Privacy policy

HILLSONG MERCHH UK - PRIVACY POLICY

Last updated: 20 October 2026

HIllsong Church London, trading as Hillsong Merch UK, operates this store and website, including its related products and services (the "Services"). Hillsong Church London is the data controller for the personal information described in this Privacy Policy.

Hillsong Merch UK is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. The Privacy Policy supplements Hillsong's general Privacy Policy and should be read alongside it and Hillsong's Cookies Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact details including your name, address, billing address, phone number, and email address.
Payment and transaction information including your payment method, transaction details, and payment confirmation. Full payment card details are processed by our payment providers and are not stored by Hillsong in unredacted form.
Account information where you create or use an account, including relevant login information, preferences and settings.
Transaction information including the items you view, put in your cart, purchase, return, or cancel and your past transactions.
Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you including when you create an account, use the Services, communicate with us, or otherwise provide us with your personal information;
Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies in accordance with your choices and our Cookies Policy;
From our service providers including Shopify, payment providers, Prodigi and other providers involved in operating the store, processing payments and fulfilling and delivering orders.

YOUR RIGHTS

Depending on where you live and the circumstances, you may have rights in relation to your personal information, including:

Access - to request a copy of personal information we hold about you.
Erasure - to ask us to delete your personal information in certain circumstances.
Correction - to ask us to correct inaccurate personal information.
Portability - to receive or transfer personal information where this right applies.
Objection and restriction - to object or ask us to restrict certain processing where the law gives you that right.
Withdrawal of consent - where we rely on your consent, you may withdraw it at any time. This does not affect processing carried out before consent was withdrawn.
Marketing - you can opt out of marketing communications at any time using the unsubscribe option in our emails or by contacting us. We may still send you service communications about an order you you have placed.

To exercise your privacy rights, contact Hillsong UK Data Protection Office at dataprotection@hillsong.co.uk

How We Use Your Personal Information

We may use personal information for the following purposes:

Provide and fulfil the Services. We use your personal information to process payments and orders, arrange printing and delivery, manage returns, refunds or cancellations, provide customer support and, where applicable, manage your account.
Marketing and Communications. Where you have chosen to receive them, or where otherwise permitted by law, we may use your contact details to send you relevant Hillsong Merch UK marketing or promotional communications.
Security and Fraud Prevention. We use your personal information to provide a secure payment and shopping experience, detect and prevent possible fraudulent, illegal, or malicious activity, and protect the security of the Services.
Communicating with You. We use your personal information to respond to enquiries, provide customer support, and communicate with you about your orders.
Legal Reasons. We use your personal information where necessary to comply with applicable law, meet accounting or record-keeping requirements, respond to valid legal process, and establish, exercise or defend legal rights.
Improving the Services. We may use appropriate usage and analytics information to understand how the store is used and improve its operation and customer experience.

Our Lawful Bases for Processing

We only process personal information where we have a lawful basis to do so.

Depending on the purpose, we rely on:

Contact - where processing is necessary to take and fulfil your order, process payment, arrange delivery, handle returns or refunds and provide related customer service.
Legitimate interests - where necessary for our legitimate interests in operating, securing and improving the store, preventing fraud and providing effective customer support, provided those interests are not overridden by your rights.
Consent - where we ask for you consent, including for certain marketing communications or cookies and similar technologies where consent it required.
Legal obligation - where we need to process information to comply with legal, tax, accounting or regulatory requirements.

How We Disclose Personal Information

We share personal information only where necessary for the purposes described in this Privacy Policy, including:

With Shopify, which provides the ecommerce platform used to operate the store.
With payment providers to process payments,
With Prodigi and its production, fulfilment and delivery providers to print and deliver your order. The information provided for fulfilment may include your name, delivery address, relevant contact details and order information.
With other service providers where necessary for IT, analytics, customer support or other services used to operate the store.
Where required by law, regulation or legal process, or where reasonably necessary to protect our legal rights.

The partner charities associated with the card designs receive the agreed net profits from the relevant card sales. We do not share customer personal information with those charities simply because you purchase a card associated with them.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services both on our behalf in providing the ecommerce platform and, in some circumstances, for Shopify's own purposes. Information you submit to the Services will be transmitted to and share with Shopify.

Shopify may separately process personal information collected about your interactions with our store and with Shopify. To learn more about how Shopify uses your personal information and the rights available to you in relation to Shopify's own processing, please see the Shopify Consumer Privacy Policy .

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not control the privacy practices of third-party websites that we do not operate.

Children's Data

The Services are not directed at children. If you are under 18, you should use the Services only with the consent of a parent of guardian, as set out in our Terms of Service. We do not knowingly use children's personal information for targeted marketing or profiling.

Security and Retention of Your Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure, in accordance with Hillsong's data protection policies.

How long we retain your personal information depends on different factors, such as whether we need the information to provide you with Services, comply with legal, tax or accounting obligations, resolve disputes or enforce other applicable contracts and policies. We retain information in accordance with Hillsong's data retention requirements and only for as long as reasonably necessary for the relevant purpose.

We may need to verify your identity before responding to a request concerning your personal information. We will respond within the time required by applicable data protection law.

Complaints

If you have complaints about how we process your personal information, please contact the Hillsong Data Protection Office at dataprotection@hillsong.co.uk

You also have the right to raise a complaint with the Information Commissioner's Office in the UK. If you are in another country, you may also have the right to complain to the relevant local data protection authority.

International Transfers

Please note that some of the service providers used to operate and fulfil the store may process personal information outside the UK.

Where personal information is transferred outside the UK and the transfer is subject to UK data protection restrictions, we ensure that an appropriate transfer mechanism is in place, such as UK adequacy regulations or approved contractual safeguards. Where other data protection laws impose international transfer requirements, we take appropriate steps to comply with them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

For privacy questions or to exercise your data protection rights:

Hillsong Church London

Data Protection Office

35 Little Russell St London WC1A 2HH, United Kingdom

Email: dataprotection@hillsong.co.uk

Phone: +44(0)20 7384 9200

Hillsong Church London, trading as Hillsong Merch UK, is the data controller for the personal information described in this Privacy Policy.

For questions about an oder of the Hillsong Merch UK store, please contact resource@hillsong.co.uk