Legal · Last updated 11 August 2026
Privacy policy
What we collect, why we collect it, and who we trust to process it on our behalf.
1. Who we are
Hali Publications Ltd is the data controller for personal information collected through hali.com. We are a company registered in England and Wales under company number 01391142, with our registered office at 6 Sylvester Path, London E8 1EN. Our VAT registration number is 911 3029 70. If you have a question about your data, write to privacy@hali.com.
2. What we collect
We collect only what we need to run the magazine and the website. That includes the name, email and postal address you give us when you subscribe or order; the items you buy, the articles you read and the reading preferences you choose; and the email address you give us for the newsletter. We never collect payment card numbers ourselves; payment details go directly to Stripe (see below).
3. How we use it
We use your information to fulfil subscriptions and orders, to provide access to the digital archive and your account, to recommend articles that match the reading preferences you have chosen and the articles you have already read, to send you the editorial dispatches and service emails you have agreed to, to answer your questions, to detect fraud, and to comply with our legal obligations. Where you have accepted analytics cookies, we also use aggregate Google Analytics data to understand which articles are read.
4. Who processes data on our behalf
We rely on a small number of trusted suppliers, each of whom handles your data under a written agreement and only for the purpose we have set.Clerk — manages account sign-up, sign-in and session security. Your email address, name and login activity are processed by Clerk on our behalf.Stripe— processes all payments for subscriptions and shop orders. When you check out, your card details go directly to Stripe and are stored under Stripe’s PCI-compliant systems; we receive only the information needed to confirm and renew your order. Stripe’s own privacy notice applies to that data.Sanity — hosts our editorial content. Sanity does not hold subscriber data; only published articles and editorial assets sit there.Vercel — hosts the website itself and the servers that render it. Standard server logs may be retained for short periods.Google— provides Google Analytics, which we use only if you accept analytics cookies. It receives usage data about the pages you visit. We have switched off Google’s advertising features for this property, so the data is not used to personalise advertising.Email and fulfilment partners — a marketing-email provider for the newsletter, and the print mailing house that posts the magazine to your address. They receive only the data needed to do their job.
5. Cookies
We use a small number of cookies and similar browser storage. Essential cookies keep you signed in; your basket, your delivery country and your cookie choice are stored in your browser. Without them the site will not work properly. With your permission we also use Google Analytics to understand which articles are read and where to improve the site — it sets its own cookies and sends usage data to Google, which acts as our processor. Analytics is off until you accept it, and nothing is loaded before you do. You can accept, decline or change your mind at any time through the “Cookie preferences” link at the foot of every page; declining does not stop you reading, subscribing or buying.
6. Sharing
We do not sell your data. We share it only with the processors listed above, and with the authorities if we are legally required to. We do not share subscriber lists with third parties for their own marketing.
7. International transfers
Some of our processors — including Clerk, Stripe, Vercel and Google — operate servers outside the UK and EEA. Where data is transferred outside, we rely on the safeguards each provider has in place, including the UK Addendum and the EU Standard Contractual Clauses where applicable.
8. How long we keep it
Subscriber and order records are kept while your account is active and for as long afterwards as accounting and tax law requires (usually six years). Newsletter subscriptions are kept until you unsubscribe. Server and analytics logs are kept for short, rolling periods.
9. Your rights
Under UK and EU data protection law you have the right to ask us for a copy of your data, to correct it, to delete it, to object to processing, and to ask us to stop sending marketing. You can do most of this yourself from your account, or write to privacy@hali.com. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office at ico.org.uk.
10. Changes
We update this notice when our practices change. The version on this page is the current one. If a change materially affects you we will tell you by email before it takes effect.