Privacy policy
Last updated: 15 September 2026
Raw Halo Ltd (“Raw Halo”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share your personal information when you visit rawhalo.com, create an account, make a purchase, contact us, sign up to receive marketing communications or otherwise interact with our website and services.
Raw Halo Ltd is the data controller responsible for the personal information described in this Privacy Policy.
Our contact details are:
Raw Halo Ltd
Unit 5493, PO Box 6945
London
W1A 6US
United Kingdom
Email: hello@rawhalo.com
1. Personal information we collect
The personal information we collect depends on how you interact with us.
Information you provide to us
We may collect:
- your name;
- email address;
- telephone number;
- billing and delivery addresses;
- account information and preferences;
- information required to process and fulfil your orders;
- information about products you purchase, return or otherwise interact with;
- subscription information;
- product reviews you submit;
- marketing preferences; and
- information you provide when you contact us by email, contact form, live chat or social media.
Payment information
Payments made through our website are processed using payment services available through Shopify and other payment providers, which may include Shopify Payments, Shop Pay, PayPal, Apple Pay and Google Pay.
Payment providers process the payment information required to complete your transaction. Raw Halo does not need to receive or store your complete payment card details in order to process your order.
Information collected automatically
When you visit our website, certain information may be collected automatically, including:
- your IP address;
- device and browser information;
- pages and products viewed;
- interactions with our website;
- referring website or source;
- approximate location derived from your IP address;
- shopping basket activity;
- purchase activity; and
- cookie and similar technology identifiers.
We use cookies and similar technologies as described further below.
2. How we use your personal information and our lawful bases
UK data protection law requires us to have a lawful basis for processing your personal information.
Depending on the circumstances, we rely on the following lawful bases.
Fulfilling your orders and providing our services
We use your personal information to:
- process and fulfil orders;
- process payments;
- arrange delivery;
- manage returns, refunds and customer enquiries;
- administer customer accounts;
- provide subscription services;
- send service messages relating to your orders or account; and
- provide products and services you have requested.
Our lawful basis for this processing is generally performance of a contract, or taking steps at your request before entering into a contract.
Customer service and communications
We use information you provide to respond to enquiries, resolve problems and provide customer support.
Our lawful basis is generally performance of a contract where the communication relates to an order or service, or our legitimate interests in providing effective customer service and operating our business.
Accounting, tax and legal obligations
We retain and process certain transaction, payment and customer information where necessary for accounting, taxation, regulatory and other legal purposes.
Our lawful basis is compliance with a legal obligation.
Fraud prevention and security
We may process personal information to protect our customers, website and business, prevent fraudulent transactions, investigate suspicious activity and maintain the security of our services.
Our lawful basis is our legitimate interests in protecting Raw Halo, our customers and our services from fraud, misuse and security threats, and where applicable compliance with our legal obligations.
Improving our website and services
We may use information about how customers interact with our website to understand how our website performs, improve our products and services and improve the customer experience.
Where this involves non-essential cookies or similar tracking technologies, we will obtain consent where required. In other circumstances, we may rely upon our legitimate interests in understanding and improving our business and services.
Marketing
If you sign up to receive marketing communications from us, we may use your name, email address, purchase history and interests to send you news, offers, product information and other marketing communications from Raw Halo.
We currently send marketing communications by email using services including Shopify and Mailchimp.
Where required, our lawful basis is your consent. In certain circumstances, we may send marketing about our own similar products to existing customers where permitted under applicable electronic marketing rules and where an appropriate opportunity to opt out has been provided.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails or contacting us at hello@rawhalo.com.
Unsubscribing from marketing will not prevent us from sending necessary non-marketing communications, such as order confirmations and delivery information.
We do not sell customer mailing lists or personal information to third parties.
3. Abandoned checkouts
If you begin placing an order but do not complete your purchase, Shopify may retain information about your checkout and we may send you an abandoned-checkout reminder where permitted.
You can opt out of marketing communications using the unsubscribe link contained in our emails.
4. Cookies, analytics and advertising
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function, for example to operate the shopping basket, checkout and account functionality.
With your consent where required, we may also use non-essential cookies and similar technologies to:
- understand how visitors use our website;
- measure website performance;
- measure the effectiveness of advertising;
- understand which advertisements or marketing channels brought visitors to our website; and
- show or measure advertising on other platforms.
Services used for these purposes may include:
- Google Analytics;
- Google Ads; and
- Meta technologies, including the Meta Pixel and advertising on Facebook and Instagram.
These providers may receive information about your device and your interactions with our website.
We use Shopify's cookie consent tools to allow visitors to manage their cookie preferences where applicable. Non-essential cookies and tracking technologies that require consent should not be used until the appropriate consent has been obtained.
You can change your cookie preferences using the cookie controls available on our website.
5. Who we share personal information with
We only share personal information where necessary for the purposes described in this Privacy Policy.
This may include sharing information with:
Shopify
Our online store is hosted by Shopify. Shopify provides the ecommerce technology that enables us to operate our website, customer accounts and checkout.
Shopify may process information about your use of our store in accordance with its own privacy practices.
Payment providers
We share information as necessary with payment providers used to securely process your payment, which may include Shopify Payments, Shop Pay, PayPal, Apple Pay and Google Pay.
Fulfilment and delivery providers
We share the information required to prepare and deliver your order with our fulfilment and delivery partners.
Our fulfilment provider is Teamwork Handling Ltd, and our delivery partners may include Royal Mail and DPD.
Typically, this includes information such as your name, delivery address, contact information and information required to fulfil your order.
Technology and service providers
We use third-party services to help operate our website and provide services to customers. These include:
- Appstle, which provides subscription functionality;
- Tidio, which provides live-chat functionality;
- Judge.me, which provides customer review functionality;
- Mailchimp, which we use for email marketing; and
- providers of analytics, advertising, website hosting, IT and other technical services.
These providers may process personal information where necessary to provide their services to us.
Advertising and analytics providers
Where you have provided the required consent, information about your interaction with our website may be processed by advertising and analytics providers such as Google and Meta for analytics, advertising measurement and related purposes.
Professional advisers and authorities
We may disclose personal information to accountants, legal advisers, insurers, regulators, law enforcement agencies, courts or other authorities where reasonably necessary or legally required.
Business transactions
If Raw Halo is involved in a sale, merger, restructuring or other business transaction, relevant personal information may be disclosed to prospective purchasers and professional advisers where necessary and subject to appropriate safeguards.
We do not sell your personal information.
6. Product reviews
If you submit a product review through our website, information you choose to include in that review may be displayed publicly.
Our reviews are currently provided through Judge.me. Please avoid including sensitive or unnecessary personal information in a public review.
7. Live chat and social media
If you contact us using our website's live-chat service, information you provide may be processed through our live-chat provider, Tidio.
If you contact us through social media platforms such as Facebook or Instagram, the relevant social-media provider will also process information in accordance with its own privacy policy.
8. How long we keep your information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, tax and regulatory requirements and resolving disputes.
As a general guide:
Order and transaction records: We generally retain relevant order, invoice and transaction records for at least six years after the end of the relevant accounting period, or longer where required by law or necessary in connection with a dispute or enquiry.
Customer account information: We retain account information while your account remains active and for a reasonable period afterwards. We may delete or anonymise inactive account information where it is no longer required, subject to any information we need to retain for legal, accounting or other legitimate purposes.
Customer-service communications: We generally retain customer-service correspondence for up to three years after the matter is resolved, unless we need to retain it for longer in connection with an order, dispute, legal obligation or other legitimate reason.
Marketing information: We retain marketing information while you remain subscribed. If you unsubscribe or object to marketing, we may retain limited information on a suppression list so that we can respect your preference and avoid contacting you again.
Analytics and cookie information: Retention periods vary according to the technology and provider used. Where appropriate, these are controlled through our cookie settings and the settings of the relevant service provider.
When information is no longer required, we will delete or anonymise it where appropriate.
9. International transfers
Some of the companies that provide services to us, including Shopify and certain technology, analytics, payment and marketing providers, operate internationally. This means that personal information may sometimes be processed outside the United Kingdom.
Where personal information is transferred outside the UK, we take steps to ensure that an appropriate level of protection is provided in accordance with applicable UK data protection law.
Depending on the destination and provider, this may include relying on UK adequacy regulations or appropriate contractual safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.
You may contact us at hello@rawhalo.com if you would like further information about the safeguards applicable to international transfers of your personal information.
10. Children's information
Our website and products are intended to be purchased by adults and we do not knowingly collect personal information directly from children through our services.
If you believe a child has provided personal information to us without appropriate authorisation, please contact us at hello@rawhalo.com so that we can investigate and, where appropriate, delete it.
11. Your data protection rights
Depending on the circumstances, UK data protection law gives you rights in relation to your personal information.
These may include the right to:
- access the personal information we hold about you;
- correct inaccurate or incomplete personal information;
- request deletion of your personal information in certain circumstances;
- restrict how we use your personal information in certain circumstances;
- object to certain processing based on legitimate interests;
- receive or transfer certain personal information in a portable format where the right to data portability applies; and
- withdraw your consent at any time where our processing is based on consent.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Your right to object to direct marketing
You have the right to object at any time to our use of your personal information for direct marketing. If you object, we will stop using your personal information for that purpose.
You can unsubscribe from email marketing at any time using the unsubscribe link in our marketing emails.
To exercise any of your other data protection rights, please contact us at hello@rawhalo.com.
We may need to request information from you to confirm your identity before responding to certain requests.
There is normally no charge for exercising your data protection rights.
12. Automated decision-making
We do not currently carry out solely automated decision-making that produces legal or similarly significant effects on customers.
Our ecommerce and payment providers may use automated systems for purposes such as fraud prevention and payment security.
13. Security
We take appropriate organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
14. Third-party websites
Our website may contain links to websites operated by other organisations.
If you follow a link to another website, that organisation's own privacy policy will apply to its collection and use of your information. We are not responsible for the privacy practices of third-party websites.
15. Complaints
If you have a concern about how Raw Halo uses your personal information, please contact us first so that we can try to resolve it.
Email: hello@rawhalo.com
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information about making a complaint is available at ico.org.uk.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers, legal requirements or privacy practices.
When we make changes, we will update the “Last updated” date at the top of this policy and provide any additional notice required by law.
17. Contact us
If you have questions about this Privacy Policy, how we use your personal information or your data protection rights, please contact:
Raw Halo Ltd
Unit 5493, PO Box 6945
London
W1A 6US
United Kingdom
Email: hello@rawhalo.com
For the purposes of UK data protection law, Raw Halo Ltd is the data controller responsible for your personal information.