Privacy policy

1. Who We Are

Gunda Hafner Ltd

Email: info@gundahafner.com

We are the “data controller” responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. Information We Collect

We collect and process the following information to provide our services:

  • Personal details such as your name, billing and delivery address, phone number, and email.
  • Payment information (processed securely by our payment providers — we do not store card details).
  • Account information (if you create one).
  • Communications you send to us (e.g. customer service emails).
  • Website usage data through cookies and analytics tools.

3. How We Use Your Information

We use your personal information to:

  • Process and deliver your orders.
  • Communicate with you about your order, returns, or queries.
  • Send you marketing emails (only if you’ve opted in).
  • Improve our website and customer experience.
  • Comply with legal and tax obligations.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: to fulfil your order and deliver goods or services.
  • Consent: when you subscribe to our newsletter or accept cookies.
  • Legal obligation: to comply with record-keeping and tax laws.
  • Legitimate interests: to improve our website and services.

5. Sharing Your Information

We only share your information where necessary to fulfil your order or run our business, including:

  • Shopify – e-commerce platform (see Shopify Privacy Policy)
  • Payment processors such as Shopify Payments, PayPal, or Stripe (for secure payments)
  • Delivery couriers for order shipping
  • Google Analytics – for anonymous website usage tracking

We never sell or rent your personal data to third parties.

6. Data Retention

We keep your personal data only as long as necessary to fulfil the purposes above:

  • Order data: retained for up to 7 years for tax and accounting compliance.
  • Marketing data: until you unsubscribe or request deletion.
  • Analytics data: kept anonymously for performance monitoring.

7. Your Rights

Under data protection law, you have the right to:

  • Access a copy of the personal data we hold about you.
  • Correct or update your information.
  • Request deletion (“right to be forgotten”).
  • Object to processing for marketing purposes.
  • Withdraw consent at any time.

To exercise your rights, contact us at info@gundahafner.com.

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

 

8. Cookies

What Are Cookies

Cookies are small text files placed on your device to help websites operate efficiently and provide useful information to site owners. They help us improve your experience by remembering preferences and understanding how you use our site.

Cookie Preferences

You can choose to accept or decline cookies. Most browsers accept them automatically, but you can change your settings at any time. Declining cookies may affect some site functions.

What Cookies We Use

Cookie Duration

Session cookies expire when you leave the site.

Persistent cookies remain on your device for up to 2 years, depending on browser settings.

 

9. Security

We use SSL encryption and secure servers to protect your data.

Access to your information is restricted to authorised staff and service providers only.

While we take all reasonable measures, no online transmission can be 100% secure, and we cannot guarantee absolute security.

 

10. Updates to This Policy

We may update this Privacy & Cookie Policy periodically to reflect operational, legal, or regulatory changes.

The latest version will always be available on this page.Last updated: October 2025