Privacy Policy

Last updated: 4 November 2026

Who is responsible

Hana Katoba
[address]
hello@hanakatoba.com

This page explains what personal data this website processes and why. We keep it to what the website needs.

Visiting this website

This website is hosted by Ginta (ginta.app), which processes data only on our behalf. When you open a page, your browser sends technical data such as your IP address and browser type. It is used to deliver the page and to protect the website against abuse; IP addresses are stored only as an encrypted one-way code, for a short time. Visits are counted per day without identifying anyone.

This website sets no cookies and uses no tracking or advertising tools.

Contact form

When you send a message through a form, we receive what you enter (for example your name, email address, phone number and your message). We use it only to answer you. Legal basis: taking steps at your request before a contract and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR). Messages are stored in our Ginta inbox and may be forwarded to our email; we delete them when they are no longer needed, at the latest after 2 years unless the law requires longer.

Shop and orders

When you order or ask about a product, we receive your name, email address, phone number and address if you give them, your message and what you order. We use them to handle your order or enquiry and to send you order emails. Emails about it are sent for us by Ginta through Cloudflare's email service. Legal basis: performing the contract (Art. 6(1)(b) GDPR) and legal obligations such as bookkeeping (Art. 6(1)(c) GDPR). Order details are deleted automatically two years after the order, unless the law requires us to keep them longer. Your cart is kept only in your own browser (local storage, not a cookie) until you order or empty it.

Paying online

If this website asks for a payment when you book, order or sign up, you pay on a page of Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland), which processes your payment details under its own privacy policy (stripe.com/privacy). Stripe asks for your name and email address there (for orders that are sent also the delivery address and a phone number), and tells us those and whether the payment succeeded, so we can handle your booking, order or sign-up. We never see your card details.

Fonts

This website uses fonts from Google Fonts. Copies of them are served from this website's own address by our hosting provider, so your browser doesn't contact Google and Google doesn't receive your IP address. No cookies are set.

Your rights

You can ask us to see, correct, delete or export your personal data, to restrict or object to its use, and you can withdraw a consent at any time. Write to us at the address above. You also have the right to complain to a data protection authority.