Privacy Policy

Privacy Policy

Last updated: July 2026

HARLEN (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or make a purchase, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

HARLEN is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at hello@harlen.co.uk.

What Data We Collect

We may collect and process the following personal data:

  • Identity data: name, username or similar identifier
  • Contact data: billing address, delivery address, email address, telephone number
  • Financial data: payment card details (processed securely via our payment provider — we do not store full card details)
  • Transaction data: details of products purchased and payments made
  • Technical data: IP address, browser type and version, time zone, operating system
  • Usage data: information about how you use our website
  • Marketing data: your preferences in receiving marketing from us

How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders
  • To manage your account and relationship with us
  • To send you order confirmations and shipping updates
  • To comply with legal obligations
  • To improve our website and customer experience
  • To send you marketing communications where you have opted in

Legal Basis for Processing

We process your data on the following legal bases:

  • Contract: processing necessary to fulfil your order
  • Legal obligation: where we are required to comply with the law
  • Legitimate interests: to improve our services and prevent fraud
  • Consent: for marketing communications (you may withdraw consent at any time)

Data Sharing

We do not sell your personal data. We may share your data with trusted third parties who assist us in operating our business, including:

  • Payment processors (e.g. Shopify Payments, Stripe)
  • Delivery and logistics partners
  • IT and system administration providers

All third parties are required to respect the security of your data and to treat it in accordance with the law.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order data is typically retained for 7 years in line with HMRC requirements.

Your Rights

Under UK GDPR, you have the following rights:

  • The right to access your personal data
  • The right to rectification of inaccurate data
  • The right to erasure (“right to be forgotten”)
  • The right to restrict processing
  • The right to data portability
  • The right to object to processing
  • Rights in relation to automated decision-making

To exercise any of these rights, please contact us at hello@harlen.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

Our website uses cookies to improve your browsing experience. You can control cookie settings through your browser. For more information, please see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.