We currently collect and process the following information/data categories:

• Identity includes information such as: first name, last name, title, date of birth (optional)
• Contact includes information such as: email address, billing address, delivery address, location, country, telephone number
• Financial includes information such as: payment card details and bank account
• Transaction includes information such as: details of your purchases and the fulfilment of your orders (such as basket number, order number, subtotal, title, currency, discounts, shipping, number of items, product number, single item price, category, tax etc.); payments to and from you and details of other products and services you have obtained from us, correspondence or communications with you in respect of your orders
• Technical includes information such as: details of the device(s) you use to access our services, your internet protocol (IP) address, login data, your username and password, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
• Usage includes information such as: how and when you use our website/app, how you moved around it, what you searched for; website/app performance statistics, traffic, location, weblogs and other communication data
• Marketing and Communications includes information such as: your preferences in receiving marketing from us and our third parties and your communication preferences.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• To process and deliver your order, and manage after-sale processes
• To manage website personalisation and provide the best on-site experience
• To improve our website performance and debug issues by analysing and testing user behaviour
• To deliver the most relevant content for you

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

1. Your consent. You are able to remove your consent at any time. You can do this by contacting info@haniya.co.uk
2. We have a contractual obligation.
3. We have a legal obligation.
4. We have a vital interest.
5. We need it to perform a public task.
6. We have a legitimate interest.

How we store your personal information

Your information is securely stored in our CRM and Order Management Systems, as well as in our cloud-based infrastructure. We keep your personal information for 2 years.

We will then dispose your information by securely deleting all data

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at info@haniya.co.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at info@haniya.co.uk