1. Introduction

This Privacy Policy explains how HUPI LIMITED trading as Hupi.uk (“we,” “us,” or “our”) collects, uses, and protects your personal data when you visit and make a purchase from our website, Hupi.uk.

We are a “data controller” under the UK GDPR and the Data Protection Act 2018. This means we are responsible for deciding how we hold and use your personal information. Our registered address is:

13 Freeland Park, Wareham Road, Poole, BH16 6FA, Dorset, UK.

Our email address for data protection queries is: [email protected].

We are registered with the Information Commissioner’s Office (ICO) under registration number: [Your ICO Registration Number, if applicable].

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you. This includes:

  • Identity Data: First name, last name, title.
  • Contact Data: Billing address, delivery address, email address, and telephone numbers.
  • Financial Data: Payment card details (we do not store full payment card details; these are securely processed by our payment provider, [e.g., Stripe, PayPal]).
  • Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Profile Data: Your username and password (if you create an account), your purchases or orders, and your preferences.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).

3. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

  • Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
    • Place an order for our products.
    • Create an account on our website.
    • Subscribe to our newsletter or other marketing communications.
    • Contact our customer service team.
  • Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies and other similar technologies. Please see our separate Cookie Policy for more details.
  • Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties, such as:
    • Technical Data from analytics providers (e.g., Google Analytics).
    • Contact and Financial Data from payment and delivery services (e.g., [Name of Payment Provider], [Name of Courier Service]).

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To fulfill a contract with you: This includes processing and delivering your order, managing payments, and providing customer support related to your purchase. This is our primary legal basis for processing your Identity, Contact, Financial, and Transaction Data.
  • Where it is necessary for our legitimate interests: This includes improving our website, products, and services, marketing to you, and ensuring the security of our website. We will always consider your rights and freedoms before using your data for these purposes.
  • To comply with a legal obligation: This includes keeping records for tax and accounting purposes.
  • Where we have your consent: We will only rely on consent for certain marketing activities, such as sending you our newsletter. You have the right to withdraw your consent at any time by contacting us or by using the unsubscribe link in our emails.

5. Sharing Your Personal Data

We may have to share your personal data with the parties set out below for the purposes described in section 4.

  • Service Providers: We share data with third-party service providers who help us operate our business, such as:
    • Payment processors ([e.g., Stripe, PayPal]) to securely process your payments.
    • Shipping and logistics companies ([e.g., Royal Mail, DPD]) to deliver your orders.
    • IT and system administration services.
    • Website analytics providers (e.g., Google Analytics) to understand website usage.
  • Professional Advisers: We may share data with professional advisers, including lawyers, bankers, auditors, and insurers who provide legal, banking, or accounting services.
  • HM Revenue & Customs, regulators, and other authorities: We may disclose your data to these parties if required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. International Transfers

We may transfer your personal data outside the UK. For example, some of our service providers may be based outside the UK or the European Economic Area (EEA). If we do so, we ensure a similar degree of protection is afforded to your data by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK government.
  • We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We also limit access to your personal data to employees, agents, contractors, and other third parties who have a business need to know.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Generally, we will keep your data for as long as you are a customer and for a period of up to [e.g., 6] years afterwards to ensure we can meet our legal and contractual obligations.

9. Your Legal Rights

Under UK data protection law, you have the following rights in relation to your personal data:

  • The right to be informed: The right to know how your data is being used. This privacy policy fulfills that right.
  • The right of access: The right to ask for a copy of your personal data.
  • The right to rectification: The right to have inaccurate personal data corrected.
  • The right to erasure: The right to have your data deleted. This is also known as the “right to be forgotten.”
  • The right to restrict processing: The right to block or suppress the processing of your personal data.
  • The right to data portability: The right to obtain and reuse your personal data for your own purposes across different services.
  • The right to object: The right to object to the processing of your data in certain circumstances.
  • Rights in relation to automated decision-making and profiling: The right to object to decisions made solely by automated means without any human involvement. We do not currently use automated decision-making or profiling in a way that would have a significant effect on you.

To exercise any of these rights, please contact us at [email protected]. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data.

10. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. You can find their contact details on their website: https://www.ico.org.uk.

11. Changes to this Privacy Policy

We reserve the right to update this privacy policy at any time. We will post the new version on this page and update the “Last Updated” date at the top. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data.