H&M

How many clicks to find the privacy policy from the homepage?

Three clicks, and the last one is a download. Footer, then Legal & Privacy, then Privacy Notice, which links out to a nine-page PDF rather than opening as a web page. Three clicks is accessible but indirect, and handing a reader a file instead of a page is the second strike. Findable, if you are determined.

Is there a meaningful choice about cookies and tracking before data is collected?

Equal buttons, unequal emphasis. Accept and decline are both rendered as full black buttons of the same size, which looks like a fair choice. “Accept All” then carries a persistent blue outline that “Only Required Cookies” does not. The bias is small and it is deliberate.

How hard is the policy to read, how much of it is there, and can you get it in one piece?

Grade 13.5 across 4,558 words, in a single nine-page PDF. Difficulty 1, length 3, access 3. It is the second shortest policy measured here and one of the hardest to read, dense with tables and legal justifications rather than written to be read, and length is the only thing holding the score up. Access is 3 rather than 4 because it holds together as one document but arrives as a file. Measure it yourself.

How many clicks to reach data settings, and can you delete your account yourself?

Login-gated, with no guest route. Data settings and account deletion sit behind a sign-in, and no guest-accessible privacy request mechanism was found. Capped at 3 under the login-wall rule.

Find the support page. How many clicks, and is there a way to speak to a human?

A person in two clicks, once you go looking. A phone number and live agent chat both exist, which is more than most of the platforms here offer. They are revealed only after expanding an accordion that sits below the FAQ content and an AI assistant prompt, so the human option is present but placed last.