Privacy Policy
Privacy Notice
HJ Hall (Pantherella International Group Ltd)
Last revised: June 2026
This Privacy Notice for Pantherella International Group Ltd (trading as HJ Hall) (‘we’, ‘us’, or ‘our’) describes how and why we collect, store, use, and share your personal information when you use our services, including when you:
• Visit our website at https://www.hj.co.uk or any website of ours that links to this Privacy Notice
• Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our services. If you have any questions, please contact us at customerservices@hjhall.com
Summary of Key Points
What personal information do we process?
When you visit, use, or navigate our services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.
Do we process any sensitive personal information?
We do not process sensitive personal information.
Do we collect any information from third parties?
We do not collect any information from third parties.
How do we process your information?
We process your information to provide, improve, and administer our services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
With whom do we share personal information?
We may share information in specific situations and with specific categories of third parties, including our technology and fulfilment partners such as Shopify, Stripe, and PayPal.
How do we keep your information safe?
We have appropriate organisational and technical processes in place to protect your personal information. However, no electronic transmission over the internet can be guaranteed to be 100% secure.
What are your rights?
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, or delete it.
Table of Contents
• 1. What Information Do We Collect?
• 2. How Do We Process Your Information?
• 3. What Legal Bases Do We Rely On?
• 4. When and With Whom Do We Share Your Personal Information?
• 5. Do We Use Cookies and Other Tracking Technologies?
• 6. Is Your Information Transferred Internationally?
• 7. How Long Do We Keep Your Information?
• 8. How Do We Keep Your Information Safe?
• 9. Do We Collect Information From Minors?
• 10. What Are Your Privacy Rights?
• 11. Controls for Do-Not-Track Features
• 12. Do We Make Updates to This Notice?
• 13. How Can You Contact Us About This Notice?
• 14. How Can You Review, Update, or Delete Your Data?
1. What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide to us when you register on our site, place an order, or otherwise contact us. This may include:
• Names
• Phone numbers
• Email addresses
• Delivery and billing addresses
• Account passwords
Payment Data. We may collect data necessary to process your payment, such as your payment instrument number and security code. All payment data is handled and stored by Stripe and PayPal. You can find their privacy notices at https://stripe.com/docs/security and https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
Information automatically collected
We automatically collect certain information when you visit our website. This may include your IP address, browser type, device characteristics, operating system, language preferences, referring URLs, and information about how and when you use our services. This information is primarily used to maintain security, operate our services, and for internal analytics.
We also collect information through cookies and similar technologies. For more details, please see our Cookie Notice at https://www.hj.co.uk/cookies.
Information collected via Shopify
Our website is built on Shopify. When you browse or purchase from hj.co.uk, Shopify collects data on our behalf as a data processor. This includes order information, browsing behaviour, and technical data. For more information on how Shopify handles data, please see Shopify’s Privacy Policy at https://www.shopify.com/legal/privacy.
2. How Do We Process Your Information?
We process your personal information for the following purposes:
• To facilitate account creation, authentication, and management
• To process and fulfil your orders, including payments, returns, and exchanges
• To respond to your enquiries and provide customer support
• To send you administrative information, such as order confirmations and policy updates
• To send you marketing and promotional communications, where you have consented or we have a legitimate interest to do so — you can opt out at any time
• To deliver targeted advertising tailored to your interests
• To protect the security of our services and prevent fraud
• To analyse usage trends and improve our website and services
• To comply with our legal obligations
3. What Legal Bases Do We Rely On?
Under UK GDPR, we must have a valid legal basis to process your personal information. We rely on the following:
Consent. Where you have given us permission to use your information for a specific purpose, such as marketing emails. You can withdraw your consent at any time.
Performance of a Contract. Where processing is necessary to fulfil an order or provide a service you have requested.
Legitimate Interests. Where we have a legitimate business reason to process your data that does not override your rights — for example, to send information about relevant offers, prevent fraud, or improve our services.
Legal Obligations. Where we are required to process your information to comply with the law.
Vital Interests. In rare circumstances, where processing is necessary to protect someone’s life.
4. When and With Whom Do We Share Your Personal Information?
We may share your data with third-party service providers who perform services on our behalf and are contractually required to protect your data. These include:
• Shopify — our e-commerce platform provider
• Stripe and PayPal — payment processors
• Ad networks and retargeting platforms
• Data analytics services
• Data storage and hosting providers
• User account and authentication services
• Order fulfilment and logistics providers
Named third-party services
We currently use the following third-party services which may process your personal data:
● Meta (Facebook & Instagram Ads) — used for advertising and remarketing. Meta may use your data to show you relevant ads on Facebook and Instagram. You can manage your ad preferences at https://www.facebook.com/ads/preferences. Meta’s privacy policy: https://www.facebook.com/privacy/policy
● Google Ads — used for advertising and remarketing, including Google Search and Display Network. Google’s privacy policy: https://policies.google.com/privacy
● Klaviyo — used for email and SMS marketing. Klaviyo processes your name, email address, and purchase history to send you marketing communications where you have consented. Klaviyo’s privacy policy: https://www.klaviyo.com/legal/privacy-notice
● Reviews.io — used to collect and display customer reviews. Reviews.io may contact you by email after a purchase to invite you to leave a review. Reviews.io’s privacy policy: https://www.reviews.io/privacy-policy
We may also share your information in connection with a business transfer, such as a merger, acquisition, or sale of assets.
5. Do We Use Cookies and Other Tracking Technologies?
Yes. We use cookies and similar tracking technologies to collect and store information when you interact with our website. Some cookies are essential for the site to function; others help us with analytics and advertising. Third parties, including Shopify and advertising partners, may also place cookies on our site.
For full details on the cookies we use and how to manage them, please see our Cookie Notice at https://www.hj.co.uk/cookies.
6. Is Your Information Transferred Internationally?
Our servers are located in the United Kingdom and United States. By using our services, your information may be transferred to, stored in, or processed in countries outside your own, including by Shopify and other third-party providers.
Where we transfer personal information outside the UK or EEA, we ensure appropriate safeguards are in place, including the use of the UK International Data Transfer Agreement (IDTA) or European Commission Standard Contractual Clauses (SCCs). Further details are available on request.
7. How Long Do We Keep Your Information?
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this notice, or as required by law (for example, for tax and accounting purposes). When we no longer have a legitimate need to process your information, we will delete or anonymise it.
8. How Do We Keep Your Information Safe?
We have implemented appropriate technical and organisational security measures to protect your personal information. However, no system is completely secure, and we cannot guarantee that your data will never be accessed without authorisation. You should only access our services over a secure connection.
9. Do We Collect Information From Minors?
We do not knowingly collect data from or market to anyone under the age of 18. By using our services, you confirm that you are at least 18 years old. If we become aware that we have collected data from a minor, we will take steps to delete it promptly. Please contact us at customerservices@hjhall.com if you believe this has occurred.
10. What Are Your Privacy Rights?
If you are located in the United Kingdom or European Economic Area (EEA), you have rights under data protection law, including the right to:
• Access a copy of the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal information in certain circumstances
• Restrict or object to certain types of processing
• Request that your data be transferred to another organisation (data portability)
• Withdraw your consent at any time where processing is based on consent
To exercise any of these rights, please contact us at customerservices@hjhall.com You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at https://ico.org.uk, or your relevant Member State data protection authority if you are in the EEA.
Opting out of marketing: We use Klaviyo to manage our email marketing. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. Our marketing emails are sent only where you have given your consent or we have a legitimate interest under UK GDPR and the Privacy and Electronic Communications Regulations (PECR). Please note that we may still send you service-related communications necessary for your account, such as order confirmations.
11. Automated Decision-Making and Personalisation
We use automated tools to personalise your experience on hj.co.uk. This includes product recommendations, personalised content, and targeted marketing based on your browsing and purchase history. These tools do not make decisions that have a legal or similarly significant effect on you, but they do influence what content and offers you see.
Specifically, we use:
● Shopify’s built-in product recommendation engine, which suggests products based on your browsing and purchase history
● Klaviyo’s segmentation and automated email flows, which personalise marketing communications based on your behaviour on our site
● Meta and Google Ads audience matching and lookalike targeting, which may use your data to show you relevant advertisements off-site
You have the right to object to profiling used for direct marketing purposes. To do so, please contact us at customerservices@hjhall.com or unsubscribe from marketing communications at any time.
12. Controls for Do-Not-Track Features
Some browsers include a Do-Not-Track (‘DNT’) feature that signals your preference not to have your browsing activity tracked. As no uniform standard for DNT has been adopted, we do not currently respond to DNT signals. If a standard is adopted in the future, we will update this notice accordingly.
12. Do We Make Updates to This Notice?
Yes. We may update this Privacy Notice from time to time to reflect changes in law or our practices. The revised date at the top of this notice will always indicate when it was last updated. We encourage you to review this notice periodically.
13. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, please contact us:
HJ Hall (Pantherella International Group Ltd)
25 Pavillion Way, Loughborough, LE11 5GW
Email: customerservices@hjhall.com
Phone: 0116 283 1111
Website: https://www.hj.co.uk
We are the data controller of your personal information under UK GDPR. For any data protection queries, please use the contact details above.
14. How Can You Review, Update, or Delete Your Data?
You can review or update your account information at any time by logging into your account on hj.co.uk. To request deletion of your personal information or to submit a data subject access request, please contact us at customerservices@hjhall.com. We will respond in accordance with applicable data protection law.