The H&M Group is committed to deliver an outstanding customer experience - at all levels, at all markets. For this reason, we engage with a variety of suppliers and business partners, each having its unique business and operating model.

A call for action is required whenever the H&M Group decides to process data, or let someone else do it for us, in a country outside of the EEA. To ensure that our promises and your statutory rights are not compromised, every supplier and partner to the H&M Group undergoes a careful scrutiny of privacy and security capabilities. There is always a Data Processing Agreement in place between the responsible H&M Group company and the processor of personal data.

Some suppliers and partners process personal data in countries outside of the European Economic Area (EEA) either as data controllers or processors. In order to ensure a level of protection similar to what is guaranteed in the EEA and a lawful processing, the H&M Group relies on the European Comission's Standard Contractual Clauses for the transfer of personal data to recipients in countries outside of the EEA. And whenever appropriate, we implement additional safeguard measures, such as encryption, pseudonymisation and strict access controls. 

The table below lists the most essential third-party organisations to whom H&M Group transmits or otherwise make available personal data for processing. Please note that all areas and purposes below may not be relevant for all H&M Group brands.

Read our General privacy notice