Privacy policy

Last Updated: April 25, 2026

This Privacy Policy describes how Haylash (the "Website," "we," "us," or "our") collects, uses, and shares your personal information when you visit our website, use our services, or make a purchase from Haylash (collectively referred to as the "Services"), or otherwise interact with us.

Haylash is operated by Amigini Trading LLC, a company based in the United States of America. This Privacy Policy applies to customers and visitors located in the United Kingdom and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purpose of this Privacy Policy, "you" and "your" refer to you as a user of the Services, whether you are a customer, website visitor, or any other individual whose information we process under this notice.

Please read this Privacy Policy carefully.

Data Controller

The data controller responsible for your personal information is:

Amigini Trading LLC (trading as Haylash)
Email: info@haylash.com

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the updated policy on the website, revise the "Last Updated" date, and take any other steps as required by law.

How We Collect and Use Your Personal Information

To provide our Services, we collect personal information from various sources as outlined below. The type of information we collect and use depends on how you interact with us.

In addition to the specific uses described below, we use the information we collect to communicate with you, provide and improve our Services, comply with legal obligations, enforce applicable terms of use, and protect our rights, the rights of our users, or others.

What Personal Information We Collect

The personal information we collect depends on how you interact with our website and services. "Personal information" means any information that identifies, relates to, describes, or could reasonably be linked to you.

Information You Provide to Us Directly:

• Contact information, such as your name, address, phone number, and email address
• Order details, such as name, billing and shipping address, payment confirmation, email, and phone number
• Account information, including username, password, security questions, and other security-related details
• Customer service data, including messages you send to us via the contact form or email

Some features of the Services require this information. You may choose not to provide it, but this may limit your access to certain features.

Information from Website Use: We automatically collect certain usage information ("Usage Data") through cookies, pixels, and similar technologies, such as:

• Website access and usage behaviour
• Device details
• Browser information
• Network connection and IP address
• Technical interactions with our Services

Information from Third Parties: We may also receive personal information from:

• Service providers, such as Shopify, that support our website and services
• Payment processors, for payment information like bank or card details and billing address
• Marketing or tracking partners, if you visit our site, open our emails, or engage with ads

We treat information from third parties according to this Privacy Policy. See also: "Third-Party Sites and Links" below.

Legal Basis for Processing (UK GDPR)

Under the UK GDPR, we rely on the following legal bases to process your personal data:

• Performance of a contract (Article 6(1)(b) UK GDPR): To process your orders, deliver products, manage returns, and provide customer support.
• Legal obligation (Article 6(1)(c) UK GDPR): To comply with applicable laws, including tax, accounting, and consumer protection regulations.
• Legitimate interests (Article 6(1)(f) UK GDPR): To improve our Services, prevent fraud, ensure security, and conduct direct marketing where permitted.
• Consent (Article 6(1)(a) UK GDPR): For non-essential cookies, marketing communications where required, and other specific processing activities. You may withdraw your consent at any time.

How We Use Your Personal Information

To Provide Products and Services: We use your information to fulfil our contract with you, including payment processing, order fulfilment, returns, account management, shipping, notifications, and support. Shopify may use your account data to improve your experience.

For Marketing and Advertising: We may send promotional materials by email, SMS, or post where legally allowed or with your consent. We may analyse your use of our services to better tailor offers to you.

For UK residents, marketing communications are sent based on your consent or our legitimate interest under Article 6(1)(f) UK GDPR, in compliance with the Privacy and Electronic Communications Regulations (PECR). You may withdraw your consent or unsubscribe at any time.

For Security and Fraud Prevention: We process your data to detect and prevent fraud, abuse, and security risks. You are responsible for keeping your login credentials secure. Please notify us immediately of any suspicious activity.

For Communication and Service Improvements: We use your data to respond to enquiries, improve our services, and maintain customer relationships. This processing is based on our legitimate interest under Article 6(1)(f) UK GDPR.

Cookies

We use cookies like many websites. Full details on Shopify's cookies can be found here: https://www.shopify.com/legal/cookies

We use cookies to operate and improve our website and services, store preferences and activity, analyse performance, and better understand user behaviour.

For UK users, non-essential cookies (such as marketing or analytics cookies) are placed only with your consent, in compliance with PECR and the UK GDPR. You can manage your cookie preferences via our cookie banner.

Disabling Cookies: Most browsers accept cookies by default, but you can set your browser to delete or block cookies. Please note that this may affect functionality. Blocking cookies may not fully prevent data sharing with advertising partners.

Sharing of Personal Information

We only share personal data with third parties under this Privacy Policy and when there is a legal basis to do so.

Situations may include:

• Service providers that operate on our behalf (e.g., IT operations, payment processing, analytics, customer support, logistics)
• Marketing and business partners for service offerings or promotional purposes (under their own privacy policies)
• With your consent, such as for product deliveries, social media integrations, or third-party logins
• Within our corporate group, where it supports our legitimate interest in operating successfully
• During business transactions, such as mergers or insolvency proceedings, and for legal compliance or to protect our rights

Data Categories and Recipients:

We do not sell your personal data to third parties.

Third-Party Websites and Links

Our website may contain links to sites or platforms operated by third parties. By clicking these links, you leave our site. We are not responsible for the content, accuracy, or privacy practices of these external sites—please review their policies independently.

Information you post publicly (e.g., on social media or comment sections) may be visible to others. Linking to a site does not imply endorsement or partnership.

Children's Data

Our services are not intended for children, and we do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe your child has provided us with data, please contact us—we will delete it immediately.

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including SSL encryption, secure payment processing through PCI-DSS compliant providers, and restricted access to personal data.

Please note: No security system is 100% secure. Emails and forms may be insecure during transmission—avoid sending sensitive data via unsecured channels.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• The duration of your active customer account
• Periods required to comply with legal, tax, accounting, and regulatory obligations (typically up to 6 years for transactional records under UK law)
• Periods required to handle warranties, returns, disputes, or legal claims

Once data is no longer required, it is securely deleted or anonymised.

International Data Transfers

As Haylash is operated by Amigini Trading LLC (a US-based company), your personal data will be transferred to and processed in the United States and may be processed in other countries outside the United Kingdom.

Where data is transferred outside the UK, we rely on appropriate safeguards as required under UK GDPR, including:

• UK International Data Transfer Agreement (IDTA), or
• UK Addendum to the EU Standard Contractual Clauses, or
• Other legally recognised transfer mechanisms approved by the UK Information Commissioner's Office (ICO).

You may request a copy of the safeguards in place by contacting us at info@haylash.com.

Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — Request deletion of your data
• Right to restrict processing — Request that we limit how we use your data
• Right to data portability — Request your data in a structured, commonly used format
• Right to object — Object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time
• Rights related to automated decision-making — Not be subject to decisions based solely on automated processing

Marketing preferences: You can unsubscribe from promotional emails at any time using the link in the email. Transactional emails (such as order confirmations) are not affected.

How to Exercise Your Rights: To exercise any of these rights, contact us at info@haylash.com We will respond within one month of receiving your request, as required under UK GDPR. We may request additional information to verify your identity before processing your request.

We do not charge a fee for exercising your rights, except where requests are manifestly unfounded or excessive.

Complaints

If you have concerns about how we handle your personal information, please contact us first at info@haylash.com so we can try to resolve the issue.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO) Website: https://ico.org.uk Helpline: 0303 123 1113 Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Contact Information

Shop name: Haylash
Businessname: Amigini Trading LLC
Address:
30 N Gould St
Sheridan, Wyoming 82801
United States

Email: info@haylash.com
Phone: +13074272543
Contactform: https://haylash.com/pages/contact

Customer service opening hours: (GMT+0)
Monday – Friday: 9:00 AM – 5:30 PM
Saturday and Sunday: 10:00 AM – 3:00 PM