PRIVACY POLICY

A legal disclaimer

Effective Date: 29/10/25

Welcome to Herbal Haven. We value your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable privacy laws.

This Privacy Policy explains how we collect, use, store, and share your information when you visit our website https://www.shopherbalhaven.co/ or make a purchase from us.

1. Data Controller

The data controller responsible for your personal data is:

Herbal Haven
Email: shopherbalhavenco@gmail.com
Website: https://www.shopherbalhaven.co/

If you have any questions about this policy or your data rights, please contact us at the email above.

2. Information We Collect

We collect and process the following categories of personal data:

a. Information You Provide Directly

When you interact with our Site or make a purchase, we may collect:

Full name
Billing and shipping address
Email address
Phone number
Payment details (processed securely through third-party providers; we do not store full credit card information)
Order details and purchase history
Any information you voluntarily provide via our contact form or customer service

b. Automatically Collected Information

When you visit our Site, we may automatically collect:

IP address
Browser type and version
Device type and operating system
Date and time of access
Referring URLs and browsing patterns

This information helps us analyze website traffic, improve functionality, and enhance user experience.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

Contractual necessity – to process your order and provide requested services
Legal obligation – to comply with tax, accounting, or regulatory requirements
Legitimate interests – to operate, improve, and secure our services
Consent – where required for marketing or cookies

You may withdraw your consent at any time by contacting us or adjusting your cookie preferences.

4. How We Use Your Data

We use your personal data for the following purposes:

To process and fulfill your orders
To communicate with you about your purchases or account
To provide customer support and respond to inquiries
To send marketing emails (only with your consent)
To improve our products, website, and user experience
To detect and prevent fraud or unauthorized activity
To comply with applicable legal obligations

5. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to personalize your experience and analyze website performance.
Cookies may be set by us or by third parties (such as analytics or advertising providers).

You can manage or disable cookies through your browser settings. However, some website features may not function properly if cookies are disabled.

For more information, please see our Cookie Policy (if applicable).

6. Third-Party Service Providers

We use trusted third-party providers to help operate our business. These include:

Wix.com Ltd. – Website hosting and platform services
Payment processors – Such as PayPal and Wix Payments, for secure payment processing
Dropshipping suppliers – To fulfill and ship customer orders directly
Analytics providers – To help us understand website performance
Email and communication providers – For marketing and transactional emails

Each third party only receives the data necessary to perform their service and must process it in accordance with this Privacy Policy and GDPR standards.

7. International Data Transfers

As our store operates through Wix, and we work with suppliers and payment providers located in different countries, your data may be transferred and stored outside the European Economic Area (EEA).

Where data is transferred internationally, we ensure that:

The country provides an adequate level of data protection (as determined by the European Commission), or
We use Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure your data remains protected.

8. Data Retention

We retain your personal data only as long as necessary to:

Fulfill the purposes outlined in this policy,
Comply with legal obligations (e.g., tax or accounting requirements), and
Resolve disputes or enforce our agreements.

When data is no longer required, it will be securely deleted or anonymized.

9. Your Rights Under the GDPR

You have the following rights regarding your personal data:

Right of access – Request a copy of your data and information about how it’s processed
Right to rectification – Correct inaccurate or incomplete data
Right to erasure (“right to be forgotten”) – Request deletion of your data when it’s no longer needed
Right to restrict processing – Limit how we use your data in certain situations
Right to data portability – Receive your data in a structured, commonly used format
Right to object – Object to processing based on legitimate interests or direct marketing
Right to withdraw consent – At any time, where consent is the basis for processing

To exercise any of these rights, please contact us at shopherbalhavenco@gmail.com

10. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence or within the European Economic Area (EEA).

For EU residents, a list of national data protection authorities can be found here:
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
However, no online transmission or storage system can be guaranteed to be completely secure.

12. Children’s Privacy

Our Site is not directed toward children under 18, and we do not knowingly collect personal data from minors.
If we learn that we have collected such data, we will promptly delete it.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
The revised version will be posted on this page with the updated “Last Updated” date.

14. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how your data is handled, please contact us at: