Privacy policy

Privacy Policy

Last updated: 5 September 2026

Halvane Living Ltd, trading as Halvane Living (“we”, “us” or “our”), operates this website and online store. We are the controller of the personal information we process for the purposes described in this policy, except where another organisation acts as an independent controller.

Our store is powered by Shopify. This policy explains what personal information we collect, why we use it, who we share it with and your rights.

Using our website does not, by itself, constitute consent to optional cookies, advertising measurement or marketing communications.

1. Personal information we collect

Depending on how you interact with us, we may collect:

  • Contact information: your name, email address, telephone number, billing address and delivery address.
  • Order information: products purchased, order value, delivery instructions, payment status, returns, refunds and cancellations.
  • Payment information: information needed to process payments. Payment providers process your payment credentials; we receive the transaction details needed to manage your order.
  • Account information: information you provide when creating or using a customer account, where available.
  • Communications: enquiries, support requests, feedback and correspondence with us.
  • Technical and usage information: your IP address, browser, device information and interactions with our website.
  • Preferences: your cookie choices, marketing preferences and records of consent.

We collect information directly from you, automatically through our website where permitted, and from service providers involved in payments, hosting, delivery, fraud prevention and other store operations.

2. How and why we use your information

Orders and customer service

We use your information to process payments, fulfil orders, arrange delivery, provide order updates, answer enquiries and handle returns, refunds and warranty requests.

Our legal basis is performing our contract with you or taking steps at your request before entering into a contract.

Business administration and legal obligations

We use information to maintain financial records, meet tax and accounting requirements and respond to lawful requests from authorities.

Our legal basis is compliance with legal obligations.

Security and fraud prevention

We use information to protect our website, investigate suspected fraud, resolve disputes and establish or defend legal claims.

Our legal basis is our legitimate interest in operating a secure business and protecting customers, or compliance with legal obligations where applicable. We consider your rights when relying on legitimate interests.

Website functionality and improvement

We use information to operate and maintain the website, remember necessary preferences and identify technical problems.

We rely on our legitimate interests for necessary website administration. Where consent is required for optional cookies or similar technologies, we obtain it before using them.

Marketing communications

We may send marketing communications where you have consented or where a relevant legal exception permits us to do so. Where we rely on the existing-customer exception for email marketing, we offer an opportunity to opt out when collecting your details and in subsequent messages.

You can unsubscribe using the link in our marketing emails or contact us. Opting out of marketing does not stop essential communications about your orders.

Google Ads measurement

Where you consent to advertising measurement, we use Google Ads conversion tracking and enhanced conversions to understand whether our advertisements lead to purchases.

We share information about purchases and hashed customer details, such as your email address, with Google to match purchases to interactions with our advertisements. Hashing protects the information during matching but does not make it anonymous.

Google processes this information under its applicable data protection terms. Our legal basis for this consent-dependent processing is your consent.

You can refuse or withdraw your consent through our website’s cookie preferences. Withdrawal does not affect processing that lawfully occurred before you withdrew consent.

Learn more about Google’s use of information at:

https://business.safety.google/privacy/

3. Cookies and similar technologies

Our website uses cookies and similar technologies.

  • Required technologies support essential functions such as basket management, checkout, security and remembering privacy choices.
  • Optional technologies may support analytics, personalisation and advertising measurement.

Where consent is required, optional technologies are used only with your consent. You can accept, decline or manage optional categories through our cookie banner and revisit your choices through the website’s cookie-preferences control.

Refusing optional cookies does not prevent you from placing an order.

Your browser may also allow you to block or delete cookies. Blocking required cookies can affect website functionality.

4. Who we share information with

We share information where necessary with:

  • Shopify, which provides our ecommerce platform and related services.
  • Payment providers, to process payments, refunds and fraud checks.
  • Suppliers and manufacturers, to fulfil orders, arrange direct delivery and support returns or warranty requests.
  • Couriers and logistics providers, to deliver products and communicate about delivery.
  • Technology and service providers, supporting hosting, customer service, email, security and business administration.
  • Advertising and measurement providers, including Google, subject to applicable consent requirements.
  • Professional advisers, such as accountants, insurers and legal advisers.
  • Authorities or other parties, where disclosure is legally required or necessary to protect rights and investigate unlawful activity.

For supplier-direct orders, we share the customer and order details reasonably needed to fulfil the purchase, such as your name, delivery address, contact details and delivery instructions.

We may also disclose information in connection with a proposed sale, restructuring or transfer of our business, subject to appropriate safeguards.

Some recipients act on our instructions. Others, such as certain payment providers, may act as independent controllers and process information under their own privacy notices.

5. Shopify

Shopify collects and processes information to provide and support our store. Depending on the service and circumstances, Shopify may process information on our behalf or act as an independent controller.

You can read more about Shopify’s privacy practices and exercise rights relating to information it controls at:

https://www.shopify.com/legal/privacy/consumers

https://privacy.shopify.com/en

6. International transfers

Our service providers may process personal information outside the United Kingdom.

Where required, we use recognised safeguards for international transfers. These may include applicable adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses. For transfers subject to EEA rules, we use the relevant EEA safeguards.

You can contact us for more information about safeguards relevant to your information.

7. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

Retention periods depend on the type of information, the duration of our relationship with you, applicable accounting and legal requirements, warranty obligations and the need to resolve disputes.

We may retain a limited record of an unsubscribe request to ensure we continue to respect your marketing preferences.

When information is no longer needed, we delete it or anonymise it, subject to applicable requirements.

8. Keeping information secure

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

No website, transmission method or storage system is completely secure. Please do not send passwords or full payment-card details by email or through our contact form.

9. Your rights

Depending on your location and the circumstances, you may have the right to:

  • Request access to your personal information.
  • Ask us to correct inaccurate or incomplete information.
  • Request deletion of your information.
  • Request restriction of processing.
  • Receive certain information in a portable format.
  • Object to processing based on legitimate interests.
  • Object to the use of your information for direct marketing.
  • Withdraw consent where processing relies on consent.

These rights are subject to applicable legal conditions and exceptions.

To make a request, contact us using the details below. We may need to verify your identity. We normally respond within one month, although the law permits extensions in some circumstances.

You do not normally need to pay a fee to exercise your rights.

10. Complaints

Please contact us if you have concerns about how we handle your information.

You also have the right to complain to the UK Information Commissioner’s Office:

https://ico.org.uk/make-a-complaint/

If you are in the EEA, you may complain to your local data protection supervisory authority.

11. Children

Our store is intended for adults. We do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.

12. Links to other websites

Our website may link to third-party websites. Those organisations are responsible for their own privacy practices. Please review their privacy notices before providing information to them.

13. Changes to this policy

We may update this policy to reflect changes to our services, data practices or legal requirements.

We will publish the revised version on this page and update the date above. Where required, we will provide further notice or request fresh consent.

14. Contact us

The controller responsible for the processing described in this policy is Halvane Living Ltd, trading as Halvane Living.

Email: contact@halvaneliving.co.uk

Postal address: UNIT A, 82 JAMES CARTER ROAD, MILDENHALL, IP28 7DE

This address is for correspondence only, NOT product returns. Please contact us before returning any item so we can provide the appropriate return instructions.