PRIVACY POLICY

HMN RESALE CO

Effective Date: 8 July 2026

⸻

1. INTRODUCTION

HMN RESALE CO ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our online store at [website URL] and purchase our products, including canned juice drinks (Mango Nata de Coco, Kiwi Nata de Coco, Dragonfruit Nata de Coco, Rambutan Nata de Coco, Tamarind, and Pure Young Coconut Water) and streetwear for women, men, and children.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

⸻

2. WHO WE ARE

Data Controller:

HMN RESALE CO

The Boatyard Mansion Lane Iver SL0 9RG

Website: www.hmnresaleco.com

Email: info@hmnresaleco.com

If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.

⸻

3. WHAT PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

- Identity Data: Name, username, or similar identifier

- Contact Data: Email address, billing address, delivery address, telephone number

- Financial Data: Payment card details (processed securely via our payment providers; we do not store full card details)

- Transaction Data: Details of products you have purchased from us (e.g., Mango Nata de Coco, Kiwi Nata de Coco, Dragonfruit Nata de Coco, Rambutan Nata de Coco, Tamarind, Pure Young Coconut Water, streetwear items)

- Profile Data: Your preferences, feedback, and survey responses

- Marketing Data: Your preferences in receiving marketing communications from us

3.2 Information Collected Automatically

- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website

- Usage Data: Information about how you use our website, products, and services

- Cookie Data: See our Cookie Policy below for details

3.3 Information from Third Parties

- We may receive personal data about you from analytics providers, advertising networks, and search information providers

⸻

4. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Purpose Legal Basis

To process and deliver your orders for our products (canned juice drinks and streetwear) Performance of a contract with you

To manage payments and prevent fraud Performance of a contract / Legitimate interests

To create and manage your account Performance of a contract

To communicate with you about your orders Performance of a contract

To provide customer support Performance of a contract / Legitimate interests

To send you marketing communications (with your consent) Consent

To improve our website, products, and services Legitimate interests

To comply with legal obligations Legal obligation

To detect and prevent fraud Legitimate interests / Legal obligation

⸻

5. MARKETING AND COMMUNICATIONS

We may use your personal data to send you marketing communications about our products, including:

- New canned juice drink flavours or streetwear collections

- Special offers and promotions

- Seasonal sales and discounts

Your Rights:

- You have the right to opt out of marketing communications at any time

- You can unsubscribe by clicking the "unsubscribe" link in any marketing email

- You can also contact us directly to update your preferences

We will never sell your personal data to third parties for marketing purposes.

⸻

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar tracking technologies to distinguish you from other users, improve your browsing experience, and help us understand how our website is used.

Types of cookies we use:

- Essential cookies: Necessary for the website to function properly (e.g., shopping cart, checkout)

- Analytical/performance cookies: Allow us to recognise and count visitors and see how they move around our website

- Functionality cookies: Enable us to personalise content for you and remember your preferences

- Targeting cookies: Record your visit to our website, the pages you have visited, and the links you have followed

You can manage your cookie preferences through your browser settings. For more information, please see our full Cookie Policy.

⸻

7. DATA SHARING AND THIRD PARTIES

We may share your personal data with the following categories of recipients:

- Service Providers: Companies that provide services on our behalf, such as:

- Payment processing providers (e.g., PayPal, Stripe)

- Delivery and courier services (e.g., Royal Mail, DPD, Hermes)

- Website hosting and analytics providers

- Email marketing platforms

- Customer service platforms

- Professional Advisers: Including lawyers, bankers, auditors, and insurers

- Regulators and Authorities: HM Revenue & Customs, law enforcement, and other authorities where required by law

- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner

All third-party service providers are required to respect the security of your personal data and treat it in accordance with the law. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

⸻

8. INTERNATIONAL TRANSFERS

Some of our third-party service providers may be based outside the UK, including in the European Economic Area (EEA) and other countries. When we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

- The country has been deemed to provide an adequate level of protection for personal data by the UK Secretary of State

- We use specific contracts approved by the UK Information Commissioner's Office (ICO) that give personal data the same protection it has in the UK

- Where we use providers based in the US, we may transfer data to them if they are part of the UK-US Data Bridge or use Standard Contractual Clauses

⸻

9. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. These measures include:

- Encryption of data in transit (SSL/TLS)

- Secure password policies

- Regular security assessments

- Limited access to personal data (only those employees, agents, and contractors who need it to perform their roles)

- Regular staff training on data protection

We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

⸻

10. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Typical retention periods:

- Order and transaction data: 6 years (for tax and accounting purposes, as required by HMRC)

- Marketing data: Until you withdraw consent or unsubscribe

- Account data: For as long as your account is active, plus a reasonable period thereafter

- Customer service records: 3 years from the date of the last interaction

In some circumstances, we may anonymise your personal data for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

⸻

11. YOUR LEGAL RIGHTS

Under UK data protection law, you have the following rights:

11.1 Right to Access

You have the right to request a copy of the personal data we hold about you.

11.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data.

11.3 Right to Erasure ("Right to be Forgotten")

You have the right to request that we delete your personal data in certain circumstances, such as where the data is no longer necessary for the purposes for which it was collected.

11.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

11.5 Right to Data Portability

You have the right to request that we transfer your personal data to you or another organisation in a structured, commonly used, machine-readable format.

11.6 Right to Object

You have the right to object to the processing of your personal data where we are relying on legitimate interests, and to object to direct marketing at any time.

11.7 Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

11.8 Right to Complain

You have the right to complain to the UK Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with data protection law. The ICO's contact details are available at www.ico.org.uk.

To exercise any of these rights, please contact us using the details provided in Section 2.

We aim to respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

⸻

12. CHILDREN'S PRIVACY

Our website is not intended for children under the age of 13, and we do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

We sell streetwear for children, but all purchases must be made by adults (18 years or older). We do not collect personal data directly from children.

⸻

13. THIRD-PARTY LINKS

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

⸻

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will be posted on this page with an updated effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

⸻

15. CONTACT US

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us:

HMN RESALE CO

The Boatyard Mansion Lane Iver SL0 9RG

Website: www.hmnresaleco.com

Email: info@hmnresaleco.com

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).

⸻

Last Updated: 8 July 2026