Privacy policy

Privacy Policy

Last updated: 8 June 2026

This Privacy Policy explains how Humming ("we", "us", "our") collects, uses, and protects your personal information when you visit hummingfork.com (the "Site") or place an order. We handle your data in line with UK data protection law — the UK GDPR and the Data Protection Act 2018.

Who we are

Humming is the data controller responsible for your personal information.

Once registered, add your registered address and company number here.

The information we collect

When you order from us or use the Site, we may collect:

  • Identity and contact details — your name, email address, shipping and billing address, and phone number if you provide one.
  • Order information — the products you buy, order value, and order history.
  • Payment information — handled securely by our payment providers. We do not store full card details.
  • Communications — messages you send us by email.
  • Technical and usage data — collected automatically when you visit, including your IP address, device and browser type, pages viewed, and how you arrived (for example, from an advert). This is gathered through cookies and similar technologies.

How we use your information, and our legal basis

Purpose Legal basis
Process and deliver your order, take payment, provide support Performance of our contract with you
Send order and shipping updates Performance of our contract
Prevent fraud and keep the Site secure Our legitimate interests
Send marketing emails (where you've asked or it's permitted) Your consent — withdrawable at any time
Measure and improve advertising, including via the Meta (Facebook/Instagram) pixel and analytics Your consent, given through our cookie banner
Keep accounting and tax records Legal obligation

Cookies and tracking

The Site uses cookies and similar technologies. Essential cookies make it work; analytics and advertising cookies — including the Meta pixel — help us understand traffic and measure our ads. Non-essential cookies are only set with your consent, which you give or refuse through our cookie banner and can change at any time.

Who we share your information with

We share personal data only as needed to run the business:

  • Shopify — hosts our store and processes orders on our behalf.
  • Payment providers (such as Shopify Payments and PayPal) — to take payment securely.
  • Our fulfilment and shipping partners — the warehouse and couriers that pack and deliver your order. To fulfil your order, your name and delivery address are shared with our fulfilment partner, which is located outside the UK (see International transfers below).
  • Meta Platforms — where you have consented to advertising cookies, to measure and target advertising.
  • Service providers — such as email and analytics tools that help us operate.

We do not sell your personal information.

International transfers

Some of the partners we rely on to fulfil orders are located outside the United Kingdom, in countries that may not offer the same level of data protection — in particular, our order fulfilment is handled by a partner based in China. Where we transfer your personal data outside the UK, we take steps to ensure it remains protected by appropriate safeguards, such as the UK's International Data Transfer Agreement (IDTA) or Standard Contractual Clauses.

Action: confirm the transfer safeguards your fulfilment provider has in place, and reflect them here.

How long we keep your information

We keep your personal data only as long as necessary. We retain order and transaction records for as long as tax law requires (generally six years in the UK), and we keep marketing contacts until you unsubscribe.

How we protect your information

We use appropriate technical and organisational measures to protect your data, and our platform and payment providers maintain industry-standard security. No transmission over the internet is ever completely secure, but we take care to safeguard your information.

Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to delete your data;
  • restrict or object to how we use it;
  • request your data in a portable format;
  • withdraw consent at any time (for example, to marketing); and
  • complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.

To exercise any of these rights, email contact@hummingfork.com. We respond within the time required by law, normally one month.

Marketing

You can opt out of marketing emails at any time using the unsubscribe link in any message, or by emailing us.

Children

The Site and our products are intended for adults. We do not knowingly collect personal data from anyone under 16.

Residents outside the UK

If you're located elsewhere — for example in the EU or the US — you may have additional rights under your local laws (such as the EU GDPR, or the CCPA in California). We aim to honour these rights; contact us to make a request.

Changes to this policy

We may update this policy from time to time. The version on this page, with the date shown at the top, is always the current one.

Contact

For any privacy question or request, email contact@hummingfork.com.