Legal · Last updated 18 May 2026
Privacy policy
What we collect, why we collect it, and who we trust to process it on our behalf.
1. Who we are
HALI Publications Ltd is the data controller for personal information collected through hali.com. We are registered in England and Wales. If you have a question about your data, write to privacy@hali.com.
2. What we collect
We collect only what we need to run the magazine and the website. That includes the name, email and postal address you give us when you subscribe or order; the items you buy and the issues you read; the email address you give us for the newsletter; and basic technical information your browser sends when you visit — pages viewed, approximate location, device type. We never collect payment card numbers ourselves; payment details go directly to Stripe (see below).
3. How we use it
We use your information to fulfil subscriptions and orders, to provide access to the digital archive and your account, to send you the editorial dispatches and service emails you have agreed to, to answer your questions, to detect fraud, and to comply with our legal obligations. We use aggregate, non-identifying analytics to understand which articles are read and where we should improve.
4. Who processes data on our behalf
We rely on a small number of trusted suppliers, each of whom handles your data under a written agreement and only for the purpose we have set.Clerk — manages account sign-up, sign-in and session security. Your email address, name and login activity are processed by Clerk on our behalf.Stripe— processes all payments for subscriptions and shop orders. When you check out, your card details go directly to Stripe and are stored under Stripe’s PCI-compliant systems; we receive only the information needed to confirm and renew your order. Stripe’s own privacy notice applies to that data.Sanity — hosts our editorial content. Sanity does not hold subscriber data; only published articles and editorial assets sit there.Vercel — hosts the website itself and the servers that render it. Standard server logs may be retained for short periods.Email and fulfilment partners — a marketing-email provider for the newsletter, and the print mailing house that posts the magazine to your address. They receive only the data needed to do their job.
5. Cookies
We use a small number of cookies. Essential cookies keep you signed in and remember your basket; without them the site will not work properly. Optional analytics cookies help us see which articles are read. You can refuse the optional ones via your browser or our cookie banner; refusing them will not stop you from reading, subscribing or buying.
6. Sharing
We do not sell your data. We share it only with the processors listed above, and with the authorities if we are legally required to. We do not share subscriber lists with third parties for their own marketing.
7. International transfers
Some of our processors — including Clerk, Stripe and Vercel — operate servers outside the UK and EEA. Where data is transferred outside, we rely on the safeguards each provider has in place, including the UK Addendum and the EU Standard Contractual Clauses where applicable.
8. How long we keep it
Subscriber and order records are kept while your account is active and for as long afterwards as accounting and tax law requires (usually six years). Newsletter subscriptions are kept until you unsubscribe. Server and analytics logs are kept for short, rolling periods.
9. Your rights
Under UK and EU data protection law you have the right to ask us for a copy of your data, to correct it, to delete it, to object to processing, and to ask us to stop sending marketing. You can do most of this yourself from your account, or write to privacy@hali.com. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office at ico.org.uk.
10. Changes
We update this notice when our practices change. The version on this page is the current one. If a change materially affects you we will tell you by email before it takes effect.