Privacy policy
Sunhiot operates www.sunhiot.com and its related shopping features, content, products and services (collectively, the “Services”). Our store is powered by Shopify.
This Privacy Policy explains how we collect, use, disclose and retain personal information when you visit our website, place an order, create an account or communicate with us. It also explains your privacy rights and choices.
For personal information whose purposes and means of processing we determine, Sunhiot acts as the data controller. Shopify and certain other providers may independently control information processed for their own services.
This Privacy Policy governs our personal information practices if there is a conflict with our Terms of Service. It is a privacy notice, not a request for blanket consent. Where consent is required for a particular activity, we request it separately.
1. Personal Information We Collect
The information we process depends on how you interact with us and which features you use.
Contact and delivery information
Your name, email address, telephone number, billing address and shipping address.
Order and transaction information
Products purchased, order amounts, discounts, payment status, delivery details, and records relating to cancellations, returns, exchanges or refunds.
Payment information
Shopify and the payment provider you select process the information needed to complete your payment. This may include card or financial account details.
We receive payment-related information needed to manage your order, such as payment status, transaction references, payment method and limited card details where supplied by the processor.
Please do not send full card numbers, card security codes, passwords or one-time verification codes to us by email.
Account information
If you create or use an account, we process account identifiers, authentication information, saved details and preferences relevant to that account.
Customer communications
Messages, enquiries, reviews and information you voluntarily provide when contacting us, including photographs submitted to explain a product issue.
Device and usage information
Your IP address, browser and device type, cookie identifiers, referring pages, pages viewed, browsing activity and interactions with our website.
Preferences and inferred interests
Shopping preferences and interests inferred from your browsing or purchase activity, where permitted by your privacy choices and applicable law.
2. Where Information Comes From
We obtain personal information:
- Directly from you when you purchase, create an account, subscribe, submit a review or contact us.
- Automatically through cookies, pixels and similar technologies when you use the Services.
- From Shopify, payment providers, fulfilment providers and carriers that help process your order.
- From analytics and advertising partners, where those services are used and permitted.
- From services you choose to connect or use, such as an express checkout provider.
3. How We Use Personal Information
We use personal information for the following purposes:
Processing orders and providing services
To process payments, prepare and deliver orders, send order updates, manage accounts and handle cancellations, returns, exchanges and refunds.
Customer support
To answer questions, investigate delivery or product issues and maintain relevant correspondence.
Website operation and improvement
To maintain the website, remember permitted preferences, understand usage, troubleshoot problems and improve the shopping experience.
Marketing and advertising
To send permitted promotional communications, measure advertising performance and display relevant advertising, subject to applicable consent requirements and opt-out rights.
Security and fraud prevention
To authenticate access, protect transactions, detect suspicious activity and investigate misuse.
Legal and administrative purposes
To maintain required records, comply with legal obligations, respond to valid legal requests and establish, exercise or defend legal claims.
4. Legal Bases for Processing
Where UK or European data protection law applies, we rely on the following legal bases, as appropriate:
- Contract: Processing needed to fulfil your order or take steps you request before a purchase.
- Legal obligation: Processing required for accounting, tax, consumer protection or other legal duties.
- Legitimate interests: Operating and securing our store, preventing fraud, providing support and improving services, where those interests are not overridden by your rights.
- Consent: Activities requiring your permission, such as certain cookies, advertising technologies or marketing communications.
Where we rely on legitimate interests, we consider the effect on your privacy. We do not use legitimate interests to bypass a requirement for consent.
Providing certain information is necessary to process an order. If you do not provide it, we may be unable to complete the purchase or arrange delivery. Optional marketing choices are not a condition of purchasing.
5. Cookies and Similar Technologies
Our website and service providers use cookies and similar technologies to support the shopping experience.
These technologies may serve the following purposes:
- Essential functions: Shopping carts, checkout, security and account access.
- Preferences: Remembering choices such as language or region.
- Analytics: Understanding website use and measuring performance.
- Advertising: Measuring campaigns and supporting personalised advertising.
Where required by law, we request consent before using non-essential technologies. You can manage available choices through the website’s cookie banner or privacy settings and change your preferences later.
You can also manage cookies through your browser. Blocking essential cookies may affect checkout or other website functions.
For information about Shopify’s use of these technologies, see its Cookie Policy.
6. Marketing and Advertising Choices
You can unsubscribe from promotional emails using the unsubscribe link in the message or by contacting hello@sunhiot.com.
Unsubscribing from marketing does not stop essential communications, such as order confirmations, delivery updates or responses to your enquiries.
Depending on your location and applicable law, you may also opt out of certain advertising-related uses of your information through our Data Sharing Opt-Out page.
Some advertising-related disclosures may be considered a “sale,” “sharing” or “targeted advertising” under applicable US privacy laws, even where no money is exchanged.
Where legally required, we honour recognised opt-out preference signals, including Global Privacy Control, for the relevant browser or device and any associated account as required by law. You may need to set preferences separately on other browsers or devices.
A browser’s “Do Not Track” setting is different from Global Privacy Control and may not automatically change our website’s privacy settings.
7. How We Share Personal Information
We disclose personal information where necessary for the purposes described in this policy.
Service providers
This includes Shopify and providers supporting payments, hosting, order fulfilment, shipping, customer support, analytics and other store operations.
Fulfilment providers and carriers receive information needed to prepare and deliver your order, such as your name, address and relevant contact details.
Payment providers
The provider you select receives information needed to process your payment and provide its services. Providers such as express checkout or instalment services may also process information under their own privacy notices.
Advertising and marketing partners
Where enabled and permitted, these partners may receive identifiers, device information, browsing activity or transaction events to measure campaigns or provide relevant advertising.
At your direction
We may disclose information when you request it or choose to use an integration or third-party feature.
Legal and business circumstances
We may disclose information to professional advisers, authorities or other parties where necessary to comply with law, protect rights, investigate fraud or address a business sale or restructuring, subject to appropriate safeguards.
8. Our Relationship with Shopify
Shopify hosts our store and processes personal information to provide checkout, hosting and other commerce services.
Depending on the features enabled and your interactions, Shopify may also process information for its own purposes, including security, service improvement, personalisation and advertising. Those activities may involve information from your interactions with Shopify and other merchants.
Where Shopify determines the purposes and means of its processing, Shopify is responsible for that processing and the associated privacy rights requests.
You can learn more through:
For information processed by Sunhiot, please contact us using the details below.
9. International Data Transfers
Shopify, payment providers, fulfilment providers and other service providers may process information outside your country of residence.
Where UK or European data protection law requires safeguards for an international transfer, we use an applicable lawful mechanism, such as an adequacy decision, Standard Contractual Clauses, the UK International Data Transfer Agreement or the UK Addendum, as appropriate.
You may contact us for information about the safeguards relevant to your personal information.
10. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including applicable legal requirements.
Retention depends on the information and its purpose:
- Order and payment records are retained for fulfilment, refunds, accounting, tax and dispute-related requirements.
- Account information is retained while needed to maintain the account and meet associated obligations.
- Customer support records are retained for resolving enquiries and maintaining relevant service history.
- Marketing preferences are retained to manage subscriptions and respect opt-out requests.
- Security and usage records are retained for appropriate operational and security purposes.
When information is no longer needed, we delete or anonymise it, or securely restrict its use where continued retention is required.
11. Security
We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or disclosure.
No website, storage system or transmission method can guarantee absolute security.
Please keep your account credentials confidential and avoid sending sensitive payment or identity information through ordinary email unless we have provided an appropriate secure process.
12. Your Privacy Rights
Depending on where you live and which laws apply, you may have the right to:
- Access personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Receive a portable copy of certain information.
- Restrict or object to certain processing.
- Withdraw consent where processing relies on consent.
- Opt out of qualifying sale, sharing or targeted advertising.
- Challenge certain significant decisions based solely on automated processing, where applicable.
- Appeal a decision on a privacy request where provided by law.
You have the right to object to the use of your personal information for direct marketing where applicable.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Rights are subject to applicable conditions and exceptions. For example, we may need to retain transaction records to comply with legal requirements even if you request deletion.
13. How to Exercise Your Rights
Contact hello@sunhiot.com and describe your request. You may also use the privacy controls linked in this policy.
We may request information reasonably necessary to verify your identity and protect your information. Where permitted, an authorised agent may act on your behalf after providing appropriate evidence of authorisation.
We respond within the time required by applicable law and will explain any permitted extension or refusal.
We will not discriminate against you for exercising applicable privacy rights.
If a request is declined, you may ask us to review the decision by emailing hello@sunhiot.com with the subject “Privacy Request Appeal.”
14. Children’s Information
Our Services are intended for adult shoppers. Children’s products, where offered, are intended to be purchased by a parent, guardian or other adult.
We do not knowingly collect personal information directly from children under 16. If you believe a child has provided personal information, please contact us so we can investigate and take appropriate action.
We do not knowingly sell or share personal information of individuals under 16 for targeted advertising.
15. Third-Party Websites and Public Content
Our website may contain links to external websites or services. Their privacy practices are governed by their own notices.
If you post a public review or other public content, the information you include may be visible to others. Please do not include information you do not want made public.
A link to another website does not, by itself, indicate that we endorse its content or privacy practices.
16. Complaints
If you have concerns about how we handle personal information, please contact hello@sunhiot.com.
You may also complain directly to the relevant data protection authority without contacting us first.
In the United Kingdom, you can contact the Information Commissioner’s Office.
If you live in the European Economic Area, you can find your local authority through the European Data Protection Board.
Other customers may contact the relevant privacy regulator or public authority in their jurisdiction.
17. Changes to This Privacy Policy
We may update this policy to reflect changes in our practices, services or legal obligations.
We will publish the revised policy on this page and update the “Last Updated” date. Where required, we will provide additional notice or request consent before applying a change.
18. Contact Us
For privacy questions or to exercise your rights, contact:
Store Name / Data Controller: Sunhiot
Website: www.sunhiot.com
Email: hello@sunhiot.com
Phone: +44 117 244 9234
Business Address:
2 Robinson Dr, St Jude's
Bristol BS5 0UU
United Kingdom
Customer Service Hours:
Monday–Friday, 9:00 AM–6:00 PM
UK time — GMT in winter and BST in summer.
- Choosing a selection results in a full page refresh.