Privacy Policy

Ondine London is operated by Talen and Haten Limited, a company incorporated in Hong Kong (Company No. 77043532), with its registered office at Unit D3, 11/F, Luk Hop Industrial Building, No. 8 Luk Hop Street, San Po Kong, Kowloon, Hong Kong. Talen and Haten Limited is the controller responsible for your personal data when you shop with us. We handle your personal data in line with the UK GDPR and, where it applies, the EU GDPR. This policy explains what we collect, how we use it, how we keep it safe, and the rights you have.

Our commitment to you

We collect only the data we need to run the shop and serve you well. We do not sell your personal data.

How we keep your data safe

We use appropriate technical and organisational measures to protect your data, and we work only with service providers who do the same. Payment card details are handled by our payment provider over an encrypted connection. We do not store full card numbers ourselves.

The personal data we collect

Identity data: your name and any account username.
Contact data: delivery and billing address, email address, and phone number.
Financial data: payment information, processed securely by our payment provider (we do not store full card details).
Transaction data: details of the orders you place and their status.
Profile data: your account, saved items, and preferences.
Marketing and communications data: your marketing preferences and the messages you send us.
Technical and usage data: IP address, device and browser type, and how you use the site.

We do not collect special-category data, such as health or ethnicity, about you.

If you do not provide personal data

Where we need personal data to fulfil an order and you do not provide it, we may be unable to complete your purchase.

How we collect your data

Direct interactions: when you place an order, create an account, subscribe, or contact us.
Automated technologies: as you browse, through cookies and similar technologies, described in our Cookie Policy.
Third parties: from providers such as our payment processor, analytics, and delivery carrier.

How we use your data and our legal bases

To process and deliver your order, and to manage payments and returns. Legal basis: performance of a contract.
To keep records and meet our accounting and legal duties. Legal basis: legal obligation.
To run, secure, and improve the site, and to prevent fraud. Legal basis: our legitimate interests.
To send marketing emails where you have opted in. Legal basis: consent, which you can withdraw at any time.

How long we keep your data

We keep your data only as long as needed for the purposes above, including order and accounting records we are legally required to retain. Account data is kept while your account is active.

Marketing, adverts and cookies

You can opt out of marketing at any time using the unsubscribe link in any email or by contacting us. We use cookies and similar tools for analytics and advertising, which you can manage as described in our Cookie Policy.

Links to other websites

Our site may link to third-party websites. We are not responsible for their privacy practices, and we encourage you to read their policies.

How we share your data

We share your data only where needed to run the shop:

Delivery carriers, to fulfil your order.
Payment processors, to take payment securely.
Fraud-prevention, analytics, email, and hosting providers who support the site.
Authorities or advisers where we are required to by law.
A buyer or successor, if the business is sold or reorganised.

Payment processing

Payments are handled by our payment provider. Your card details are shared with them directly over an encrypted connection and are not stored by us.

Your data and countries outside the UK

Ondine London is operated by Talen and Haten Limited in Hong Kong. Depending on the service providers used to run the store, personal data may be transferred to and processed outside the United Kingdom, including in Hong Kong. Where we transfer data outside the UK, we make sure a similar level of protection applies by relying on appropriate safeguards, such as UK-approved standard contractual clauses or an equivalent legal mechanism.

Your rights

Under UK data protection law you have the right to:

access the personal data we hold about you,
ask us to correct it,
ask us to erase it,
restrict or object to how we use it,
request portability of the data you gave us,
withdraw consent at any time,
ask for human review of any decision made by automated means, and
lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us using the details below.

Requesting deletion of your data

To ask us to delete the personal data we hold about you, email support@ondinelondon.co.uk with the subject line "Data deletion request". We will confirm your request and respond within the time limits set by UK data protection law. Some records may be kept where the law requires us to retain them.