Privacy Policy

Last updated: August 2026

Binhi (“we”) respects your privacy. This policy explains what we collect, why, and the choices you have.

What we collect

Account details (name, email) when you create an account; order details (items, delivery address, payment) when you buy; and messages you send via our waitlist or enquiry forms.

Card payments

Payments are processed by Stripe. Card details never touch our servers — they go straight to Stripe. We store only the order and a Stripe reference.

How we use it

To fulfil orders, provide customer service, send order confirmations, improve the site (analytics), and measure marketing — the last two only with your consent. Our legal basis is contract (fulfilling your order), legitimate interests (security and fraud prevention), and consent (analytics and marketing).

Cookies & tracking

We use three categories, all shown in the cookie preferences dialog you see on first visit (and reopenable from the footer at any time):

Strictly necessary.Your cart and, if you sign in, your session. Required for the shop to work and can't be turned off.

Analytics — off by default.PostHog, hosted in the EU, records page views and interactions (e.g. adding to cart, starting checkout) so we can measure and improve the site. If you're signed in, we associate activity with your account.

Marketing — off by default. Meta (Facebook) lets us measure ad performance and show Binhi to interested people, using the Meta Pixel and the Conversions API. On a completed order we send Meta a one-way hashed (SHA-256) version of your email and the order value so the purchase can be attributed — we never send plain-text email to Meta.

When you allow the optional categories, cookies/identifiers set include _fbp and _fbc(Meta, ~90 days / session) and PostHog's local identifier. You can withdraw consent at any time from the footer.

Who we share data with

Stripe — card payments (card details never reach us).
Supabase — accounts, orders, and the site database.
PostHog — analytics, EU-hosted; only with analytics consent.
Meta Platforms Ireland Ltd. — marketing measurement; only with marketing consent. Transfers to Meta rely on the UK extension to the EU-US Data Privacy Framework.

Retention

We keep order and account records for as long as needed to run the business and meet UK tax and food-safety record-keeping duties. Analytics and marketing data are retained by PostHog and Meta under their respective policies.

Your rights

You can request access to, correction of, or deletion of your data, object to processing, and withdraw analytics or marketing consent at any time from the footer. Email hello@binhi.co.uk.

Contact

Binhi, UK · hello@binhi.co.uk