Privacy policy
Effective Date: 25 September 2026
Last Updated: 27 October 2026
1. Introduction
Welcome to Hanexo ("Hanexo", "we", "us" or "our"). Hanexo is a trading name of HANEXO LTD (company number 17456301), and "we", "us" and "our" mean HANEXO LTD.
We respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, browse our products, place an order, create an account, contact us or otherwise interact with our services.
Our website is available at https://hanexo.co.uk/ and is operated using the Shopify ecommerce platform.
We serve customers in the United Kingdom.
We process personal information in accordance with applicable data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website, you acknowledge that your personal information will be handled as described in this policy. Where consent is legally required, we will request it separately.
2. Who We Are
HANEXO LTD is responsible for determining the purposes and means of processing personal information for our own business activities and is the data controller for that processing under applicable UK data protection law.
Business Name: Hanexo
Registered Company Name: HANEXO LTD
Company Number: 17456301
Registered Office and Business Address:
Flat 3 Newton Mount
Abbey Road
Rhos On Sea
Colwyn Bay
LL28 4NP
Wales
United Kingdom
Website: https://hanexo.co.uk/
Email: hanexo.limited@gmail.com
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using the information above.
Shopify and certain other service providers may act as processors, independent controllers or joint controllers for particular processing activities, depending on the service and circumstances.
3. Personal Information We Collect
We may collect personal information directly from you, automatically through your use of our website, or from third parties involved in providing our services.
Personal and Contact Information
When you place an order, register an account, contact us or submit information through our website, we may collect your name, email address, telephone number, billing address, delivery address and other information you voluntarily provide.
Order and Transaction Information
We may collect information about the products you purchase, quantities, prices, order numbers, delivery details, transaction status, refunds, returns, exchanges and customer service history.
Payment Information
When you make a purchase, payment information is processed through Shopify-supported payment services, including Shopify Payments where available.
Depending on the payment method, payment providers may process card information, payment authentication details, billing information and transaction identifiers.
HANEXO LTD does not ordinarily receive or store complete payment card numbers or card security codes in its own business systems.
We may receive limited payment-related information necessary to verify orders, identify transactions, prevent fraud and process refunds.
Customer Account Information
If you create or use a customer account, we may process your account details, purchase history, contact information, preferences and account activity.
Customer Communications
When you contact us by email, through our website or through another customer support channel, we may retain your messages and relevant information required to respond to your enquiry.
Device and Technical Information
When you access our website, certain technical information may be collected automatically, including your IP address, browser type, device type, operating system, language preferences, approximate location inferred from technical information, referring website and website activity.
Cookies and Similar Technologies
Depending on your cookie preferences and our website configuration, we may collect information through cookies, pixels, tags and similar technologies.
These technologies may help operate the website, remember preferences, measure performance, understand customer interactions and support advertising where enabled.
4. How We Use Your Personal Information
We process personal information for legitimate and lawful business purposes.
Order Processing and Fulfilment
We use relevant personal information to process orders, confirm purchases, collect payments, prepare products for dispatch, arrange delivery and provide order updates.
Customer Service
We use contact details, order information and communications to respond to enquiries, resolve issues, manage returns and provide customer assistance.
Payment Processing and Fraud Prevention
We process relevant transaction and technical information to facilitate payments, verify transactions, investigate suspicious activity, prevent fraud and protect customers and our business.
Website Operation and Improvement
We may use website usage information to maintain functionality, identify technical problems, improve navigation, evaluate performance and enhance our customer experience.
Marketing and Communications
Where permitted by applicable law, we may use contact information and preferences to send promotional messages, product updates or special offers.
We will obtain consent where legally required and provide appropriate unsubscribe or opt-out options.
Legal and Regulatory Compliance
We may process information to comply with accounting, tax, consumer protection, data protection and other applicable legal obligations.
Dispute Resolution and Legal Claims
We may use relevant information to investigate complaints, enforce lawful contractual rights, respond to disputes and establish, exercise or defend legal claims.
5. Legal Bases for Processing — United Kingdom
Under the UK GDPR, we must have a lawful basis for processing personal information.
The lawful basis depends on the nature and purpose of the processing.
Performance of a Contract: We process information where necessary to fulfil purchases, process orders, provide delivery services, manage contractual customer enquiries and perform our obligations to customers.
Legal Obligation: We process information where necessary to comply with applicable laws, including financial recordkeeping, tax obligations and consumer protection requirements.
Legitimate Interests: We may process information where necessary for legitimate business interests, such as preventing fraud, maintaining website security, improving operations and handling legal claims, provided those interests are not overridden by your rights and freedoms.
Consent: We rely on consent where legally required, including for certain marketing communications and non-essential cookies or tracking technologies. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Where applicable, we assess the appropriate lawful basis before processing personal information.
6. Shopify and Ecommerce Services
Our online store is hosted and operated through Shopify.
Shopify provides the ecommerce infrastructure that enables us to display products, manage customer accounts, process orders, facilitate checkout and operate our store.
In providing these services, Shopify may process information such as customer contact details, transaction information, order history, device information and website activity.
Shopify may use affiliated companies, infrastructure providers and authorised subprocessors as described in its applicable documentation.
For more information about Shopify's privacy practices, visit:
https://www.shopify.com/legal/privacy
Where Shopify processes personal information independently for its own purposes, its relevant privacy notices may also apply.
7. Payment Processing and Shopify Payments
We use Shopify-supported payment processing services, including Shopify Payments where available.
Payment providers may collect and process relevant payment information to authorise transactions, verify identity, detect fraud, comply with financial regulations and issue refunds.
Payment processing may involve financial institutions, card networks, anti-fraud providers and other authorised payment partners.
HANEXO LTD generally does not independently store full payment card details in its own systems.
Payments and refunds are subject to applicable payment-provider terms, security requirements and consumer protection laws.
Your payment provider may have a separate privacy policy describing how it processes your financial information.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies for essential website functions and may use additional technologies for analytics, performance measurement and marketing.
Essential Cookies: These support necessary functions such as shopping baskets, checkout, security, session management and website operation.
Functional Cookies: These may remember preferences and support additional website features.
Analytics Cookies: Where enabled, these may help us understand website traffic, browsing activity and how customers interact with our website.
Advertising Cookies: Where enabled, these may help measure advertising performance, understand interactions with advertisements or support personalised advertising.
Under applicable UK privacy and electronic communications rules, we seek consent before storing or accessing information on your device through non-essential cookies or similar technologies, unless an applicable exemption applies.
Where required, you can accept, reject or adjust non-essential cookie preferences through the consent controls provided on our website.
You may also be able to manage cookies through your browser settings.
Disabling certain cookies may affect some website functionality.
For additional information, please refer to any Cookie Policy or cookie preferences controls made available on our website.
9. Marketing Communications
We may contact customers about products, promotions, special offers or other marketing information where permitted by applicable law.
For UK customers, electronic direct marketing is subject to applicable data protection and electronic marketing rules, including the Privacy and Electronic Communications Regulations.
Where consent is required, we will obtain it before sending marketing communications.
Where an applicable existing-customer marketing exception is relied upon, we will comply with its legal conditions, including providing appropriate opt-out opportunities.
You may opt out of promotional emails at any time by selecting the unsubscribe link in the email or contacting:
Unsubscribing from marketing does not prevent necessary transactional communications, including order confirmations, shipping updates, payment notifications and customer service messages.
10. How We Share Personal Information
We may disclose personal information to trusted third parties where necessary to operate our business or where otherwise permitted or required by law.
Shopify and Ecommerce Providers: To operate our online store, manage checkout, support customer accounts and administer orders.
Payment Service Providers: To authorise payments, process transactions, prevent fraud and facilitate refunds.
Delivery and Logistics Providers: To prepare shipments, arrange delivery, provide tracking information and resolve delivery issues.
IT and Hosting Providers: To maintain the security, functionality and reliability of our website and business systems.
Analytics Providers: Where enabled, to help us assess website performance and customer interaction.
AI Shopping Assistant Provider: Our website includes an AI shopping assistant provided by ElevenLabs. Messages you enter into the assistant, together with related technical information, are sent to ElevenLabs so that it can generate responses. Please do not include sensitive personal information in your messages.
Marketing and Advertising Providers: Where enabled and legally permitted, to deliver marketing communications, measure advertising performance and support relevant campaigns.
Professional Advisers: Such as accountants, legal advisers and other professionals where reasonably necessary.
Public Authorities: Where disclosure is required by applicable law, a valid legal process or another lawful obligation.
Business Transactions: In connection with a proposed or completed merger, restructuring, acquisition or transfer of business assets, subject to applicable legal requirements.
We share only the information reasonably necessary for the relevant purpose and apply appropriate safeguards where required.
11. Personal Information Sales, Sharing and Advertising
HANEXO LTD does not offer customer personal information for sale as a standalone commercial product.
Where such activities occur and relevant laws apply, we will provide the required disclosures and mechanisms to exercise applicable opt-out rights.
We will not describe personal information as never being sold or shared for legal purposes unless that statement accurately reflects our actual data-processing activities.
12. International Data Transfers
HANEXO LTD is based in the United Kingdom.
Our ecommerce platform, payment processors and other service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred from the UK to a country that does not benefit from applicable UK adequacy regulations, we will take steps required by UK data protection law.
Depending on the circumstances, these may include the use of appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, together with supplementary measures where necessary.
International transfers will be assessed in accordance with applicable data protection requirements.
13. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Order and Transaction Records: Retained as necessary for order fulfilment, accounting, taxation, refunds, disputes and other applicable legal obligations.
Customer Account Information: Retained while necessary to provide account services and thereafter where a legitimate purpose or legal obligation requires continued retention.
Customer Support Communications: Retained for a reasonable period to manage enquiries, complaints and related business records.
Marketing Information: Retained while relevant permissions or lawful marketing grounds remain applicable, subject to withdrawal, objection and other legal requirements.
Technical and Security Information: Retained for periods proportionate to security, fraud prevention and operational requirements.
Retention decisions take account of applicable laws, the nature and sensitivity of the information, the purposes of processing and the risks associated with continued storage.
When information is no longer required, we will delete, anonymise or otherwise securely dispose of it, subject to any lawful retention obligations.
14. Data Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, misuse, accidental loss, alteration and unlawful disclosure.
These measures may include appropriate access controls, secure service providers, account protections and other safeguards proportionate to the information being processed.
Our ecommerce operations also benefit from security measures maintained by Shopify and relevant payment processing providers.
However, no website, electronic communication system or storage method can be guaranteed to be completely secure.
If we become aware of a personal data breach, we will assess the incident and provide notifications to regulators or affected individuals where required by applicable law.
15. Your Privacy Rights — United Kingdom
If you are covered by UK data protection law, you may have the following rights, subject to applicable conditions and exemptions.
Right of Access: You may request confirmation of whether we process your personal information and obtain access to relevant information.
Right to Rectification: You may request correction of inaccurate personal information or completion of incomplete information.
Right to Erasure: You may request deletion of personal information in circumstances where the law provides this right.
Right to Restrict Processing: You may request that we limit certain processing activities where the applicable conditions are met.
Right to Data Portability: You may request certain information in a structured, commonly used and machine-readable format where this right applies.
Right to Object: You may object to processing based on legitimate interests in relevant circumstances. You also have the right to object to processing for direct marketing purposes.
Right to Withdraw Consent: Where processing relies on consent, you may withdraw that consent at any time.
Rights Relating to Automated Decisions: Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise your rights, please contact:
We may request reasonable information to verify your identity before responding to certain requests.
We will respond within the time limits required by applicable law. Under the UK GDPR, the normal response period is one month, subject to lawful extensions in appropriate circumstances.
Requests are generally handled without charge, although limited exceptions may apply under the law.
16. Automated Processing and Fraud Detection
Our ecommerce and payment systems may use automated tools to identify suspicious transactions, assess payment risks, maintain security and prevent fraud.
Such processing may involve transaction information, device characteristics, technical signals and purchase activity.
Where applicable law grants rights concerning solely automated decisions with legal or similarly significant effects, we will comply with those requirements.
Customers may contact us if they have concerns about a transaction decision or wish to exercise an applicable right.
17. Children's Privacy
Our website is intended for general retail customers and is not specifically directed towards children.
We do not knowingly collect personal information from children in circumstances where doing so would violate applicable law.
Where parental consent or another legal requirement applies, we will follow the relevant rules.
If you believe that a child has provided personal information to us inappropriately, please contact:
We will review the circumstances and take appropriate action.
18. Third-Party Websites and External Services
Our website may contain links to websites, platforms or services operated by third parties.
These third parties may have their own privacy policies, security measures and data processing practices.
HANEXO LTD is not responsible for the independent privacy practices of external websites that we do not control.
We recommend reviewing the privacy policies of third-party services before providing them with personal information.
19. Your Choices and Preferences
You may have options to control how your personal information is used.
Marketing Preferences: You may unsubscribe from promotional emails or contact us to withdraw marketing permissions.
Cookie Preferences: You may manage non-essential cookies through our website's cookie consent controls where available and through relevant browser settings.
Customer Information: You may contact us to request correction, access or deletion of eligible personal information.
Your available options depend on your location, applicable law and the processing activities involved.
20. Complaints and Supervisory Authorities
If you have questions or concerns about how HANEXO LTD processes personal information, please contact us first so that we can investigate and respond.
You may also have the right to lodge a complaint with a competent data protection authority.
United Kingdom
The UK supervisory authority is the Information Commissioner's Office (ICO).
Website: https://ico.org.uk/
Telephone: 0303 123 1113
You may complain to the ICO if you believe your personal information has been processed in breach of applicable UK data protection law.
21. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in legal requirements, Shopify services, business operations, technology or our personal information practices.
Updated versions will be published on our website with a revised "Last Updated" date.
Where required by law, we will provide additional notice or obtain consent before implementing material changes to particular processing activities.
We encourage customers to review this page periodically.
22. Contact Us
For questions about this Privacy Policy, personal information requests, marketing preferences or data protection concerns, please contact:
HANEXO LTD
Flat 3 Newton Mount
Abbey Road
Rhos On Sea
Colwyn Bay
LL28 4NP
Wales
United Kingdom
Business Name: Hanexo
Company Number: 17456301
Privacy Contact Email: hanexo.limited@gmail.com
Website: https://hanexo.co.uk/
We will review privacy-related enquiries and respond in accordance with applicable legal requirements.
Hanexo — Privacy Policy
Website: https://hanexo.co.uk/
We are committed to responsible handling of personal information, transparency and respect for customer privacy rights.
