Last updated: 11 July 2026
Hayati Pro is the data controller for personal data collected on hayatipro.com. Hayati Pro processes that data under the UK GDPR and the Data Protection Act 2018. This policy explains what data Hayati Pro collects, why, and the rights you hold over it.
Who the data controller is
Hayati Pro is a trading name of HRM Trade LTD, the data controller for this website.
- Registered company: HRM Trade LTD
- Company number: 16434092 (registered in England and Wales)
- Registered office: Unit 3S, Frank Street, Preston, PR1 1PB, United Kingdom
- Data contact email: hayatiproshopify@hotmail.com
- ICO registration number: [CONFIRM ICO number]
What data Hayati Pro collects
Hayati Pro collects four categories of personal data. Each category serves a specific purpose in running the store.
- Identity data: name, billing name, and date of birth for age verification.
- Contact data: email address, phone number, billing address and delivery address.
- Order data: purchase history, payment confirmation and order reference numbers.
- Technical data: IP address, device type, browser, referrer and cookie identifiers.
Hayati Pro does not store full card numbers. Card data is handled by the PCI-compliant payment processor at checkout.
How Hayati Pro collects your data
Hayati Pro collects personal data in three ways:
- Direct entry: data you type at checkout, account sign-up, or when contacting support.
- Automated tracking: cookies and analytics that log site activity while you browse.
- Third-party partners: payment, courier and verification partners that confirm your order.
Why Hayati Pro uses your data (lawful bases)
Hayati Pro processes personal data on four lawful bases under UK GDPR.
- Contract: to process, deliver and support your Hayati Pro order.
- Legal obligation: to verify you are 18 or over and to keep tax and accounting records.
- Legitimate interests: to prevent fraud, secure the site, and improve the shopping experience.
- Consent: to send marketing emails and to set non-essential cookies.
You can withdraw consent for marketing or non-essential cookies at any time. Withdrawing consent does not affect order and service messages, which run on contract or legal obligation. The checkout process itself is set out on the age verification policy.
Who Hayati Pro shares your data with
Hayati Pro shares personal data only with the service providers that run the store. Hayati Pro does not sell personal data to any third party.
- Shopify Inc.: the e-commerce platform that hosts hayatipro.com and processes order data.
- Payment processor: [CONFIRM: Shopify Payments / Stripe / PayPal] handles card data and transaction confirmation.
- Delivery couriers: DPD and DHL receive delivery addresses to ship and track your parcel.
- Email platform: [CONFIRM: Klaviyo / Mailchimp / Shopify Email] sends order confirmations and marketing where you have opted in.
- Analytics providers: [CONFIRM: Google Analytics 4 / Shopify Analytics] measures anonymised site performance.
- Age verification partner: [CONFIRM: name if third-party service used] confirms buyer age at checkout.
- Legal or regulatory bodies: where the law requires disclosure, for example to HMRC or the ICO.
International data transfers
Some Hayati Pro service providers process data outside the UK. Where a transfer takes place, Hayati Pro uses a UK-approved safeguard, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
Shopify and most cloud providers host data across multiple regions. Hayati Pro relies on the transfer safeguards published by each processor. [CONFIRM the exact processors and safeguards with the DPO before publish.]
How long Hayati Pro keeps your data
Hayati Pro keeps personal data only as long as each purpose requires. Four retention windows apply:
- Order and tax records: 6 years, to meet HMRC record-keeping rules.
- Account data: until you close the account, then archived for up to 6 years for tax purposes.
- Marketing data: until you unsubscribe or withdraw consent.
- Support and complaints data: up to 3 years after resolution, for audit and dispute purposes.
Marketing preferences
Hayati Pro sends marketing emails only with your consent. You can unsubscribe at any time using the link at the foot of any marketing email, or by updating preferences in your account.
Withdrawing marketing consent stops promotional emails without affecting order confirmations, dispatch notifications and other service messages that Hayati Pro is required to send.
Cookies
Hayati Pro uses cookies to run the store, remember your basket and measure traffic. Cookies fall into two groups:
- Essential cookies: needed to run the checkout, sign-in and basket. These do not require consent.
- Non-essential cookies: analytics and marketing cookies that need your consent before they run.
Manage cookie choices through the on-site cookie banner or your browser settings.
Your data protection rights
UK GDPR gives you eight rights over your personal data.
- Right to be informed: know what data Hayati Pro holds and why.
- Right of access: request a copy of the personal data Hayati Pro holds about you.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: ask Hayati Pro to delete your data ("right to be forgotten").
- Right to restrict processing: limit how Hayati Pro uses your data.
- Right to data portability: receive your data in a machine-readable, transferable format.
- Right to object: object to processing based on legitimate interests or for marketing.
- Rights around automated decisions: request human review of any automated decision or profiling.
How to make a data request
Make a data subject request in three steps:
- Email hayatiproshopify@hotmail.com with your request and, where relevant, your order number.
- Confirm your identity when Hayati Pro asks. This protects your data from being sent to the wrong person.
- Receive a response within one calendar month, extendable by two further months for complex requests.
Hayati Pro does not charge a fee for data subject requests unless a request is manifestly unfounded or excessive.
Complaints
Raise any complaint with Hayati Pro first by emailing hayatiproshopify@hotmail.com. Hayati Pro aims to respond within one calendar month.
If you remain unhappy with the response, you can complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk.
Data breaches
Hayati Pro reports qualifying personal data breaches to the ICO within 72 hours of becoming aware of them. Where a breach is likely to result in a high risk to your rights and freedoms, Hayati Pro will also notify you directly without undue delay.
Changes to this policy
Hayati Pro updates this policy when data practices, providers or the law change. The last-updated date at the top of this page shows the current version.
Material changes are notified through the site or by email where you have an account.
Contact
Contact Hayati Pro about privacy by emailing hayatiproshopify@hotmail.com, or through the contact Hayati Pro page. Written enquiries go to HRM Trade LTD, Unit 3S, Frank Street, Preston, PR1 1PB, United Kingdom.