Legal

Privacy Policy

Last updated: [EDIT DATE]

This page explains how HAMI ("we", "us") collects and uses personal data when you visit hami.cc or place an order. This page is maintained by the HAMI team to answer common privacy questions about our shop.

1. Who we are

[EDIT LEGAL COMPANY NAME]
[EDIT ADDRESS]
Contact: hello@hami.cc

2. What we collect

Order data: name, shipping address, email, phone, purchase details.
Payment data: handled by our payment provider ([EDIT PROVIDER, e.g. Stripe]). We never see or store your full card number.
Account data: email address, if you create an account or subscribe to updates.
Technical data: IP address, browser type, and pages viewed, collected via basic analytics.

3. Why we use it

To process and ship your order (Art. 6(1)(b) GDPR — contract).
To comply with tax and accounting obligations (Art. 6(1)(c) GDPR — legal obligation).
To answer support requests and improve the shop (Art. 6(1)(f) GDPR — legitimate interest).
To send marketing emails, only if you opt in (Art. 6(1)(a) GDPR — consent).

4. Who we share it with

We share data only with the service providers we need to run the shop:

Payment: [EDIT PROVIDER]
Shipping: [EDIT CARRIER(S)]
Email delivery: [EDIT PROVIDER]
Hosting: [EDIT PROVIDER]
Analytics: [EDIT PROVIDER or "none"]

Each is bound by a data processing agreement and may only use your data on our instructions.

5. How long we keep it

Order and invoice data is kept for the retention period required by law (typically 7–10 years). Support emails are kept up to 2 years. Marketing data is kept until you unsubscribe.

6. Cookies

We use only the cookies strictly necessary to run the shop (cart, session, checkout). Any optional analytics or marketing cookies are loaded only after you consent through the cookie banner.

7. Your rights

Under GDPR you have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data deleted (right to be forgotten)
Restrict or object to our processing
Receive your data in a portable format
Withdraw consent for marketing at any time
Lodge a complaint with your local data protection authority

To exercise any of these rights, email hello@hami.cc.

8. Data security

The site is served over HTTPS and payment is handled by PCI-compliant providers. We limit internal access to personal data to the people who need it to fulfil your order.

9. Changes to this policy

We update this policy when our practices change. The date at the top of the page reflects the most recent revision.