Privacy policy

Effective date: 9 February 2026 (Last updated)

  1. Who we are
    HIGH CORPORATION LIMITED (“we”, “us”, “our”) is the controller responsible for your personal data under UK data protection law.

Registered address: 1 Ariel Way, London, England, W12 7SL
Company number: 16774812
Privacy contact email: legal@high.inc

  1. What this notice covers
    This notice explains how we collect and use personal data when you use our website and mobile application (including account registration, guest checkout, subscriptions, digital products and physical products), and when you contact us.

  2. The personal data we collect
     Depending on how you interact with us, we may collect:

(a) Account and identity data: email address, account ID, login credentials (stored as a secure hash), settings and preferences, and any profile details you choose to add.
(b) Transaction and subscription data: items purchased, order references, subscription plan/status/events, renewal/cancellation timestamps, and customer support history relating to orders/subscriptions.
(c) Delivery data (physical products): name, delivery address, and a contact number where required by a courier.
(d) Communications data: messages you send to us via “Contact us”, email or in-app support, and any attachments you provide.
(e) Technical data: IP address, device/app identifiers, log-in timestamps, basic usage logs, and security/audit logs.
(f) Marketing data: marketing preferences and consent status; email address used for marketing where you opt in.

Payment card details: we do not store your full card number or CVV. Payments are processed by a payment service provider; we typically receive confirmations and transaction references.

  1. Where we get your personal data from
    Most personal data comes directly from you (for example when you create an account, place an order, subscribe, or contact us). We may also receive limited information from third parties, such as:

  1. purchase/subscription confirmations and transaction identifiers from app store platforms (for in-app purchases);

  2. payment confirmations and fraud/risk signals from payment providers;

  3. delivery status updates from fulfilment partner (Huboo Tech Limited) and courier partners.

  1. Purposes, lawful basis, obligation to provide data, and retention
    The table below sets out: why we use your personal data, our lawful basis, whether you are under a contractual or statutory obligation to provide it, what happens if you do not provide it, and how long we keep it.

Purpose

Personal data (categories)

Lawful basis

Are you under an obligation to provide it?

What happens if you do not provide it

Retention Period

Provide services and goods (including delivery)

Names and contact details; addresses; purchase or account history; payment details (including card or bank information for transfers and direct debits); credit reference information; account information; website user information (including user journeys and cookie tracking); information relating to compliments or complaints

Contract (necessary to enter into or perform a contract with you)

Contractual (for purchases/delivery and to provide the service)

We may be unable to process your order, take payment, deliver goods, or provide the requested services

Order/transaction records: 6 years from the end of the financial year (UK company accounting/VAT). Operational delivery notes: 90 days after delivery (unless needed for refunds/chargebacks/disputes)

Operation of customer accounts and guarantees

Names and contact details; addresses; payment details; purchase history; account information (including registration details)

Contract (account operation); Legal obligation (where required for statutory record-keeping, product safety/recall, warranty/guarantee records where applicable)

Contractual (to operate an account / provide guarantee services). Statutory only where a specific legal requirement applies

We may be unable to create/manage your account or honour/operate a guarantee/warranty process that depends on those details

Account data: while account active + 24 months after closure/last activity. Guarantee/warranty records tied to transactions: 6 years from end of financial year (or longer if a specific legal rule requires)

Service updates or marketing purposes 

Names and contact details; addresses; marketing preferences; location data; purchase or viewing history; IP addresses; website and app user journey information; records of consent (where appropriate)

Contract (service updates that are necessary to perform the contract, e.g., order/subscription administration); Consent (marketing)

Contractual for essential service communications (eg, order confirmations, subscription administration). No obligation for marketing

Without the essential contact details we cannot send important service messages. If you don’t opt in, you will not receive marketing

Service communications logs/metadata: 12 months. Marketing: until consent is withdrawn or 24 months after last engagement (whichever sooner). Suppression (opt-out) record: kept while marketing continues

Comply with legal requirements

Name; contact information; identification documents; financial transaction information; any other personal information required to comply with legal obligations

Legal obligation

Statutory (only to the extent the law requires)

We may be unable to complete the transaction and/or meet legal obligations (eg, tax/VAT records, compliance checks)

6 years from end of financial year for accounting/VAT records (or 10 years where VAT OSS/MOSS record-keeping applies)

Dealing with queries, complaints or claims 

Names and contact details; address; payment details; account information; purchase or service history; customer accounts and records; financial transaction information; correspondence

Contract (where the query/complaint relates to your order/subscription); Legal obligation (where we must keep records or respond to lawful requests); Consent (where you provide optional information or where we request permission for specific handling)

Contractual in practice for resolving order/subscription issues (we need enough to identify your transaction). No obligation for optional information. Statutory only where law requires

If we cannot identify you/your order, we may be unable to investigate or resolve the matter (including refunds/replacements). If you withhold optional information, resolution may be slower/limited

Routine customer service tickets: 2 years from closure. Complaints/disputes/claims: 6 years from closure. Any statutory retention: as required by law

 

  1. Who we share personal data with (recipients)
     We may share personal data with:

  1. Order fulfilment and logistics: Huboo (order fulfilment/warehousing) and courrier/shipping providers for delivery of physical products.

  2. Payment processing: Stripe to take payments, handle refunds, and support fraud prevention.

  3. App distribution and in-app purchases: Apple and Google where you purchase subscriptions/digital products via their platforms.

  4. Email and communications: Klaviyo for sending service emails (and marketing emails where you opt in).

  5. Customer support tooling: Klaviyo

  6. Professional advisers: lawyers, accountants, auditors and insurers, where necessary for advice, compliance or claims.

  7. Authorities and other third parties: regulators, courts, law enforcement, and other parties where we are required to disclose information by law, or to establish, exercise or defend legal claims.

Where third parties process personal data on our behalf, we require them to protect it and to use it only for the services they provide to us.

7. International data transfers
WE TRANSFER PERSONAL DATA ONLY TO COUNTRIES, TERRITORIES, SECTORS OR INTERNATIONAL ORGANISATIONS THAT ARE COVERED BY UK ADEQUACY REGULATIONS (I.E., “EXISTING UK ADEQUATE COUNTRIES, JURISDICTIONS AND TERRITORIES”). IF WE EVER NEED TO TRANSFER PERSONAL DATA TO A LOCATION NOT COVERED BY UK ADEQUACY REGULATIONS, WE WILL UPDATE THIS NOTICE AND PUT IN PLACE AN APPROPRIATE TRANSFER MECHANISM (SUCH AS APPROPRIATE SAFEGUARDS) BEFORE MAKING THAT TRANSFER.

  1. Your rights
    Under UK data protection law, you have the following rights in relation to your personal data (these rights are not absolute and may apply only in certain circumstances):

  1. the right to be informed about how your personal data is collected and used;

  2. the right of access to your personal data and certain supplementary information;

  3. the right to rectification of inaccurate personal data, and to have incomplete data completed;

  4. the right to erasure (“to be forgotten”) in certain circumstances;

  5. the right to restrict processing in certain circumstances;

  6. the right to data portability (where processing is based on consent or contract and is carried out by automated means);

  7. the right to object to processing in certain circumstances;

  8. rights in relation to automated decision-making and profiling;

  9. the right to withdraw consent at any time (where we rely on consent); and

  10. the right to lodge a complaint with a supervisory authority.

How to exercise your rights: contact us at legal@high.inc. We may need to verify your identity before responding.

RIGHT TO OBJECT
You have an absolute right to object to the processing of your personal data for direct marketing at any time. If you object, we must stop using your personal data for direct marketing.
You also have the right to object where we rely on legitimate interests. In that case, we will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing is needed for legal claims.

9. Withdrawing consent (where relevant)
Where we rely on consent (for example, email marketing), you can withdraw your consent at any time by:
 • using the “unsubscribe” link in marketing emails; and/or
 • updating your preferences in your account/app settings; and/or
 • contacting us at legal@high.inc.

Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew it.

10. Complaints
If you have concerns, please contact us first at legal@high.inc so we can try to resolve them.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). ICO contact details:

Telephone:  +44 303 123 1113

Textphone: 18001 0303 123 1113

Monday to Friday, 9am to 5pm

Address: Wycliffe House, Water Ln, Wilmslow SK9 5AF, United Kingdom

Website: https://ico.org.uk/make-a-complaint/ 

11. Automated decision-making and profiling
WE DO NOT USE DECISIONS BASED SOLELY ON AUTOMATED PROCESSING (INCLUDING PROFILING) THAT PRODUCE LEGAL OR SIMILARLY SIGNIFICANT EFFECTS FOR YOU.

  1. Our website and app are not intended for children and we do not knowingly collect personal data from anyone under 18. If you are under 18, please do not create an account, place orders, subscribe, or provide your personal data to us.

If we become aware that we have collected personal data from a child under 18, we will take steps to delete it and, where appropriate, disable the relevant account. If you believe that a child has provided us with personal data, please contact us at legal@high.inc.

We encourage parents and guardians to supervise children’s online activities.

  1. Changes to this notice
    We may update this Privacy Notice from time to time. We will publish the updated version in the app/website and update the “Last updated” date above.

  2. How to contact us
     Privacy contact email: legal@high.inc
    Postal address: 1 Ariel Way, London, England, W12 7SL