Privacy policy

The company HANAH MARIAH s.r.o. (the “Controller”) hereby informs visitors to its website and its customers, in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, about the manner, scope, purposes and legal bases of the processing of personal data.

1. Controller contact details

The Controller of personal data is HANAH MARIAH s.r.o., with its registered office at Vladislavova 1388/6, 110 00 Prague 1, Czech Republic.

If you have any questions regarding the processing of personal data, you may contact the Controller by e-mail at info@fabricsdeluxe.com.

The Controller has not appointed a Data Protection Officer, as this obligation does not arise under the applicable legislation.

2. Categories of personal data processed

Depending on how you use the website, we may process in particular the following personal data:

• identification and contact details
• data necessary for processing and fulfilling orders
• data relating to customer accounts and purchase history
• records of communication with the Controller
• technical data (IP address, cookies, device and browser information)

3. Purposes and legal bases of processing

Personal data is primarily processed for the purpose of concluding and performing purchase contracts, in particular for order processing, delivery of goods, handling returns and complaints, and enabling the management of customer accounts. The legal basis for this processing is the performance of a contract pursuant to Article 6(1)(b) UK GDPR.

In addition, certain personal data must be processed in order to comply with legal obligations, in particular those arising from accounting and tax legislation. In these cases, the legal basis for processing is compliance with a legal obligation pursuant to Article 6(1)(c) UK GDPR.

Personal data may also be processed on the basis of the Controller’s legitimate interests, in particular for the protection of legal claims, internal analysis, and direct marketing of similar products or services to existing customers. You have the right to object to such processing at any time.

Where required, personal data may be processed on the basis of your explicit consent, in particular for the sending of marketing communications, personalisation of offers and marketing profiling. Consent is voluntary and may be withdrawn at any time.

4. Profiling and automated decision-making

The Controller carries out profiling solely for the purpose of tailoring marketing communications and product offerings. This processing does not involve automated decision-making that would produce legal or similarly significant effects for the data subject.

5. Cookies

The website uses cookies and similar technologies to ensure its proper functioning, analyse traffic and support marketing activities. Analytical and marketing cookies are used only on the basis of consent provided via the cookie banner.

Cookie settings may be adjusted at any time via the cookie banner or through your internet browser settings.

6. Recipients of personal data

Personal data may be disclosed, to the extent necessary, in particular to:

• payment service providers
• delivery and logistics partners
• IT service providers and marketing service providers
• accountants, auditors and legal advisers
• public authorities, where required by law

7. Transfers of personal data outside the UK and EU

In connection with the use of certain analytical and marketing tools, personal data may be transferred to third countries outside the United Kingdom or the European Union. Such transfers are always carried out in compliance with UK GDPR, in particular on the basis of standard contractual clauses or other appropriate safeguards.

8. Data retention periods

Personal data is retained only for as long as necessary in relation to the purpose of its processing, in particular for the duration of the contractual relationship, warranty periods and subsequently for the period required by applicable legislation.

Accounting records are retained for up to 10 years. Marketing-related personal data is retained for up to 4 years or until consent is withdrawn or an objection is raised.

9. Rights of data subjects

You have, in particular, the following rights:

• the right of access to personal data
• the right to rectification or completion of personal data
• the right to erasure
• the right to restriction of processing
• the right to object to processing
• the right to data portability
• the right to lodge a complaint with a supervisory authority

10. Supervisory authority

The supervisory authority for personal data protection in the United Kingdom is the Information Commissioner’s Office (ICO), available at www.ico.org.uk.

11. Final provisions

This Privacy Policy is valid and effective as of 1 January 2026.