PRIVACY POLICY
Last updated: 20 May 2026
At HANDRA, your privacy matters. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights regarding your information. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. WHO WE ARE
HANDRA ("we", "us", "our") is the data controller responsible for your personal information. You can contact us at any time at support@handra.co.
2. WHAT INFORMATION WE COLLECT
We collect the following categories of personal information:
— Identity information: name, email address, billing and shipping address, phone number
— Transaction information: order details, payment method (we do not store full card details — these are handled securely by our payment processors)
— Technical information: IP address, browser type, device information, cookies and similar tracking technologies
— Marketing information: your preferences for receiving marketing communications and your interactions with our emails, ads, and website
— Customer support information: any messages, emails, or information you provide when contacting our team
3. HOW WE COLLECT YOUR DATA
We collect your information when you:
— Place an order on handra.co
— Create an account or sign up for our newsletter
— Contact us via email or any other channel
— Browse our website (via cookies and analytics)
— Interact with our social media or advertising
4. HOW WE USE YOUR DATA
We use your information for the following purposes:
— To process and fulfil your orders, including shipping, payment, and customer service
— To send order confirmations, shipping updates, and post-purchase communications
— To send marketing emails about new products, offers, and content (only if you've opted in)
— To improve our website, products, and user experience
— To analyse traffic, conversions, and performance via tools like Google Analytics and Meta Pixel
— To prevent fraud and ensure the security of our website
— To comply with legal obligations
5. LEGAL BASIS FOR PROCESSING
We process your personal data on the following legal grounds:
— Contract: to process and deliver your orders
— Legitimate interest: to improve our products, analyse website performance, prevent fraud
— Consent: for marketing emails, non-essential cookies, and targeted advertising
— Legal obligation: to comply with tax, accounting, and consumer protection laws
You may withdraw your consent at any time by contacting support@handra.co or by unsubscribing from our marketing communications.
6. WHO WE SHARE YOUR DATA WITH
We do not sell your personal data. We only share it with trusted third parties when necessary to operate our business:
— Shopify: our e-commerce platform that hosts our website and processes orders
— Klaviyo: our email marketing platform
— Payment processors (Shopify Payments, PayPal, Stripe, etc.) to process transactions securely
— Shipping carriers (Royal Mail, Evri, DHL, etc.) to deliver your orders
— Meta (Facebook/Instagram) and Google: for advertising performance, audience measurement, and conversion tracking
— Customer support tools: to manage your inquiries
All third parties we work with are GDPR-compliant and contractually bound to protect your data.
7. COOKIES AND TRACKING
We use cookies and similar technologies to enhance your experience, analyse traffic, and personalise advertising. You can manage your cookie preferences at any time via our cookie banner or your browser settings.
We use the following types of cookies:
— Essential cookies (required for the website to function)
— Analytics cookies (Google Analytics, etc.)
— Marketing cookies (Meta Pixel, TikTok Pixel, Google Ads)
8. DATA RETENTION
We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations. Order and transaction records are typically retained for 6 years for accounting and tax compliance.
You may request deletion of your personal data at any time by contacting support@handra.co (subject to legal retention requirements).
9. YOUR RIGHTS
Under UK GDPR, you have the following rights regarding your personal data:
— Right of access: request a copy of the data we hold about you
— Right to rectification: request correction of inaccurate data
— Right to erasure: request deletion of your data ("right to be forgotten")
— Right to restriction: limit how we process your data
— Right to data portability: receive your data in a structured format
— Right to object: object to processing for direct marketing or legitimate interest
— Right to withdraw consent: at any time, where processing is based on consent
To exercise any of these rights, contact us at support@handra.co. We'll respond within 30 days.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data is being mishandled.
10. INTERNATIONAL TRANSFERS
Some of our service providers may be based outside the UK or EU. When we transfer your data internationally, we ensure adequate safeguards are in place (such as Standard Contractual Clauses) to protect your information in accordance with UK GDPR.
11. SECURITY
We implement industry-standard security measures (SSL encryption, secure payment gateways, restricted access controls) to protect your personal information. While no method of transmission over the internet is 100% secure, we are committed to safeguarding your data to the best of our ability.
12. CHILDREN'S PRIVACY
Our website and products are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we've inadvertently collected data from a minor, we will delete it immediately.
13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Updates will be posted on this page with a revised "Last updated" date.
14. CONTACT
For any questions about this Privacy Policy or to exercise your data rights, reach us at:
support@handra.co
We reply within 1 working day, Monday to Friday.