Last updated: 1 August 2026. This policy describes how we handle your personal data when you buy from this store.
1. Who we are
[Legal entity name] operates this store and is the controller of the personal data described below. You can reach us at info@herbalson.com or at [registered address].
2. What we collect
We collect only what we need to fulfil your order: your name, delivery address, email address and phone number. If you create an account we also store your login details. If you give us a Telegram handle, we store that too. We do not receive or store your card number — payment is handled by our payment provider on their own systems.
3. Why we use it
To take payment for and deliver your order; to contact you about that order; to handle returns and refunds; to keep the accounting and tax records the law requires of us; and, if you have asked for them, to send you marketing emails. You can unsubscribe from marketing at any time using the link in any such email.
4. Who we share it with
Only with the service providers who make the order happen: our payment provider, the carrier delivering your parcel, our hosting provider and our email provider. Each processes your data only on our instructions. We do not sell your personal data. We disclose data to authorities only where the law requires it.
5. International transfers
Because we ship internationally, your delivery details are shared with carriers and customs authorities in the destination country. Where data leaves your own jurisdiction, we rely on the transfer safeguards available to us under applicable law.
6. How long we keep it
Order and transaction records are kept for as long as tax and accounting law requires. Account data is kept until you close your account. Marketing consent records are kept until you withdraw consent, plus a short period to prove you did.
7. Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop certain processing, and ask for your data in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to info@herbalson.com and we will respond within the period the law allows. If you are unhappy with our response, you can complain to your local data protection authority.
8. Security
We use organisational and technical measures appropriate to the risk to protect your data against unauthorised access, loss or alteration. No system is perfectly secure, but we take this seriously and will tell you and the relevant authority if a breach affects you.
9. Cookies
[Describe the cookies this site sets, and link to a cookie settings control if you run any non-essential cookies. If you run analytics or advertising tags in the EU or UK, you need consent before they load.]
10. Changes
If we change this policy we will update the date at the top. Material changes will be brought to your attention.