Privacy Policy

Table of Contents

1. Introduction
2. Who Controls Your Data
3. Information We Collect
4. How We Collect It
5. Why We Collect It (Purposes and Legal Bases)
6. Cookies and Similar Technologies
7. Analytics and Advertising Partners
8. How We Share Your Information
9. International Data Transfers
10. Data Retention
11. Data Security
12. Your Rights
13. Marketing Communications
14. Children's Privacy
15. Changes to This Policy
16. Contact

1. Introduction

This Privacy Policy explains how IKM Digital For Creative Technology Solutions, trading as HUNCH ("HUNCH," "we," "us," "our"), collects, uses, discloses, and protects personal information when you visit hunchhouse.com (the "Site"), create an account, place an order, or otherwise interact with us.

We process personal data in accordance with Qatar's Personal Data Privacy Protection Law, Law No. 13 of 2016 ("PDPPL"), and, where our processing touches individuals or data flows within scope of the EU General Data Protection Regulation ("GDPR"), we apply GDPR principles as a matter of good practice even where not strictly required. Where the two frameworks differ, we apply whichever standard is more protective of you.

By using the Site, you acknowledge that you have read this Policy. Where we rely on your consent for a specific processing activity — most notably marketing communications — we ask for that consent separately and specifically; using the Site does not itself constitute consent to marketing.

2. Who Controls Your Data

The data controller is:

IKM Digital For Creative Technology Solutions, operating as HUNCH
Building 102, Street 220, Zone 15, Floor 2, Doha, State of Qatar
CR No. 242129
info@hunchhouse.com

3. Information We Collect

We collect the following categories of personal information:

3.1 Information you give us directly

• Full name
• Email address
• Phone number
• Shipping address
• Billing address
• Order history and preferences (size, personalization details such as name/number printing)
• Account credentials (password is stored hashed; we cannot see or recover it)
• Correspondence you send us (support requests, returns, feedback)

3.2 Information generated by your order

• Products purchased, quantities, and prices paid
• Order status (processing, fulfilled, shipped, cancelled, refunded)
• Payment status and payment method used (we receive confirmation of payment success/failure from our payment processor — we do not receive or store your card number, CVV, or full payment credentials)

3.3 Information collected automatically

• Device information (device type, operating system, browser type and version)
• IP address
• Approximate location derived from IP address
• Pages visited, time spent, click behaviour, and referring/exit pages
• Cookie identifiers (see Section 6)

3.4 Information we do not collect We do not collect government ID numbers, biometric data, health data, or payment card numbers. Where our payment processor requires identity verification for fraud prevention on a specific transaction, that process happens directly between you and the processor; we receive only a pass/fail result.

4. How We Collect It

We collect information: when you create an account or checkout as a guest; when you browse the Site (via cookies and similar technology, see Section 6); when you contact customer support; when you complete a return; and when a third party you've authorized (for example, a payment provider confirming a transaction) shares information with us as part of fulfilling your order.

5. Why We Collect It (Purposes and Legal Bases)

We do not use personal information for any purpose incompatible with the purpose it was collected for, without first notifying you and, where required, obtaining your consent.

6. Cookies and Similar Technologies

6.1 What cookies are. Cookies are small text files stored on your device that let a website remember you between visits or actions within a visit.

6.2 Categories we use

• Strictly necessary — required for the Site to function: keeping items in your bag, remembering you're logged in, and completing checkout. These cannot be disabled without breaking core functionality.
• Functional — remember preferences such as your selected theme or currency.
• Analytics — measure how the Site is used so we can improve it (see Section 7).
• Marketing/advertising — measure the effectiveness of our marketing and, where you've consented, allow us or our partners to show you relevant HUNCH content off-site.

6.3 Your control. You can manage cookies through your browser settings, and — where a cookie consent banner is presented on the Site — through the choices offered there. Blocking strictly necessary cookies will prevent checkout from working.

7. Analytics and Advertising Partners

We use the following third-party services, each of which processes data under its own privacy terms in addition to this Policy:

• Shopify — underlying commerce infrastructure: cart, checkout, and order/inventory management. Shopify processes order and customer data as our data processor.
• Google Analytics — website usage analytics. Google Analytics uses cookies and similar identifiers to help us understand aggregate site usage; we do not use it to identify you personally.
• Meta Pixel — used, where you have consented to marketing/advertising cookies, to measure and improve the relevance of HUNCH advertising on Meta platforms (Facebook, Instagram).
• Payment processors (Tap Payments, and the card/wallet networks it settles through, including Apple Pay, Google Pay, Visa, Mastercard, and NAPS) — process your payment directly; see Section 8.2.

We may add further analytics or marketing integrations as HUNCH grows. Any new integration that materially changes how your data is processed will be reflected in an updated version of this Policy before it goes live.

8. How We Share Your Information

8.1 We do not sell personal information. We have never sold, and do not sell, personal information to third parties for their own marketing purposes.

8.2 Service providers. We share information with the third parties strictly necessary to run the Site and fulfil your order:

• Shopify (commerce platform)
• Tap Payments and the payment networks it connects to (Apple Pay, Google Pay, Visa, Mastercard, NAPS) — for payment processing only
• Shipping and delivery partners — name, address, and phone number only, to the extent needed to deliver your order
• Cloud hosting and infrastructure providers
• Analytics and marketing partners listed in Section 7, limited to the data described there

Each of these providers is contractually restricted to using your data only for the purpose we've engaged them for.

8.3 Legal disclosure. We may disclose information where required by Qatari law, court order, or valid request from a competent regulatory or law enforcement authority, or where necessary to protect the rights, property, or safety of HUNCH, our customers, or the public.

8.4 Business transfers. If HUNCH is acquired, merges, or transfers substantially all of its assets, customer information may be transferred as part of that transaction, subject to the same protections described in this Policy.

9. International Data Transfers

Some of our service providers (including Shopify, Google, and Meta) process data outside Qatar. Where personal data is transferred internationally, we require that it be handled with protections consistent with this Policy and applicable law, including, where relevant, standard contractual safeguards recognized under GDPR for transfers out of the European Economic Area.

10. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, including:

• Account data — for as long as your account remains active, plus a reasonable period after closure to handle any residual disputes or legal claims.
• Order and transaction records — for the period required by Qatari commercial and tax record-keeping obligations.
• Marketing consent records — until you withdraw consent, plus a record of that withdrawal.
• Support correspondence — for a reasonable period after resolution, to inform future support if you contact us again.

When information is no longer needed for these purposes, we delete or anonymize it.

11. Data Security

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data we hold, including encrypted transmission (HTTPS/TLS) across the Site, access controls limiting who inside HUNCH can view customer data, and reliance on PCI DSS–certified payment processors so that card data never reaches our own systems. No system is perfectly secure; if we become aware of a breach affecting your personal information, we will notify you and the relevant authority as required by Qatari law.

12. Your Rights

Under the PDPPL, and consistent with GDPR principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information, subject to our legal obligation to retain certain records (e.g. transaction history for tax purposes)
• Object to or restrict certain processing, including marketing
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal
• Request a copy of your data in a portable format
• Lodge a complaint with the competent Qatari data protection authority if you believe we have not handled your information in accordance with the law

To exercise any of these rights, contact us at info@hunchhouse.com. We will respond within the timeframe required by applicable law, and in any case without undue delay.

13. Marketing Communications

We only send marketing emails to customers who have opted in, whether at account creation, checkout, or through a separate signup. Every marketing email includes an unsubscribe link, and unsubscribing takes effect immediately. Transactional communications — order confirmations, shipping updates, and responses to your support requests — are not marketing and will be sent regardless of your marketing preference, as they are necessary to fulfil your order.

14. Children's Privacy

The Site is not directed at children, and we do not knowingly collect personal information from anyone under the age of 18 without the involvement of a parent or legal guardian. If you believe a child has provided us with personal information, contact us at info@hunchhouse.com and we will delete it.

15. Changes to This Policy

We may update this Policy as our practices, the law, or our service providers change. Material changes will be reflected by an updated "Last Updated" date at the top of this page, and where a change significantly affects your rights, we will provide more prominent notice — such as an email to registered account holders — before it takes effect.

16. Contact

Questions, requests, or complaints about this Policy or your personal information:

IKM Digital For Creative Technology Solutions, operating as HUNCH
info@hunchhouse.com
Building 102, Street 220, Zone 15, Floor 2, Doha, State of Qatar

See also: Contact & Legal Information, Compliance.