This Privacy Policy explains how personal information is handled when you visit hokawalking.co.uk, place an order, create an account or contact us. It also describes your data protection rights and how to raise a concern.

1. Responsibility for Your Information

The business operating hokawalking.co.uk is the data controller for personal information it processes to operate the shop and manage customer relationships.

For privacy questions or requests concerning your information, use the contact details published on our Contact Us page.

Other organisations, such as payment providers, may act as independent controllers for certain activities. Their privacy notices explain how they handle information for those purposes.

2. Information We Process

Depending on your interaction with the website, personal information may include:

  • Contact information: Your name, email address, billing address, delivery address and telephone number where needed.
  • Order details: Products, sizes, quantities, purchase history, order references and delivery information.
  • Payment records: Payment method, transaction references, payment status and refund details.
  • Account information: Registration details, saved addresses and preferences.
  • Communications: Enquiries, complaints and supporting information you provide.
  • Technical information: IP address, browser and device details, access times, error logs and website interactions.
  • Privacy preferences: Marketing choices and cookie consent or objection records.

Information may be collected directly from you, generated through website use or received from payment and delivery providers in connection with your purchase.

Please do not send passwords, card security codes or unnecessary sensitive information in customer support messages.

3. How and Why Information Is Used

Orders and delivery

We use relevant information to process purchases, administer payments, arrange delivery and handle returns. The lawful basis is performance of a contract or taking steps you request before entering one.

Customer accounts

Registration information and saved details are used to provide account functions you request. The lawful basis is performance of the account service agreement.

Customer support

Messages and contact details are used to answer questions and resolve issues. Depending on the enquiry, processing is necessary for our contract with you or our legitimate interest in providing effective customer assistance.

Security and fraud prevention

Technical and transaction information may be used to investigate suspicious activity and protect accounts and systems. We rely on our legitimate interests in maintaining security and preventing fraud, balanced against your rights and interests.

Legal obligations

Information may be retained or disclosed where necessary to comply with applicable accounting, tax, regulatory or other legal requirements.

Website improvement

Where analytics tools are used, their purposes and lawful bases depend on their actual configuration. Consent is obtained where required. Further details must be provided in the relevant cookie and service information.

If information is required to fulfil an order or provide a requested service, not supplying it may prevent us from completing that activity.

4. Marketing Communications

Where promotional communications are offered, they will be sent only where permitted by applicable law. Consent will be requested where required.

You can unsubscribe using the link in a marketing message or contact us to change your preferences. Essential messages concerning orders, payments, delivery or product safety are separate from promotional communications.

You may object at any time to processing for direct marketing, including profiling related to that marketing. ico.org.uk

5. Cookies and Similar Technologies

Cookies and similar technologies may support basket functions, account sessions and saved preferences. Analytics or advertising technologies may also be used where enabled and lawfully configured.

Our Cookie Policy explains the relevant categories and management options. Where consent is required, those technologies must not be activated before you agree. Continuing to browse does not, by itself, constitute consent.

6. Sharing Personal Information

Where necessary for the relevant purpose, information may be shared with:

  • Website hosting, maintenance and technical support providers.
  • Payment processors and financial institutions.
  • Fulfilment and delivery providers.
  • Customer support and communications services.
  • Professional advisers, regulators and authorities where justified or legally required.

Providers processing information on our instructions must be subject to appropriate contractual safeguards. Independent controllers are responsible for their own processing.

7. International Processing

Depending on the providers used and the location of their systems, personal information may be processed outside the UK.

Where a restricted international transfer takes place, the applicable legal requirements must be met. Relevant mechanisms may include UK adequacy regulations or approved contractual safeguards, supported by additional protections where necessary.

You can contact us for information about safeguards relevant to your data and how to obtain a copy, subject to lawful redactions.

8. Retention Periods

Personal information is retained only for as long as necessary for its purpose or to meet applicable legal requirements.

Retention decisions consider:

  • Whether your account or customer relationship remains active.
  • Outstanding orders, returns, refunds or complaints.
  • Accounting and tax retention obligations.
  • Relevant legal limitation periods and disputes.
  • The continuing need for security and technical records.

Closing an account does not automatically erase information we must lawfully retain. A limited suppression record may be kept to respect a marketing objection.

Specific retention periods, or meaningful criteria for determining them, must reflect the actual processing involved. ico.org.uk

9. Information Security

Appropriate technical and organisational measures are required to protect personal information against unauthorised access, alteration, loss and misuse. No online system can guarantee absolute security.

Keep your account credentials confidential. If you suspect unauthorised account access, contact us through the details published on the website.

10. Your Data Protection Rights

Depending on the circumstances and lawful basis, you may have rights to:

  • Access your personal information.
  • Correct inaccurate or incomplete information.
  • Request erasure.
  • Restrict processing.
  • Receive qualifying information in a portable format.
  • Object to processing based on legitimate interests.
  • Withdraw consent where processing relies on it.

These rights are subject to legal conditions and exceptions. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise a right, contact us through our published contact details. We may request proportionate information to verify your identity. We will respond within the applicable legal timeframe, normally one month, subject to lawful extensions or adjustments. ico.org.uk

11. Automated Decision-Making

If automated decisions with legal or similarly significant effects are used, the relevant privacy information must explain the processing, its consequences and applicable safeguards, including rights to human intervention and challenge where required.

Payment providers may conduct their own automated checks. Their privacy notices explain activities for which they are independently responsible.

12. Complaints

Contact us if you are concerned about how your personal information has been handled so we can investigate and respond.

You also have the right to complain to the UK Information Commissioner’s Office. Guidance and contact options are available on the ICO complaints page. ico.org.uk

13. Changes to This Policy

This policy may be updated to reflect changes in services, processing activities or legal requirements. Where required, significant changes will be brought to your attention separately.

Before publication, add the controller’s actual legal identity and contact details, together with any required representative or data protection officer details. Verify the processing activities, service providers, retention arrangements, international transfers and automated decision-making practices against the website’s actual operation.