Privacy notice

Last Updated: September 18, 2026

Hnava Limited (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you visit our website, set up an account, or make a purchase from us.

Hnava Limited acts as the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are and How to Contact Us

Company Name: Hnava Limited

Company Registration Number: 14679445

Registered Office Address: Radley House Ground Floor, Richardshaw Road, Leeds, West Yorkshire, United Kingdom, LS28 6LE

Service Area: We operate strictly within the United Kingdom and only serve UK clients.

Contact Email: contact@hnava.co.uk

2. Information We Collect About You

We collect several types of information from and about users of our site, including:

Identity Data: Your full name, username, title, or similar identifier.

Contact Data: Your billing address, physical delivery address, email address, and phone number.

Account Credentials: When you register or log in using Google Single Sign-On (SSO), we receive basic profile details from Google, including your unique Google User ID, full name, and email address to authenticate your identity.

Payment & Financial Data: Information required to complete transactions. All payment transactions are processed securely through Stripe. Hnava Limited does not store, see, or retain your full credit/debit card numbers on our own servers.

Order & Transaction Data: Details about products you have purchased from us (such as health & beauty products, toys, games, and electrical items), payment history, and delivery tracking details.

Technical & Usage Data: Your IP address, browser type, operating system, time zone settings, and how you navigate our website.

3. How We Collect Your Personal Data

We collect data from you through:

Direct Interactions: When you create an account, browse products, purchase items, or contact customer support.

Google Single Sign-On: When you choose to log in using your Google account, Google supplies us with authentication details (name and email).

Payment Processing (Stripe): When you check out, Stripe handles your payment data securely to authorize and complete the charge.

4. How We Use Your Personal Data & Legal Basis

Under UK GDPR, we must have a lawful reason to collect and use your personal information. Here is how we use your data and the legal grounds we rely on:

Processing and Fulfilling Your Orders
Data used: Identity, Contact, Financial, and Transaction Data.
Legal Basis: Performance of a Contract (necessary to deliver goods to you).

Creating and Managing Your Account via Google SSO
Data used: Identity, Contact, and Account Credentials.
Legal Basis: Performance of a Contract (necessary to provide account features).

Payment Processing and Fraud Prevention
Data used: Financial, Transaction, and Technical Data.
Legal Basis: Legitimate Interests (ensuring secure transactions) and Legal Obligation.

Handling Shipping, Tracking, Returns, and Refunds
Data used: Identity, Contact, Transaction, and Delivery Data.
Legal Basis: Performance of a Contract and Compliance with UK Consumer Law.

Customer Service and Inquiries
Data used: Identity, Contact, and Order History.
Legal Basis: Performance of a Contract and Legitimate Interests.

5. Third-Party Sharing and Disclosures

We do not sell, rent, or trade your personal information. We only share necessary data with trusted third parties who help us operate our store:

Stripe Payment Gateway: Shares transaction details to process secure credit and debit card payments and handle refunds.

Google: Shares authentication data when you choose to log in via Google SSO.

Delivery & Courier Partners (e.g., Royal Mail Tracked 24): Shares your name, shipping address, and phone number to deliver your packages and provide live tracking updates.

Legal Authorities: Where required by law or to enforce our legal rights.

6. Linking to Our Shipping and Refund Policies

For specific details regarding how your personal information is used during product delivery, returns, and refund requests, please review our separate:

Shipping Policy (for details on Tracked 24 dispatch and account dashboard tracking)

Refund & Returns Policy (for details on our 14-day return window, hygiene exclusions, return postage, and Stripe refund processing)

7. Data Security and Retention

We maintain strict security measures to keep your personal data safe. Payment details are handled by Stripe’s PCI-DSS compliant infrastructure.

We keep your personal information only as long as necessary to fulfill the purposes for which it was collected—including tax, legal, and accounting obligations (typically up to 6 years for transaction records under UK law).

8. Your Legal Rights (UK GDPR)

As a UK resident, you have the right to:

Access the personal information we hold about you.

Correct any inaccurate or incomplete data.

Request Erasure of your data, subject to legal requirements.

Restrict or Object to how we process your data.

Data Portability to obtain and reuse your personal data for your own purposes.

To exercise any of these rights, please contact us at contact@hnava.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.