: 71-75 Shelton Street, London WC2H 9JQ, United Kingdom
Email: hi@hipi.co.uk

2. WHAT KIND OF DATA WE PROCESS
We may process the following categories of personal data, depending on how you use the online shop:
a) Contact and customer data: name, address, email, telephone number
b) Order and transaction data: order history, delivery options, amounts, time, and any company name/registration number (if business)
c) Customer dialogue: enquiries to customer service and communication relating to purchases/returns/complaints
d) Technical data: IP address, device information, browser data, log data
e) Usage data/cookies: how you navigate the website, cookie consent, preferences (depending on your choices)

We do not ask you for sensitive personal data. Please do not send us such data.

3. PURPOSES AND LEGAL BASIS
We process personal data for the following purposes:

3.1 Purchases, delivery and customer service (UK GDPR Art. 6(1)(b) – contract)
– handling orders, payment, delivery and returns
– sending order confirmations, delivery information and other necessary service communications
– handling complaints and customer service

3.2 Accounting and bookkeeping (UK GDPR Art. 6(1)(c) – legal obligation)
– storing transaction documentation in accordance with applicable bookkeeping rules

3.3 Improvements and security (UK GDPR Art. 6(1)(f) – legitimate interest)
– troubleshooting, operations and security (for example preventing misuse, fraud and attacks)
– improving the online shop and the user experience (provided this does not require consent under the rules on cookies/tracking)

3.4 Marketing (UK GDPR Art. 6(1)(a) – consent, or where permitted under the rules on existing customer relationships)
– newsletters and campaigns are only sent if you have given consent, or where marketing is permitted within an existing customer relationship
– you can at any time opt out/withdraw consent via the unsubscribe link or by contacting us

4. WHO WE SHARE DATA WITH (RECIPIENTS)
We only share personal data where necessary, and typically with the following types of recipients:

4.1 Payment
– Adyen (card payments) and any partners
– Apple Pay (when Apple Pay is used)
– Klarna (invoice/instalments, credit assessment and invoice handling)

These providers are often independent controllers for parts of the processing (in particular the payment and credit assessment parts). See their privacy policies for details.

4.2 Shipping and logistics
– Royal Mail and/or other carriers (for the delivery of goods)

4.3 IT operations and online shop platform
– Providers operating the online shop solution, hosting, email systems and similar (as processors)

4.4 Analytics and marketing (only if you consent, where required)
– analytics tools (Google, Northbeam)
– advertising/tracking platforms (Google Ads, Meta/Facebook, Snapchat)
– email marketing (Brevo)

Which analytics/marketing tools we use may vary. An up-to-date overview is available in our cookie banner/”Manage cookies”.

5. TRANSFERS TO COUNTRIES OUTSIDE THE UK/EEA
Some providers may process or store data outside the UK/EEA. For such transfers we rely on lawful transfer mechanisms (for example the UK International Data Transfer Agreement or EU Standard Contractual Clauses with the UK Addendum) and assess any necessary supplementary measures.

6. COOKIES AND TRACKING
6.1 What are cookies?
Cookies are small text files stored on your device. We use cookies and similar technologies for:
– strictly necessary functions (shopping basket, security, login where available)
– statistics and improvements
– personalisation
– marketing (advertising)

6.2 Consent and settings
The use of cookies and tracking technology that is not strictly necessary requires prior consent.
When you visit the online shop for the first time (and at regular intervals), you have the option to:
– accept all,
– reject non-essential, or
– customise per category.

You can change/withdraw consent at any time via: [LINK or “Manage cookies” at the bottom of the website]

6.3 Categories of cookies we may use
– Strictly necessary: for the online shop to function (stored without consent where strictly necessary)
– Functional: remembers choices and preferences (requires consent if not strictly necessary)
– Statistics/Analytics: understands usage and improves the service (requires consent)
– Marketing: targeted advertising and measurement of effect (requires consent)

7. RETENTION / DELETION
We retain personal data for as long as it is necessary for the purpose:
– Order, invoice and accounting data is stored in accordance with applicable bookkeeping rules (typically several years).
– Customer dialogue is stored as long as is necessary to follow up your case, and then for a limited period.
– Technical logs are normally stored for a limited period for operations and security.

8. YOUR RIGHTS
You have the right to:
– access your own data
– rectification of inaccurate data
– erasure (where we are not required by law to retain data)
– restriction of processing
– object to processing based on legitimate interest
– data portability (where the conditions are met)
– withdraw consent (where processing is based on consent)

9. INFORMATION SECURITY
We work to protect personal data with organisational and technical measures, and only grant access to personal data to persons/providers who need it.

10. CONTACT AND COMPLAINTS
Privacy enquiries can be sent to: hi@hipi.co.uk
You may also lodge a complaint with the Information Commissioner’s Office (ICO) if you believe the processing breaches the rules.