Home › Privacy policy

Privacy policy

One optional cookie, which you can refuse. No mailing list, no advertising trackers. Here's exactly what happens to your information.

Last updated: 26 July 2026

handl is a sole trader business based in London, United Kingdom, run by Kareem. This page explains what happens to your information when you buy something or send an email. It is deliberately short, because handl does very little with your data.

The data controller is handl, 152 Tillermans Court, Grenan Square, Greenford, London UB6 0FS. For anything on this page, including a request about your own data, email [email protected].

What is collected, and when

If you buy something

Checkout is handled entirely by Stripe. You enter your name, email, delivery address and card details on Stripe's own page, not on this website. handl never sees or stores your full card number.

What handl receives from Stripe is what's needed to send your order and account for the sale: your name, delivery address, email address, what you bought, and the last four digits of your card.

If you email

Your message and email address arrive in an inbox and stay there. If you send a photo of your pump for a custom fit, that photo is kept only as long as it takes to make the part.

If you just visit

This site uses Google Analytics to count visits and see which pages people find useful. It is switched off until you agree: nothing is stored on your device, and no data reaches Google, unless you press “That's fine” on the notice at the bottom of the page. Press “No thanks” and analytics stays off. The shop works identically either way, and your choice is remembered for six months.

There are no advertising trackers — no Meta pixel, no TikTok pixel, no remarketing. Analytics is set to anonymise your IP address, and advertising and personalisation signals are switched off permanently, not just until you choose.

To change your mind, clear this site's cookies in your browser and the notice will appear again.

The site is served by Cloudflare, which processes standard server request data (including IP address) to deliver pages and block attacks. Fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers when a page loads.

Why it's held, and for how long

InformationWhyKept for
Name, address, email, orderTo fulfil the contract — making and posting your order6 years, as HMRC requires for business records
Email correspondenceLegitimate interest — answering you and resolving problemsDeleted once the matter is closed and no longer needed
Photos sent for custom fitsTo make your partDeleted after your order ships

Cookies

CookieWhat it doesSet whenKept for
handl_consentRemembers whether you said yes or no to analytics, so you're not asked againThe moment you answer, either way6 months
_ga, _ga_*Google Analytics — counts visits and pagesOnly if you agreeUp to 2 years

Nothing else. Stripe sets its own cookies on its checkout page, which is covered by Stripe's privacy policy.

Who else sees it

Your details are never sold, rented, or shared with advertisers. There is no mailing list, and you will not be added to one.

Your rights

Under UK GDPR you can ask for a copy of what's held about you, ask for it to be corrected, ask for it to be deleted (where there's no legal duty to keep it), object to how it's used, or ask for it in a portable format. Email [email protected] and it will be dealt with within one month, free of charge.

If you're unhappy with how a request was handled, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this policy changes, the date at the top changes with it.