Privacy Policy
Last updated: 20 October 2026
This privacy policy describes how Hazel & Willow (“Site”, “we”, “us” or “our”) collects, uses and discloses your personal information when you visit hazel-willow.com (“Site”), use our services, make a purchase or otherwise interact with us in connection with the Site (collectively, the “Services”). “You” and “your” refer to you as a user of the Services, whether you are a customer, a visitor to the Site or another person whose personal information we have collected under this privacy policy.
Please read this privacy policy carefully.
CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy from time to time, for example, to reflect changes to our practices or for other operational, legal or regulatory reasons. We will publish the updated policy on the Site, update the “Last updated” date and take any other steps required by law.
HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION
To provide the Services, we collect the personal information described below. The information we collect and use depends on how you interact with us.
In addition to the specific purposes set out below, we may use the information collected to communicate with you, provide or improve the Services, comply with applicable legal obligations, ensure compliance with applicable terms of service, and protect or defend the Services, our rights and the rights of our users or third parties.
WHAT PERSONAL INFORMATION DO WE COLLECT?
The personal information we collect about you depends on how you use our Site and Services. “Personal information” means information that identifies you, relates to you, describes you or can be associated with you.
Information you provide directly
Personal information you provide directly through the Services may include:
- Contact details, such as your first name, surname, address, telephone number and email address.
- Order information, such as billing and delivery addresses, payment confirmation, email address and telephone number.
- Account information, such as your username, password, security questions and other security-related information.
- Customer service details, including information you provide when communicating with us.
Some features of the Services may require you to provide certain personal information. If you choose not to provide this information, some features may not be available.
Information collected automatically
We may automatically collect information about your interactions with the Services (“Usage Data”). This includes data about how you access and use the Site and your account, device data, browser information, network data, IP address and other technical information. We may use cookies, pixels and similar technologies to collect Usage Data.
Information we receive from third parties
We may receive information from third parties, such as:
- Service providers that support our Site and Services, including Shopify.
- Payment processing service providers that handle your payment information.
- Marketing partners or platforms that use cookies or pixels.
HOW WE USE YOUR PERSONAL INFORMATION
Providing products and services: to fulfil orders, process payments, manage accounts and facilitate delivery, returns or exchanges.
Marketing and advertising: to send promotional messages by email, text message or post and display targeted advertising. If you are in the UK, we rely on our legitimate interests under Article 6(1)(f) of the UK GDPR.
Security and fraud prevention: to detect, investigate or take action against fraud or harmful conduct. For UK users, this is based on our legitimate interests.
Communication and improvement: to provide customer support and improve our services.
COOKIES
We use cookies to operate and improve our Site and Services. You can find detailed information about Shopify cookies here: https://www.shopify.com/legal/cookies
Cookies help us remember user preferences and analyse your activity. You can set your browser to reject cookies, but this may affect how the Services work.
HOW WE SHARE PERSONAL INFORMATION
We may share your personal information in the following circumstances:
- With service providers performing functions such as payment processing, data analytics, customer support and hosting services.
- With business and marketing partners.
- With affiliated companies or within our corporate group.
- With third parties, with your consent (for example, social media platforms).
- In legal situations, such as mergers, court summonses or compliance with regulatory requirements.
CATEGORIES OF RECIPIENTS
- Identifiers: service providers, business partners, affiliated companies.
- Business information: service providers, business partners.
- Online and network activity: analytics service providers, IT service providers.
- Geolocation data: technical service providers.
We do not sell or share your data without your consent.
THIRD-PARTY LINKS
Our Site may contain links to third-party websites. We do not control these websites; they are subject to their own privacy policies. We are not responsible for the content or practices of these websites.
CHILDREN’S DATA
Our Services are not intended for children, and we do not knowingly collect data from anyone under 16. Parents or guardians can contact us to request the deletion of data provided by children.
SECURITY AND DATA RETENTION
We use commercially reasonable security measures, but cannot guarantee absolute security. The period for which we retain data depends on our legal obligations and the need to manage accounts and services.
YOUR RIGHTS
Depending on where you are located, you may have the following rights:
- The right to access your personal information
- The right to request the deletion of data
- The right to correct inaccuracies
- The right to data portability
- The right to object to the sale or sharing of data or to targeted advertising
- The right to restrict processing
- The right to withdraw consent
- The right to appeal a rejected request
- The right to manage marketing preferences
COMPLAINTS
If you have questions about how we handle your personal information, please contact us. You can also lodge a complaint with the Information Commissioner’s Office (ICO).
INTERNATIONAL USERS
We may transfer, store and process your personal information outside the UK. When transferring data from the UK, we use recognised mechanisms, such as the UK International Data Transfer Agreement or Addendum.
CONTACT US
If you have questions or wish to exercise your rights, please contact us at support@hazel-willow.com.
Unless stated otherwise, Hazel & Willow is the controller of your personal information under applicable data protection laws.