Privacy policy

Privacy Policy


Last updated: May 19, 2026


Hersoma operates this store and website, including all related information, content, features, tools, products and services (the “Services”), in order to provide you with a curated shopping experience. Hersoma is powered by Shopify, which enables us to provide the Services to you.


This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or otherwise interact with the Services.


By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.



1. Personal Information We Collect


“Personal information” means any information that can identify or reasonably be linked to you.


We may collect the following categories of personal information:


Contact details (name, billing/shipping address, email address, phone number)

Payment information (payment method details, transaction information — processed securely by payment providers)

Account information (username, password, preferences)

Order information (products purchased, returns, exchanges, cart activity)

Communications (messages you send to us, customer support requests)

Device information (IP address, browser type, device identifiers)

Usage data (how you interact with our website, pages viewed, actions taken)



2. How We Collect Personal Information


We collect personal information:


Directly from you (when you place an order, create an account, or contact us)

Automatically through cookies and similar technologies when you use the website

From service providers such as Shopify, payment processors, and delivery partners

From third-party tools used for analytics or website functionality (if applicable)



3. How We Use Your Personal Information


We use your personal information to:


Provide Services


Process orders and payments

Deliver products

Manage your account

Provide customer support

Handle returns and exchanges


Improve Our Services


Understand how customers use our website

Improve product selection and user experience

Maintain website functionality and security


Marketing (only where permitted by law)


We may use your information to send you marketing communications (such as email updates or promotions), but only where we are legally allowed to do so.


You can opt out of marketing at any time using the unsubscribe link in emails or by contacting us.


We do not use your personal data for marketing without a lawful basis such as consent or legitimate interest, where applicable.


Legal and Security Purposes


Prevent fraud and abuse

Comply with legal obligations

Respond to legal requests

Protect our rights and customers



4. Cookies and Tracking Technologies


We use cookies and similar technologies to:


Enable essential website functions

Remember user preferences

Analyze website traffic and performance

Improve user experience


Where required by law (including UK/EU rules), we will obtain your consent before using non-essential cookies.


You may manage or disable cookies in your browser settings.



5. How We Share Personal Information


We may share personal information with:


Shopify and other service providers that help operate the store (payments, hosting, analytics, fulfillment)

Delivery and logistics partners to fulfill orders

Marketing or analytics providers (only where applicable and legally permitted)

Authorities or regulators when required by law

Business partners when necessary to operate the Services


We do not sell your personal data.


We may share limited data with service providers strictly to operate and improve the Services.



6. Shopify


Our store is hosted by Shopify. Shopify processes personal data on our behalf and may also process certain data independently as described in its own privacy policy.


For more information, you can review Shopify’s privacy practices here:

https://privacy.shopify.com/



7. Data Retention


We retain personal information only for as long as necessary to:


Provide our Services

Fulfill legal obligations (such as accounting or tax requirements)

Resolve disputes

Enforce agreements


When data is no longer needed, it is securely deleted or anonymized.



8. Your Rights (UK / EU / EEA Users)


Depending on your location, you may have the right to:


Access your personal data

Request correction of inaccurate data

Request deletion of your data

Object to processing of your data

Request restriction of processing

Request data portability

Withdraw consent at any time (where processing is based on consent)


If you are located in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

https://ico.org.uk/


We will not discriminate against you for exercising your rights.



9. International Transfers


Your personal information may be transferred and processed outside your country of residence, including outside the UK or EEA.


Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect your data.



10. Security


We take reasonable technical and organizational measures to protect your personal information.


However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.



11. Children’s Data


Our Services are not intended for children under the age of majority in your jurisdiction.


We do not knowingly collect personal data from children. If we become aware that such data has been collected, we will delete it.



12. Third-Party Links


Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we recommend reviewing their policies separately.



13. Changes to This Policy


We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.



14. Contact Us


If you have any questions or wish to exercise your rights, you can contact us at:


Email: info@hersoma.com

Address: 1 Hallsville Road, ENG, E16, GB


We are the data controller of your personal information for the purposes of applicable data protection laws.