PRIVACY POLICY

www.hanm.co

Effective date: 1^st March 2024

1. Introduction

Welcome to the Privacy Policy of www.hanm.co. This document is a critical part of our commitment to respect and protect the privacy of all individuals who interact with our website, services, and products. It outlines the types of personal information we collect, how we use this information, the circumstances under which we may share it with third parties, and the measures we take to ensure its security.

Our practices are designed to comply with the General Data Protection Regulation (GDPR) of the European Union, the Data Protection Act of the UK, and other relevant privacy laws. By accessing our website and using our services, you acknowledge that you have read and understood this privacy policy and agree to its terms.

2. Definitions

For the purposes of this Privacy Policy:

• "Personal Information" refers to any information relating to an identified or identifiable individual. This includes, but is not limited to, names, addresses, email addresses, and payment information.
• "Processing" encompasses any operation performed on personal information, whether automated or not, such as collection, use, storage, disclosure, and deletion.
• "Data Controller" refers to the organization that determines the purposes and means of processing personal information.
• "Data Processor" is any entity that processes personal data on behalf of the Data Controller.
• "Data Subject" means any living individual who is the subject of personal information.
• "Consent" of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes.

3. Scope

This Privacy Policy applies to all personal information collected by us from users of our website, customers who use our services, and any other individual whose personal information we may process as part of our business operations. It covers information collected online and offline, including information collected through our website, social media pages, customer service interactions, and marketing activities.

4. Data Controller Information

The Data Controller responsible for your personal information is House of Hānm Ltd, with its registered office located at Suite 412, Gilmoora House, 57-61 Mortimer St, Fitzrovia, London W1W 8HS, United Kingdom. As the Data Controller, we are committed to protecting your personal information and ensuring its privacy, accuracy, and security.

5. Legal Basis for Processing

We process your personal information based on several legal bases, including:

• Consent: We may process your data if you have given us explicit consent to use your personal information for a specific purpose.
• Contractual Necessity: We may process personal information where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
• Legal Obligation: We may process personal information where it is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: We may process information when it is necessary for the purposes of the legitimate interests pursued by us or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

6. Personal Information Collected

We collect various types of personal information, including but not limited to:

• Device Information: When you visit our website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device.
• Order Information: When you make a purchase or attempt to make a purchase through our site, we collect information from you, including your name, billing address, shipping address, payment information, email address, and phone number. This information is collected to provide and improve our services, process your transactions, communicate with you, and for advertising and marketing purposes.

7. Collection Methods

We collect personal information through several methods:

• Direct Interactions: You may provide us with your personal information by filling in forms on our website, communicating with us by post, phone, email, or otherwise. This includes information you provide when you create an account, subscribe to our service, or give us feedback.
• Automated Technologies or Interactions: As you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
• Third Parties or Publicly Available Sources: We may receive personal information about you from various third parties, including analytics providers, advertising networks, and search information providers.

8. Purpose of Collection

We collect personal information for several purposes, aimed at enhancing our services and ensuring a seamless user experience on our website. The purposes include:

• Order Processing: To fulfill, manage, and communicate with you about orders placed on our website, including payment processing and delivery arrangements.
• Customer Support: To provide customer service and support, respond to inquiries, and resolve any issues that may arise with the use of our services.
• Personalization: To tailor your experience on our website, such as recommending products or services that match your preferences, and to remember your preferences for future visits.
• Security and Fraud Prevention: To monitor and analyze our website's usage to prevent, detect, and investigate fraudulent or illegal activities and ensure the security of our website and its users.
• Marketing and Communications: Subject to your consent, to send you promotional messages, marketing, advertising, and other information that may be of interest to you.
• Website Improvement and Optimization: To analyze how our website is accessed and used, with the aim of improving its functionality, design, and the services we offer.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

9. Use of Personal Information

The collected personal information is utilized in a manner that aligns with the purposes outlined above. Specifically, we use this information to:

• Execute and manage your orders, including processing payments, arranging shipping, and providing invoices and confirmations.
• Enhance the security of our website, including fraud monitoring and prevention.
• Improve our website's performance and your user experience through analytics and site optimization tools.
• Communicate with you about our services, including customer support, and, where applicable, send you marketing communications.
• Comply with legal obligations, such as tax and regulatory requirements, and respond to legal processes.

10. Consent

Upon visiting our website or when you provide us with your personal information for specific purposes, we seek your consent to collect, use, and disclose your information as described in this privacy policy. Your consent is provided in a clear and affirmative manner, such as ticking a checkbox, choosing settings or options that indicate consent, or through other actions that imply consent in the context of the service being used.

You have the right to withdraw your consent at any time by contacting us using the details provided in the contact section of this policy. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you, including to serve interest-based advertising. Specific technologies we use include:

• Cookies: Small data files stored on your device that help us improve our website and your experience, understand how our website is used, and tailor advertising to your interests.
• Log Files: Collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• Web Beacons, Tags, and Pixels: Electronic files used to record information about how you browse our site.

You can manage your preferences and opt-out of certain cookies using your browser settings. For more information on how to do this, visit the help pages of your browser. Please note, disabling cookies may affect the functionality of our website and your user experience.

12. Data Sharing and Disclosure

We may share your Personal Information with third parties under the following conditions:

• Service Providers: To third-party companies and individuals who facilitate our website, perform website-related services, or assist us in analyzing how our website is used. These service providers have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Legal Requirements: If required by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company, your Personal Information may be transferred among the transferred assets.
• With Your Consent: Apart from the cases above, you will receive notice when your Personal Information might be shared with third parties, and you will have the opportunity to choose not to share your information.

13. Third-Party Service Providers

Our website utilizes various third-party services to operate effectively and provide you with the best possible experience. These include payment processing, delivery logistics, website analytics, and marketing and advertising services. We ensure these third parties adhere to strict data protection and privacy practices that align with our privacy policy and the requirements of GDPR and UK law. Detailed information on how these third parties process your Personal Information can typically be found in their respective privacy policies.

14. Advertising and Marketing

We use your Personal Information to form targeted advertising campaigns and marketing communications we believe may be of interest to you. These activities are conducted through various digital platforms including but not limited to:

• Facebook: We utilize Facebook advertising to deliver targeted advertisements based on your browsing behavior and preferences.
• Google Ads: Our campaigns on Google Ads allow us to present you with relevant advertisements across Google's network of websites.
• Instagram: We leverage Instagram to target ads that are tailored to your interests and online activities.

For these purposes, we may share a limited amount of your personal data with these platforms to match our customer base with the users of these services. This process is conducted in a secure manner, with respect to your privacy rights and in compliance with our legal obligations.

15. International Transfers

To provide our services and fulfill our contractual obligations to you, it may be necessary to transfer your data to countries outside the European Economic Area (EEA), including to countries that may not offer the same level of protection for your personal data as within the EEA. In such cases, we ensure that:

• The transfer is to a country deemed to provide an adequate level of protection by the European Commission; or
• Standard contractual clauses approved by the European Commission are in place with the data recipient to protect your personal data.

We take all reasonable precautions to ensure that your data is treated securely and in accordance with this privacy policy during international transfers.

16. Data Security

We take the security of your Personal Information seriously and implement appropriate technical and organizational measures to protect it against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include but are not limited to:

• Encryption of data in transit and at rest.
• Regular cybersecurity assessments and implementation of security best practices.
• Limiting access to your personal data to employees, agents, and third parties who have a business need to know.

Despite our efforts, no security measures are completely impenetrable, and we cannot guarantee the security of your data transmitted to our site via the internet.

17. Data Retention

We will retain your Personal Information only for as long as is necessary for the purposes set out in this privacy policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

18. Your Rights

Under GDPR and UK data protection laws, you have rights in relation to your personal data, including:

• The right to access your personal data and to receive a copy of it.
• The right to rectification if your personal data is inaccurate or incomplete.
• The right to erasure ('right to be forgotten') under certain conditions.
• The right to restrict processing of your personal data under certain conditions.
• The right to data portability which allows you to obtain and reuse your personal data for your own purposes across different services.
• The right to object to the processing of your personal data under certain conditions, including for direct marketing.

19. Exercising Your Rights

To exercise any of your rights as described in this privacy policy, please contact us using the contact details provided at the end of this policy. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

20. Do Not Track Signals

Our website does not alter its data collection and use practices when we detect a Do Not Track signal from your browser. We will continue to comply with this privacy policy in how we treat your information, regardless of Do Not Track signals.

21. Minors

The website is not intended for individuals under the age of 16. We do not knowingly collect personal data from minors. If you are under 16, please do not provide any personal information through our website. If we become aware that we have collected personal data from a minor without verification of parental consent, we take steps to remove that information from our servers.

22. Changes to the Privacy Policy

We may update our privacy policy from time to time in response to legal, technical, or business developments. When we update our privacy policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material privacy policy changes if and where this is required by applicable data protection laws.

You are encouraged to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page. The “effective date” at the top of this privacy policy reflects the date of the latest changes.

23. Complaints

If you have any concerns or complaints about how we handle your personal data, we encourage you to contact us first, and we will do our best to resolve your issue. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK’s supervisory authority for data protection issues (www.ico.org.uk), or with your local data protection authority if you are in the EEA.

24. Contact Information

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@hanm.co, or by mail using the details provided below:

House of Hānm Ltd.

[Re: Privacy Compliance Officer]

Suite 412, Gilmoora House, 57-61 Mortimer St, Fitzrovia,

London W1W 8HS, UK.

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.

25. Effective Date

This privacy policy is effective as of 1st March 2024, and supersedes any previous versions. This date may be updated to reflect the latest changes to our privacy practices.

26. No Third-Party Beneficiaries

These T&Cs are for the benefit of HĀNM and you only and do not confer any rights or benefits on any third party.

27. Survival

Certain provisions of these T&Cs, such as those relating to intellectual property, warranties, disclaimers, and limitations of liability, are intended to survive termination of these T&Cs and will remain in effect.

28. Social Media

HĀNM encourages you to engage with us on social media. However, you are solely responsible for your conduct and content posted on HĀNM's social media pages. You agree to comply with HĀNM's social media guidelines and refrain from posting any offensive, defamatory, or hateful content.

29. User Data and Privacy

HĀNM respects your privacy and is committed to protecting your personal information. Our Privacy Policy explains how we collect, use, and disclose your information. Please review our Privacy Policy to understand how we handle your data.

30. Contact Information

If you have any questions about these T&Cs or your use of the Website, please contact us at info@hanm.co.