Privacy policy

 

Privacy Policy

 


Last Updated: 24 October 2026


Your privacy matters to us. We never sell your data, and we only collect what's necessary to serve you better.

 

 

 

Privacy Policy: A Quick Summary

 


Your Data: We collect only the information needed to process your orders, improve your experience, and communicate with you.


How We Use It: Your data is used for payments, shipping, and customer support (including by WhatsApp, where an AI tool helps draft replies that a member of our team checks before sending). We may also send marketing (if you've opted in) and use analytics to improve our site.


Your Rights: You can request access, correction, or deletion of your data at any time. We respect GDPR and UK GDPR laws.

 

 

 

1. Collecting Personal Information

 


When you visit our Site, we collect certain information to process your purchases and improve your experience.


Types of Personal Information we collect:


Device Information:

Examples: IP address, browser type, time zone, cookie data, pages/products viewed, search terms.

Purpose: To display the Site properly and analyse traffic for optimisation.

Source: Automatically collected via cookies, log files, tags, or pixels.

Shared with: Shopify, Google, Facebook, Instagram.


Order Information:

Examples: Name, email, phone number, billing/shipping address, payment information.

Purpose: To process payments, arrange delivery, provide order confirmations, and detect fraud.

Shared with: Shopify and secure payment providers (we do not store raw credit card details).


Customer Support Information:

Examples: Your name, email address, phone number, order details and the content of your messages to us (by email or WhatsApp).

Purpose: To assist with enquiries and resolve issues.

Shared with: Shopify, Gmail, Meta (WhatsApp), Make.com and our AI assistant provider (see section 4).


WhatsApp Information:

Examples: Your name, WhatsApp phone number, WhatsApp profile name, the messages you send us and the order updates we send you.

Purpose: To send order updates you have asked for, to answer your support messages and, if you have signed up for WhatsApp marketing, to send you marketing messages.

Shared with: Meta (WhatsApp), Shopify, Make.com and our AI assistant provider (see section 4).

 

 

 

2. Minors

 


Our Site is not intended for individuals under 13 in the UK (or 16 where applicable in the EU). We do not knowingly collect data from children. If you believe a child has provided personal data, contact us to request deletion.

 

 

 

3. Sharing Personal Information

 


We share your information only with trusted service providers, for example:

 

  • Shopify: To power our store. Shopify Privacy Policy

  • Meta (WhatsApp): To send WhatsApp order updates and handle WhatsApp support chats on our behalf. WhatsApp Privacy Policy

  • Make.com (Celonis): An automation service that passes incoming WhatsApp messages to our support assistant. Make Privacy Notice

  • AI assistant provider: xAI (Grok): Drafts replies to support messages for our team to review. xAI Privacy Policy. We may in future use OpenAI (ChatGPT) or Anthropic (Claude) for the same purpose. OpenAI Privacy Policy · Anthropic Privacy Policy

  • Legal Compliance: We may disclose information to comply with legal obligations or lawful requests.

 


When Shopify Network Intelligence is enabled, Shopify securely uses data from interactions with our store and other Shopify merchants to provide Enhanced Services. These services help detect fraud, improve shopping experiences, and enhance business operations across Shopify stores.


Shopify may process this data in aggregated or anonymised form to power these features. You can learn more in the Shopify Consumer Privacy Policy and exercise your rights via the Shopify Privacy Portal.

 

 

 

4. WhatsApp & AI-Assisted Support

 


You can message us on WhatsApp at +44 7555 327705, and you can choose to receive order updates by WhatsApp.


Meta (WhatsApp):

WhatsApp is provided by Meta. When we send or receive WhatsApp messages through our business account, Meta processes your name, phone number and messages on our behalf to deliver them, and keeps them only for a limited period under its own terms. WhatsApp also handles your own WhatsApp account under its own Privacy Policy.


Make.com:

We use Make.com, an automation service run by Celonis, to pass incoming WhatsApp messages to our support assistant. Our Make account is hosted in Make's EU data centre.


AI-assisted replies:

An AI assistant helps us draft replies to your support messages. We currently use Grok, provided by xAI, and may in future use ChatGPT (OpenAI) or Claude (Anthropic). A member of our team reviews every reply before it is sent. We do not make decisions about you based solely on automated processing.


WhatsApp marketing:

We only send WhatsApp marketing or abandoned-cart reminder messages to people who have signed up for WhatsApp marketing. You can opt out at any time by replying STOP or by emailing us.


If you'd rather not use WhatsApp, you can contact us by email instead. You can stop WhatsApp order updates at any time by replying STOP on WhatsApp or by emailing us at contact@herbharmony.co.uk.

 

 

 

5. Behavioural Advertising

 


We use your data for targeted advertising and site analytics:

 

  • Google Analytics: Helps us understand customer behaviour. Google Privacy.

 


Opt-out of personalised ads:

Facebook

Google

Bing

Or use the Digital Advertising Alliance Opt-out.

 

When Shopify Network Intelligence is active, some advertising features may use aggregated data from customer interactions across Shopify merchants. Customers in the UK and EEA will only see such ads if they have given consent via our cookie banner, and can withdraw consent at any time.

 

 

 

6. Using Personal Information

 


We use your information to:

 

  • Provide products and services.

  • Process payments and arrange delivery.

  • Send order confirmations and updates (including by WhatsApp, if you choose).

  • Answer your enquiries by email or WhatsApp, with AI-drafted replies that a member of our team reviews before sending.

  • Share marketing communications (only if you consent).

  • Improve and optimise our website.

 

 

Shopify may also process your information to help provide Enhanced Services, such as fraud prevention and analytics, based on aggregated interactions across Shopify merchants.

 

 

 

7. GDPR & UK GDPR Compliance

 


If you are a resident of the UK or EEA, we process your data under the following legal bases:

 

  • Your consent.

  • Performance of a contract with you.

  • Legal obligations (e.g., tax and accounting).

  • Legitimate business interests (e.g., improving services).

 

For WhatsApp: we send order updates to perform our contract with you, and only where you have chosen to receive them on WhatsApp. We handle your WhatsApp support messages, including using Make.com and AI-drafted replies, because we have a legitimate interest in answering your enquiries quickly and well, or to perform our contract with you where your message is about an order. We send WhatsApp marketing and abandoned-cart reminder messages only with your consent, given when you sign up for WhatsApp marketing; you can withdraw it at any time by replying STOP or emailing us.

 


Data Transfers:

Your data may be transferred to Shopify servers in Canada or the USA. Shopify ensures GDPR-compliant safeguards.

WhatsApp messages are processed by Meta in its data centres, which include the USA. For transfers from the UK, Meta uses the EU Standard Contractual Clauses with the UK International Data Transfer Addendum.

Our Make.com account is hosted in the EU, which the UK recognises as providing adequate protection. Make is run by Celonis, Inc. (USA), which is certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), and some of its service providers are in the USA.

Our AI assistant provider, xAI, is based in the USA and processes data there; for transfers from the UK it uses the EU Standard Contractual Clauses with the UK International Data Transfer Addendum. If we use OpenAI or Anthropic in future, they also process data in the USA and rely on appropriate safeguards such as Standard Contractual Clauses with the UK Addendum.

You can ask us for a copy of the safeguards we rely on by emailing contact@herbharmony.co.uk.

 

You can review how Shopify safeguards and processes your data, and exercise your rights, through the Shopify Privacy Portal.

 

 

 

8. Data Retention

 


We keep personal information only as long as necessary or as required by law (e.g., up to 6 years for tax purposes). You can request data deletion at any time.


When data is deleted from our systems, any associated data stored by Shopify Network Intelligence will also be deleted.


We keep WhatsApp conversations about orders for up to 6 years after the order, in case of queries or claims, and other WhatsApp conversations for up to 24 months after your last message, unless you ask us to delete them sooner. Meta keeps WhatsApp messages it handles for us only for a limited period under its own terms. Make.com keeps short technical logs of the messages it passes on for a limited period (currently 7 days) under its own retention settings.

 

 

 

9. Your Rights (UK & EEA)

 


You have the right to:

 

  • Access the data we hold about you.

  • Request correction, updates, or deletion of your data.

  • Receive a copy of your data (data portability).

  • Object to specific processing, including marketing.

  • Ask us to restrict how we use your data.

  • Withdraw your consent at any time, where we rely on consent (for example, by unsubscribing or opting out of WhatsApp updates).

  • Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

 


To exercise these rights, contact contact@herbharmony.co.uk or visit the Shopify Privacy Portal.

 

 

 

10. Cookies

 


We use cookies to improve your browsing experience.

 

  • Essential cookies: Enable checkout, login, and basic site functions.

  • Analytics cookies: Track how visitors use the site.

  • Advertising cookies: Enable personalised ads (with consent).

 


You can manage cookies in your browser settings or visit www.allaboutcookies.org.

 

Our cookie banner allows you to consent or withdraw consent for analytics and advertising cookies. If consent is not given, your device data will not be used by Shopify Network Intelligence for non-essential purposes.

 

 

 

11. Do Not Track

 


We do not respond to browser-based Do Not Track signals, but we respect cookie consent choices made on our Site.

 

 

 

12. Changes

 

We may update this policy to reflect changes to our practices or legal requirements. The most recent version will always be posted here.

 

 

 

13. Contact

 


For privacy-related questions or complaints:


Herb Harmony

Email: contact@herbharmony.co.uk

Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom