Privacy policy
Last updated: July 28, 2026
Şatafat is a trading name of Hallederiz Labs LTD ("we", "us", "our"). We operate this store and website (the "Services").
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit, use, or make a purchase through the Services. It also explains your rights under applicable UK data protection law.
1. Data Controller
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
Hallederiz Labs LTD (trading as Şatafat)
Registered in England and Wales
Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Company number: 16815648
Email: comsatafat@gmail.com
2. Personal Information We Collect
Depending on how you use the Services, we may collect the following categories of personal information:
Contact Details
Your name, email address, and billing address.
Payment Information
Payment information is processed by our payment service providers. We do not store full payment card details on our own systems.
Account Information
If you create an account, we may process information such as your account email address, login credentials, and order history.
Order and Transaction Information
We may process information about products purchased, order details, download activity, transaction details, and related records.
Communications
We may process information you provide when contacting us, including support enquiries and other correspondence.
Technical Information
Technical information may be collected automatically through Shopify and other service providers, including IP address, browser type, device information, and information relating to the security and operation of the Services.
As our products are digital, we do not require a physical shipping address for delivery. Any address information collected may be used for billing, tax, fraud prevention, or other legitimate business purposes.
3. How and Why We Use Your Information
We process personal information only where we have a lawful basis under applicable data protection law.
Performance of a Contract
We use personal information to:
- process and fulfil orders;
- provide access to purchased digital products;
- send order confirmations and download information;
- manage customer accounts; and
- provide customer support relating to purchases.
Legal Obligations
We may process personal information where necessary to comply with applicable legal, tax, accounting, regulatory, and consumer protection obligations.
Legitimate Interests
We may process personal information where necessary for our legitimate interests, including:
- preventing fraud and abuse;
- protecting the security of our Services;
- responding to customer enquiries;
- maintaining business and transaction records;
- improving our Services; and
- protecting and enforcing our legal rights.
We will only rely on legitimate interests where those interests are not overridden by your rights and freedoms.
Consent
Where consent is required, we will ask for it separately and clearly. For example, if we introduce optional marketing communications in the future, we will request appropriate consent before sending them where required by law.
We currently do not send marketing or promotional emails. We send transactional communications such as order confirmations, customer service messages, and digital product access or download information.
4. How We Disclose Personal Information
We do not sell your personal information.
We may share personal information with trusted third parties where necessary to operate the Services, process transactions, comply with the law, or protect our legitimate interests.
Shopify
Shopify provides the e-commerce platform and infrastructure used to operate our store, including hosting, checkout, security, and fraud-prevention services.
Airwallex
Airwallex may process payment and transaction information to facilitate payments and related payment services.
Other Service Providers
We may use other service providers where necessary for services such as email delivery, technical support, security, hosting, and store operations. Where appropriate, such providers process personal information on our behalf and under appropriate contractual arrangements.
Legal Requirements
We may disclose information where required by law, regulation, court order, legal process, or where reasonably necessary to protect our rights, property, customers, or the security of our Services.
5. Cookies and Similar Technologies
Our Services may use cookies and similar technologies that are necessary to operate the website, shopping cart, checkout, account functionality, security, and fraud prevention.
Where a cookie or similar technology is strictly necessary for a service requested by you, applicable law may allow it to be used without consent.
We currently do not intentionally use non-essential advertising or marketing cookies.
If we introduce analytics, advertising, tracking, or other non-essential technologies that require consent, we will provide appropriate information and obtain consent where required by applicable law.
Because Shopify operates important parts of the Services, Shopify and its service providers may use cookies or similar technologies as described in Shopify's own privacy and cookie information.
6. Relationship with Shopify
The Services are hosted and powered by Shopify. Shopify processes information relating to your use of the Services as necessary to provide its platform and related services.
Information submitted through the Services may be processed by Shopify and its service providers, including service providers located outside the United Kingdom, subject to applicable data protection requirements and safeguards.
7. International Transfers
Some of our service providers may process personal information outside the United Kingdom or the European Economic Area.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is lawful and protected by appropriate safeguards where required by applicable data protection law.
These safeguards may include an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide our Services, maintain transaction and tax records, resolve disputes, enforce agreements, and comply with legal obligations.
Financial and accounting records may need to be retained for a number of years under applicable tax and accounting requirements.
Account information may be retained for as long as your account remains active or as otherwise necessary for legitimate business or legal purposes.
9. Your Data Protection Rights
Subject to applicable legal conditions and exemptions, you may have the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete personal information;
- request deletion of personal information in certain circumstances;
- request restriction of processing in certain circumstances;
- object to processing based on legitimate interests in certain circumstances;
- request data portability where the right applies;
- withdraw consent where processing is based on consent; and
- complain to the Information Commissioner's Office (ICO).
To exercise your rights, contact us at comsatafat@gmail.com.
We may need to verify your identity before responding to certain requests. We will respond within the timeframe required by applicable law, normally within one month.
10. Complaints
If you have concerns about how we process your personal information, please contact us first so that we can investigate and attempt to resolve the issue.
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
ico.org.uk
11. Children's Data
Our Services are not directed at children, and we do not knowingly collect personal information from children.
If you believe that a child has provided us with personal information, please contact us so that we can investigate and take appropriate action.
12. Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
We also rely on security measures provided by service providers such as Shopify and Airwallex for relevant platform, checkout, and payment services.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, Services, technology, or applicable legal requirements.
Any updated version will be posted on this page together with an updated "Last updated" date.
14. Contact Us
Hallederiz Labs LTD (trading as Şatafat)
Email: comsatafat@gmail.com
Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Company number: 16815648