Privacy Policy

This Privacy Policy explains how Herritual, trading as herritual.co.uk (“we”, “us” or “our”), collects, uses, shares and protects personal information when you visit herritual.co.uk, communicate with us or make a purchase.

Information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information: name, billing and delivery address, email address and telephone number.

• Order information: products ordered, order value, discounts, delivery information, returns and customer-service history.

• Payment information: payment status and limited transaction identifiers. Full card details are normally processed directly by Shopify Payments or another payment provider and are not stored by us.

• Account information: login credentials and preferences if customer accounts are enabled.

• Device and usage information: IP address, browser, device type, cookie identifiers, pages viewed, referral source and interactions with the store.

• Marketing information: subscription status, campaign engagement and advertising preferences.

• Communications: messages, reviews, survey responses and information you provide to customer support.

• Security information: information used to detect fraud, misuse, chargebacks or other security threats.

How we use personal information

We may use personal information to:

• Process payment and fulfil, deliver and manage orders

• Provide order confirmations, tracking and customer support

• Manage returns, refunds, disputes and product-safety matters

• Operate, secure, maintain and improve the store

• Detect fraud and protect our customers and business

• Comply with tax, accounting, consumer-protection and other legal obligations

• Send marketing where you have consented or where otherwise permitted by law

• Measure website performance and advertising effectiveness, subject to required consent choices

• Establish, exercise or defend legal claims

UK legal bases

Where UK data-protection law applies, we rely on one or more of these legal bases:

• Contract: processing necessary to take payment, fulfil an order or provide requested support.

• Legal obligation: processing required for tax, accounting, consumer, safety or regulatory duties.

• Legitimate interests: operating and improving the store, preventing fraud and protecting the business, where those interests are not overridden by your rights.

• Consent: certain marketing, advertising cookies or other activities where consent is required. You may withdraw consent at any time.

How we receive information

We collect information directly from you and automatically through the store. We may also receive it from Shopify, payment providers, advertising platforms, delivery providers, fraud-prevention services and other services you choose to use.

Who we share information with

We may share information only as reasonably necessary with:

• Shopify, which hosts and operates the ecommerce platform

• Payment processors and fraud-prevention providers

• Suppliers, fulfilment partners, warehouses and delivery carriers

• Customer-support and order-tracking providers

• Email and marketing provider: help@herritual.com

• Analytics and advertising providers: [ANALYTICS AND ADVERTISING PROVIDERS]

• Professional advisers, insurers, auditors and regulators

• A purchaser or successor in connection with a genuine business sale or restructuring

• Law-enforcement bodies or other parties where required by law or necessary to protect legal rights

Our service providers may process information only for the services they provide, subject to their agreements and applicable law. Review Shopify’s automatically generated disclosures so this section accurately reflects all apps and Shopify services enabled on your store.

International transfers

Some providers may process information outside the United Kingdom or your country of residence. Where required, we use recognised safeguards such as an adequacy regulation, approved contractual clauses or another lawful transfer mechanism.

Data retention

We retain information only for as long as reasonably necessary for the purpose collected, including order fulfilment, customer support, warranty or safety matters, tax and accounting requirements, fraud prevention and legal claims. Different records may have different retention periods.

When information is no longer required, we delete or anonymise it where reasonably possible.

Your privacy rights

Depending on where you live, you may have rights to:

• Request access to personal information

• Correct inaccurate or incomplete information

• Request deletion in certain circumstances

• Restrict or object to certain processing

• Receive certain information in a portable format

• Withdraw consent at any time

• Opt out of marketing communications

• Complain to a relevant data-protection authority

To make a request, email help@herritual.com. We may need to verify your identity. Some rights are subject to legal exceptions.

UK residents may complain to the Information Commissioner’s Office at ico.org.uk, although we encourage you to contact us first so we can try to resolve the issue.

Marketing communications

You can unsubscribe using the link in a marketing email or by contacting us. You may still receive service messages about existing orders, returns, safety notices or changes that affect your account.

Cookies

We use cookies and similar technologies as described in our Cookie Policy. Where required, non-essential analytics and advertising technologies will not be used until you make a consent choice.

US privacy choices

Residents of some US states may have additional rights, including rights concerning targeted advertising or the sale or sharing of personal information. Where applicable, use the Do Not Sell or Share My Personal Information page or the privacy-preferences control in our cookie banner.

Children

The store is not directed to children, and we do not knowingly collect personal information from children below the age at which they can lawfully provide it. Contact us if you believe a child has provided information improperly.

Security

We use reasonable organisational and technical safeguards, but no method of transmission or storage is completely secure. Keep your account credentials confidential and contact us if you suspect unauthorised activity.

External links

The store may link to external websites. Their privacy practices are governed by their own policies, not this one.

Changes to this policy

We may update this policy when our practices, services or legal duties change. The current version and effective date will be published on this page.