Ah Ha! customer information
Privacy policy
How we handle your personal information when you shop with us or get in touch.
Last updated: 18 September 2026
Who controls your data
AH HA SHOPPING LIMITED (company number 16886254), 60 Tottenham Court Road, Fitzrovia, London W1T 2EW, is the data controller for the information described here. Contact us about privacy at hello@ahhashopping.co.uk.
What we collect
- Order details: name, delivery and billing address, email, order contents.
- Enquiries: your name, email and the message you send us.
- Payment confirmation: we are told whether a payment succeeded — we never receive your full card number.
- Basic technical information your browser sends when you visit the site.
Why we use it, and our legal basis
- To take and deliver your order, and to handle returns — to perform our contract with you.
- To answer your enquiry — our legitimate interest in responding to customers.
- To keep sales and tax records — to comply with a legal obligation.
- To send marketing emails — only if you ask us to, and you can opt out at any time.
- To measure whether our adverts work — only if you accept advertising measurement, and you can change that at any time in our cookie policy.
Who we share it with
We share only what's needed with the companies that make our shop work: Shopify (our shop and checkout platform), the suppliers and delivery companies who pack and deliver your order, our website and email hosting providers, and our accountants. Some suppliers are based outside the UK, so your delivery details may be transferred abroad with appropriate safeguards in place. We never sell your data.
If you accept advertising measurement, we also share limited visit information with Google Ireland Limited, purely so Google can tell us whether an advert brought you to the shop and whether you went on to start paying. If you decline, nothing is shared with Google.
How long we keep it
Order and transaction records are kept for six years plus the current year to meet UK tax rules. Enquiry emails are kept for up to two years. Marketing contacts are kept until you unsubscribe.
Your rights
Under UK GDPR you can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable form. Email us and we'll respond within one month.
If you're unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See our cookie policy for what is stored on your device and why.
