Argan Oil Conditioner

1. INTRODUCTION AND PURPOSE OF THIS POLICY
1.1 This Privacy Policy describes how HU London LTD (“the Company”, “we”, “our”, “us”) collects, uses, stores, transfers and protects the personal data of customers and visitors to the website www.hu-london.co.uk.
1.2 This policy applies to all personal data collected through the website, online orders, email communications, social media, payment systems, marketing campaigns and any other channel through which individuals interact with the Company.
1.3 By accessing the website or providing personal data to HU London LTD, the Customer confirms that they have read, understood and accepted this Privacy Policy.
1.4 The purpose of this policy is twofold: (a) to ensure compliance with applicable data protection laws in the United Kingdom, including the UK GDPR and the Data Protection Act 2018; and (b) to safeguard the Company’s legitimate business interests by maintaining a lawful basis for all processing activities.

2. DATA CONTROLLER INFORMATION
2.1 The data controller is HU London LTD, a company registered in England and Wales under company number 16716170.
2.2 Registered address: 17 Torver Road, Harrow, London, HA1 1TQ, United Kingdom.
2.3 Contact email for data protection matters: contact@hu-london.co.uk.
2.4 HU London LTD is fully responsible for the collection, storage and use of personal data in accordance with this Privacy Policy and applicable data protection laws.

3. CATEGORIES OF PERSONAL DATA COLLECTED
3.1 Data provided directly by the Customer includes full name, billing address, shipping address, email address, phone number, and payment details limited to what is required to process the order securely through authorised payment processors.
3.2 Data collected automatically includes IP address, device identifiers, browser type, pages visited, session duration, language preferences, approximate geolocation data, order history, access timestamps and cookies.
3.3 Data collected through third parties includes information provided by payment service providers (such as PayPal, Stripe, Apple Pay), delivery partners (such as EVRI), online advertising platforms (such as Google Ads, Meta Ads, TikTok Ads) and analytical tools (such as Google Analytics).
3.4 If the Customer communicates directly with the Company via email, social media or contact forms, additional information may be collected including message content, feedback and the conversation history.

4. PURPOSES OF DATA PROCESSING
4.1 Order processing and fulfilment: to confirm, prepare and ship customer orders, process payments, issue invoices and provide after-sales service.
4.2 Communication with customers: to respond to enquiries, feedback, complaints, requests or updates related to orders and products.
4.3 Legal and accounting compliance: to retain records for tax, accounting, anti-fraud and reporting obligations under UK law.
4.4 Marketing and personalised advertising: to send newsletters, promotional offers and targeted campaigns based on the Customer’s consent or legitimate interest of the Company.
4.5 Analytics and service improvement: to analyse performance, behaviour, preferences, and to improve user experience and commercial operations.
4.6 Security and fraud prevention: to detect, prevent and investigate unauthorised or unlawful activity, to protect legitimate business interests and customer safety.

5. LEGAL BASIS FOR PROCESSING
5.1 Contract performance: data processing is necessary to perform and deliver the sales contract between HU London LTD and the Customer.
5.2 Legal obligation: data may be retained and processed to comply with statutory obligations under UK tax and commercial law.
5.3 Legitimate interest: data may be processed to enhance business operations, maintain customer relationships, prevent fraud, defend against legal claims and improve services.
5.4 Consent: marketing communications, newsletters, non-essential cookies and personalised advertising are carried out only with the Customer’s explicit consent. The Customer may withdraw consent at any time without affecting the lawfulness of prior processing.

6. USE OF COOKIES AND SIMILAR TECHNOLOGIES
6.1 The website uses cookies and similar tracking technologies for technical functionality, analytics, performance monitoring and personalised marketing.
6.2 Cookies may be first-party (set by HU London LTD) or third-party (set by Google, Meta, TikTok and others).
6.3 The Customer can manage cookie preferences through their browser settings or the consent banner displayed upon first access to the site.
6.4 Detailed information on the types of cookies used, their purpose and duration is available in the separate “Cookie Policy” published on the website.

7. HOW PERSONAL DATA IS USED
7.1 HU London LTD uses personal data exclusively for the purposes stated in section 4 and within the limits of UK law.
7.2 Personal data will not be used for unrelated purposes without prior notification and, where required, consent from the Customer.
7.3 The Company may use automated or semi-automated processing tools, including profiling for marketing segmentation, to provide more relevant offers and content to Customers.

8. DATA RETENTION PERIODS
8.1 Personal data will be retained only for as long as necessary for the purposes for which it was collected or as required by law.
8.2 In general, customer data will be stored for six (6) years following the last transaction for legal and tax compliance purposes, and marketing data will be retained until consent is withdrawn.
8.3 After expiry of the retention period, personal data will be securely deleted, anonymised or archived in accordance with internal procedures.

9. SHARING PERSONAL DATA WITH THIRD PARTIES
9.1 HU London LTD may share personal data with third parties solely for the purposes outlined in this policy and subject to strict confidentiality obligations.
9.2 Categories of third parties include:
9.2.1 Payment processors (PayPal, Stripe, Apple Pay);
9.2.2 Delivery companies (EVRI);
9.2.3 IT service providers, hosting and data storage partners;
9.2.4 Public authorities when disclosure is required by law;
9.2.5 Marketing and analytics partners such as Google, Meta and TikTok Ads, based on consent.
9.3 All third-party processors are bound by contractual agreements ensuring compliance with the UK GDPR.
9.4 HU London LTD does not sell, rent or lease personal data to any third party for commercial gain.

10. INTERNATIONAL DATA TRANSFERS
10.1 If personal data is transferred outside the United Kingdom (for example, to servers or service providers in the EU or the United States), such transfers are protected by lawful mechanisms recognised under UK law, including adequacy decisions or Standard Contractual Clauses.
10.2 All international data transfers comply fully with the requirements of the UK GDPR and the guidance of the Information Commissioner’s Office (ICO).

11. DATA SECURITY
11.1 HU London LTD applies appropriate technical and organisational measures to prevent unauthorised access, loss, alteration, disclosure or destruction of personal data.
11.2 Security measures include encrypted SSL communications, secure authentication, access control, IT monitoring, staff confidentiality training and data minimisation.
11.3 In the event of a personal data breach, HU London LTD will notify the competent authorities and affected individuals in accordance with UK GDPR requirements.

12. RIGHTS OF DATA SUBJECTS
12.1 Under the UK GDPR, Customers have the following rights:
12.1.1 The right of access to personal data held by the Company.
12.1.2 The right to rectification of inaccurate or incomplete data.
12.1.3 The right to erasure (“right to be forgotten”) within legal limits.
12.1.4 The right to restrict processing under specific circumstances.
12.1.5 The right to data portability to another controller.
12.1.6 The right to object to processing based on legitimate interests or direct marketing.
12.1.7 The right to lodge a complaint with the Information Commissioner’s Office (ICO).
12.2 To exercise any of these rights, the Customer may submit a written request by email to contact@hu-london.co.uk or by post to the registered address. The Company may request identity verification before processing a request.
12.3 HU London LTD will respond to all valid requests within 30 working days, extendable where legally justified.

13. MARKETING AND COMMERCIAL COMMUNICATIONS
13.1 HU London LTD sends commercial communications only to customers who have explicitly consented or who have an existing commercial relationship with the Company.
13.2 The Customer may unsubscribe at any time by using the link included in emails or by notifying the Company directly.
13.3 HU London LTD may use aggregated and anonymised data for statistical and analytical marketing purposes without identifying any individual.

14. PROTECTION OF MINORS
14.1 HU London LTD does not knowingly collect personal data from individuals under the age of 18.
14.2 Should such data be inadvertently collected, it will be deleted immediately upon discovery.

15. CHANGES TO THIS PRIVACY POLICY
15.1 HU London LTD reserves the right to amend this Privacy Policy at any time.
15.2 Updates become effective upon publication on the website.
15.3 In case of substantial changes, HU London LTD will inform customers via email or through a prominent notice on the website.

16. LIABILITY AND LIMITATIONS
16.1 HU London LTD is not liable for damages resulting from unauthorised use or disclosure of personal data by third parties beyond its control.
16.2 While the Company takes all reasonable precautions to secure data, it cannot guarantee absolute internet security.
16.3 Any fraudulent, abusive or malicious attempt to request deletion, access or modification of data may result in civil or criminal liability.

17. DATA PROTECTION CONTACT INFORMATION
17.1 For all questions or requests related to data protection, Customers may contact:
HU London LTD
17 Torver Road, Harrow, London, HA1 1TQ
Email: contact@hu-london.co.uk
17.2 The Company will acknowledge receipt of the request within five (5) working days and respond fully within the legally required timeframe.

18. GOVERNING LAW AND JURISDICTION
18.1 This Privacy Policy shall be governed by and interpreted in accordance with the laws of England and Wales.
18.2 Any dispute arising out of or related to data protection or this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.

19. FINAL STATEMENT
19.1 By using the website www.hu-london.co.uk or by providing personal data, the Customer confirms they have read, understood and accepted this Privacy Policy in full.
19.2 HU London LTD reserves all legal rights of defence in the event of false, abusive or unfounded claims regarding data protection or privacy breaches.