Privacy policy

1. Introduction

The Hagah Journal (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or make a purchase.


We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


2. Data We Collect

When you place an order or contact us, we may collect:

  • Name and contact details (email address, phone number)

  • Delivery and billing address

  • Payment information (processed securely; we do not store card details)

  • Order history and preferences

  • Website usage data (via cookies — see Section 7)


3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders

  • Send order confirmations and shipping notifications

  • Respond to your enquiries and provide customer support

  • Send marketing emails, if you have opted in (you can unsubscribe at any time)

  • Improve our website and customer experience

  • Comply with our legal obligations


4. Legal Basis for Processing

We process your data under the following legal bases:

  • Contract: to fulfil your order and provide our services

  • Legitimate interests: to improve our products and prevent fraud

  • Consent: for marketing communications (where you have opted in)

  • Legal obligation: where required by law


5. Sharing Your Data

We do not sell your personal data. We may share your data with trusted third parties only where necessary, including:

  • Delivery and logistics partners (to fulfil your order)

  • Payment processors (to process your payment securely)

  • Email marketing platforms (if you have opted in to our newsletter)

  • IT and website service providers


All third parties are required to handle your data securely and in accordance with applicable data protection law.


6. International Transfers

If you are located outside the UK, your data may be transferred to and processed in the UK or other countries. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.


7. Cookies

Our website uses cookies to improve your browsing experience and analyse site traffic. Cookies are small text files stored on your device. You can control cookie settings through your browser.


We use:

  • Essential cookies: required for the website to function

  • Analytics cookies: to understand how visitors use our site (e.g. Google Analytics)

  • Marketing cookies: if you have consented, to show relevant adverts


8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order data is typically retained for 7 years for tax and accounting purposes.


9. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate data

  • Request deletion of your data (‘right to be forgotten’)

  • Object to or restrict processing of your data

  • Withdraw consent for marketing at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk


To exercise any of these rights, please email us at info@thehagahjournal.com.


10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure, and we cannot guarantee absolute security.


11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with an updated ‘Last updated’ date. We encourage you to review this page periodically.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.

International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at info@thehagahjournal.com. For the purpose of applicable data protection laws, we are the data controller of your personal information.