Cookies

1. About this Cookie Policy

1.1 This Cookie Policy explains how Haarfen uses cookies and similar storage or access technologies on haarfen.com.

1.2 The main policy explains categories, purposes, providers and consent controls. The live cookie-preference centre contains the most current technical inventory, including cookie or technology names and durations where available.

1.3 Haarfen maintains an internal cookie register and will periodically scan and test the live Website and connected applications.

1.4 Specific cookie names are included in a written policy only where they are stable and verified. A static list does not override the live preference centre.

1.5 This Cookie Policy is a transparency notice and does not vary the contractual document hierarchy or reduce statutory rights.

2. About Haarfen

The website is operated by:

Legal name

Haarfen Ltd

Company number

16580076

Registered in

England and Wales

Registered office

Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE

VAT registration number

497 4339 40

Privacy email

privacy@haarfen.com

Customer-service email

care@haarfen.com

Telephone

0333 444 0317

In this policy:

"Haarfen", "we", "us" and "our" mean Haarfen Ltd.
"website" means haarfen.com and the associated Shopify checkout and customer-account pages.
"device" means a computer, telephone, tablet or other equipment used to access the website.

3. What are cookies?

3.1 A cookie is a small text file or piece of information stored on your device when you visit a website.

3.2 Cookies can allow a website to:

recognise a browser or device
maintain a shopping basket
keep a customer signed in
remember preferences
complete checkout securely
understand how the website is used
prevent fraud
measure advertising; and
personalise content or marketing.

3.3 Cookies may be:

session cookies, which normally expire when you close your browser; or
persistent cookies, which remain until their stated expiry date or until you delete them.

3.4 Cookies can also be:

first-party cookies, set through Haarfen's website domain; or
third-party cookies, set by another organisation whose technology is used through the website.

4. Similar technologies

4.1 The legal rules do not apply only to traditional cookies.

4.2 Haarfen and its service providers may also use:

tracking pixels
web beacons
scripts and tags
local storage
software development kits
device identifiers
link-decoration technologies
conversion tags
browser storage
server-side tracking; and
similar technologies that store information on, or access information from, a device.

4.3 References to "cookies" in this policy include these similar technologies unless the context requires otherwise.

UK rules apply to technologies that store information on or access information from a person's device, including pixels, scripts, local storage and device identifiers-not only files labelled as cookies.

5. Shopify and Haarfen's cookie controls

5.1 Haarfen uses Shopify to operate the Website, customer accounts, basket and checkout.

5.2 Haarfen uses a consent-management platform and Shopify privacy controls to manage storage and access technologies for UK visitors.

5.3 The controls are configured so that strictly necessary technologies may operate automatically and optional technologies remain disabled until the required consent is given.

5.4 The banner will present accepting and rejecting optional technologies with comparable ease and prominence.

5.5 Visitors may choose analytics and advertising separately where those categories are used.

5.6 Refusing optional technologies will not prevent ordinary browsing or checkout, although an optional feature may be unavailable.

5.7 Haarfen may record the consent choice, timestamp, region, consent-platform identifier and policy version to demonstrate and respect the choice.

6. When consent is required

6.1 At launch, Haarfen requires prior consent for optional analytics, performance measurement, advertising, retargeting, audience matching, social-media tracking, embedded-content tracking and similar non-essential purposes.

6.2 Consent must be freely given, specific, informed and indicated by a clear affirmative choice.

6.3 Optional technologies will not be activated merely because a visitor continues browsing, closes the banner or fails to make a choice.

6.4 Consent may be withdrawn as easily as it was given through the preference centre.

6.5 Where a technology has mixed purposes, Haarfen will treat it as requiring consent unless every non-consensual use is independently permitted.

7. Technologies that may operate without consent

7.1 Communication and transmission

Technologies used solely to transmit a communication over an electronic communications network may operate where the legal conditions are met.

7.2 Strictly necessary services

Technologies strictly necessary to provide a service expressly requested by the user may operate without optional consent. Examples may include basket, checkout, payment security, fraud prevention, load balancing, authentication and consent-preference storage.

7.3 Statistical-purpose exception

Haarfen reserves the ability to use a legally permitted statistical-purpose exception only after verifying that the technology is used solely to produce aggregate statistics needed to improve the service, does not identify or profile users, is not used for advertising or mixed purposes, and provides any required simple and free means of objection.

Haarfen's launch position is stricter: optional analytics will remain disabled until consent unless and until a compliant exempt configuration is documented and approved.

7.4 Appearance and functionality

A preference or functionality technology will operate without consent only where the applicable legal exception is satisfied. Otherwise it will remain optional.

8. Categories of cookies used by Haarfen

The cookies and similar technologies used through the website fall into the following categories.

8.1 Strictly necessary cookies

These support fundamental website functions, including:

website and checkout security
fraud prevention
basket contents
checkout progression
payment processing
customer-account login
network management
consent-preference storage
currency and country selection; and
protection against malicious or unauthorised activity.

These technologies cannot normally be disabled through the cookie banner because the requested service could not operate properly without them.

You may block them through your browser, but doing so may prevent parts of the website from working.

8.2 Functional and preference cookies

These may be used to:

remember language or regional preferences
retain interface settings
remember customer-account choices
support chat and customer-service functions
provide saved Products or wish-list features
remember display preferences; and
improve website functionality.

Some functional technologies may operate under a statutory exception. Others will be treated as optional and require consent.

8.3 Analytics and performance cookies

These may be used to understand:

the number of website visits
which pages and Products are viewed
how visitors reached the website
how long visitors use particular pages
browser and device categories
broad geographic information
website loading speed
basket and checkout journeys
errors and technical faults
conversion performance; and
general website usability.

Haarfen may use:

Shopify Analytics
Google Analytics; and
other analytics services identified through the cookie-preference controls.

Where analytics are linked to advertising, conversion tracking, customer segmentation or identifiable visitor journeys, consent will be required.

8.4 Advertising and marketing cookies

Subject to consent, these may be used to:

show relevant advertisements
retarget website visitors
remember Products viewed
measure advertising engagement
record advertising conversions
limit how often an advertisement is shown
connect a website purchase to an advertisement
build advertising audiences
match customer identifiers with an advertising-platform account; and
measure campaign performance.

Haarfen may use advertising technologies provided by:

Google
Meta, including Facebook and Instagram
Pinterest
Shopify; and
other platforms identified in the cookie controls.

Rejecting these technologies does not prevent you from viewing the website or placing an order. It may mean that advertising shown elsewhere is less relevant.

8.5 Social-media and embedded-content technologies

The website may contain:

social-media links
social-media content
embedded photographs or posts
video content
sharing tools; or
other content hosted by external platforms.

A normal link to an external website does not ordinarily cause Haarfen to set that external provider's cookies before you follow the link.

Embedded content may allow the external provider to receive device and activity information. Where required, the embed will be:

blocked until consent
loaded only after you choose to interact with it; or
presented through a privacy-enhanced configuration.

Once you leave Haarfen's website or actively load third-party content, the external provider's own privacy and cookie terms apply.

8.6 Customer-service and live-chat technologies

Shopify Inbox, live chat or chatbot services may use cookies or browser storage to:

maintain a chat session
remember an enquiry
connect messages with an account or order
prevent spam and misuse
provide automated responses; and
transfer a conversation to a human adviser.

Technologies essential to a chat service you deliberately request may operate as necessary. Analytics, advertising or unrelated tracking through the chat provider will require consent where applicable.

8.7 Review technologies

A review provider may use cookies to:

display customer reviews
verify review submissions
prevent duplicate or fraudulent reviews
remember review-session information; and
measure engagement with review features.

The identity of the enabled review provider and any applicable optional technologies will be shown through Haarfen's cookie controls or Privacy Policy.

8.8 Payment and finance technologies

Payment, digital-wallet and consumer-finance providers may use cookies when you:

select their payment option
sign in to their service
request an eligibility decision
complete identity or fraud checks
authorise payment; or
manage an instalment arrangement.

Relevant providers may include:

Shopify Payments
Shop Pay
PayPal
PayPal Credit
Klarna
Clearpay; and
other payment methods displayed at checkout.

Some of these technologies are necessary to complete the payment service you request. Other analytics or promotional technologies used by those providers may be subject to consent and the provider's own controls.

9. Current Shopify storefront cookies

9.1 Haarfen does not rely on a fixed written list as the definitive inventory because Shopify, applications, payment services and integrations may change technologies over time.

9.2 The live cookie-preference centre contains the current technical inventory available to Website visitors.

9.3 Haarfen will keep an internal register recording the provider, technology, category, purpose, duration, legal basis or exception, data involved and date last verified.

9.4 Haarfen will update the controls and notices where a scan or provider change identifies a new or reclassified technology.

10. Third-party providers

10.1 Third-party technologies may be provided by organisations including:

Shopify
Google
Meta
Pinterest
PayPal
Klarna
Clearpay
review-service providers
customer-service providers; and
other apps or platforms used by Haarfen.

10.2 A third party may act:

as Haarfen's data processor
as a joint controller in limited circumstances; or
as an independent controller for its own payment, advertising, platform or regulated activities.

10.3 Where a third party acts independently, its own privacy and cookie information applies to its processing.

10.4 Haarfen does not control cookies set after you independently visit a third-party website or service.

10.5 Haarfen regularly reviews enabled apps and pixels to identify:

what information they collect
why they collect it
whether consent is required
whether they respect Shopify's consent signal
how long information is retained; and
whether the technology remains necessary.

11. Managing your cookie choices

11.1 You may accept all optional technologies, reject all optional technologies or manage available categories through the preference centre.

11.2 The reject option will be presented with comparable ease and prominence to the accept option.

11.3 Analytics and advertising choices will be separated where those categories are used.

11.4 You may reopen the preference centre and withdraw or change a choice.

11.5 Withdrawal does not make earlier lawful processing unlawful, but it will prevent future optional activation once the choice is applied.

12. Objecting to exempt analytics or preference technologies

12.1 Where Haarfen relies on the statistical-purpose or appearance exception instead of consent, you may object free of charge.

12.2 You may object by:

using the relevant option in Cookie Preferences where available; or
emailing privacy@haarfen.com.

12.3 Following a valid objection, Haarfen will stop the relevant exempt use for that browser or account where reasonably possible.

12.4 The objection does not require Haarfen to disable strictly necessary technologies required to provide a service you request.

13. Browser controls

13.1 Most browsers allow you to:

view stored cookies
delete individual cookies
delete all cookies
block particular websites
block third-party cookies
block all cookies; or
receive a warning before cookies are stored.

13.2 The exact controls depend on the browser and device.

13.3 Blocking all cookies may prevent the website from:

retaining basket contents
completing checkout
keeping you signed in
remembering privacy choices
applying a discount
processing payment; or
providing other requested functions.

13.4 Deleting the consent-preference cookie may cause the cookie banner to appear again.

14. How long cookies remain

14.1 Cookie duration depends on the technology and purpose.

14.2 Session cookies normally expire when the browser session ends.

14.3 Persistent cookies remain until:

their stated expiry date
you delete them
the provider deletes them; or
Haarfen or the provider withdraws the technology.

14.4 Haarfen seeks to use the shortest duration reasonably appropriate for each purpose.

14.5 Standard Shopify storefront cookies currently range from approximately one minute to one year, depending on their purpose. Basket-related cookies generally remain for up to two weeks, while certain Shopify analytics, marketing, consent and essential cookies may remain for up to one year.

14.6 Third-party cookie durations may change as providers update their services. The current duration available to Haarfen will be shown through Cookie Preferences or the relevant provider's cookie information.

14.7 A cookie's expiry may be renewed when you revisit the website or interact with the relevant service.

15. Information collected through cookies

Depending on the technology, information may include:

IP address
browser type and version
device type
operating system
screen size
approximate location
language
cookie or advertising identifiers
referral source
pages and Products viewed
searches
basket activity
checkout events
purchase events
account-session information
advertisement interactions
date and time
session duration
error and performance information; and
consent preferences.

This information may be personal data where it identifies you directly or can reasonably be linked to you, an account or a device.

16. How cookie information is used

Cookie information may be used to:

provide the website and checkout
maintain account and basket sessions
protect the website and customers
detect fraud and technical faults
remember preferences
understand website performance
improve website design
assess Product interest
measure campaign performance
provide personalised advertising
prevent repeated advertising
operate customer-service tools
verify payments
comply with legal obligations; and
establish or defend legal rights.

Further information about the purposes, lawful bases, recipients, international transfers, retention and individual rights is provided in Haarfen's Privacy Policy.

17. International processing

17.1 Shopify and other technology providers may process information outside the United Kingdom.

17.2 Where cookie information is personal data and is transferred internationally, Haarfen will use or require an appropriate lawful transfer mechanism as explained in the Privacy Policy.

17.3 Relevant safeguards may include:

UK adequacy regulations
the UK International Data Transfer Agreement
the UK Addendum to approved European Union contractual clauses
binding corporate rules; or
another lawful safeguard or exception.

18. Security

18.1 Haarfen uses reasonable measures designed to protect personal information collected through cookies and similar technologies.

18.2 These measures may include:

secure Shopify infrastructure
access controls
encryption in transit
restricted administrative access
provider due diligence
account authentication
monitoring
security logging; and
contractual obligations imposed on service providers.

18.3 No internet or storage system can be guaranteed to be completely secure.

19. Children

19.1 Haarfen's website is not directed at children.

19.2 Customers must be at least 18 years old to create an account or place an order.

19.3 Haarfen does not knowingly use cookies to profile children for advertising.

19.4 Where Haarfen learns that optional tracking has been associated with a child without appropriate authority, it may take steps to delete, restrict or prevent the relevant processing.

20. Changes to the cookies used

20.1 Haarfen may add, remove or change technologies when the Website, Shopify configuration, applications, providers or features change.

20.2 Before enabling a materially new optional technology, Haarfen will classify it, update the internal register and preference centre, assess the lawful basis or exception and obtain consent where required.

20.3 Periodic scans will be supplemented by manual testing of checkout, accounts, embedded media, reviews, chat, analytics and advertising integrations.