Himmaleh Privacy Policy

This privacy policy explains how Himmaleh collects, uses, shares and protects your personal data when you browse himmaleh.org, place an order, or otherwise get in touch with us. Himmaleh is a trading name of Ridge Fernandes, an individual (sole trader) based in the United Kingdom, with a registered and trading address at Apt 30, The Galleria, Aberdeen, AB11 6FB, United Kingdom.

Ridge Fernandes, trading as Himmaleh, is the data controller responsible for your personal data. This policy applies to all customers, wherever in the world you're ordering from, and is governed by UK data protection law.

We collect the personal data needed to run our store and look after you as a customer. This includes your name, email address and phone number if you give it to us, your delivery and billing address, the items you order, order and payment references, and any messages you send us through customer support.

Payment information, such as your card details, is collected and processed directly by Shopify Payments and the other payment methods offered at checkout; we do not see or store your full card details ourselves. If you sign up for marketing, we record your consent status and preferences so we know whether and how we can email you.

We do not knowingly collect special category data, such as health information, racial or ethnic origin, or biometric data, and we do not knowingly collect data from children.

We use your personal data to process and fulfil your order, arrange worldwide shipping and provide tracking, and handle returns and refunds. We use it to respond to customer service enquiries and resolve any issues with your order.

We also use your data to meet our legal and accounting obligations, to detect and prevent fraud, and to keep our website secure and working properly. Where you've opted in, we use your email address to send marketing updates about new products and offers. You can unsubscribe at any time using the link in any marketing email.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

UK GDPR requires us to have a lawful basis for each way we use your personal data. For processing your order, arranging delivery and providing customer support, we rely on contract, since it's necessary to fulfil the sale agreement between us.

For accounting and tax records, we rely on legal obligation, since UK tax law requires us to keep certain records. For fraud prevention and keeping our website secure, we rely on legitimate interests, having weighed that this doesn't override your rights and freedoms. For marketing emails, we rely on your consent, which you can withdraw at any time.

We never sell your personal data. We only share it with service providers who need it to help us run our store and fulfil your order, including our e-commerce platform (Shopify), the payment processors offered at checkout, the shipping carriers we use to deliver your order, and our email and analytics providers. Each of these processors is bound by data processing agreements and confidentiality obligations.

We may also disclose your data where required by law, to respond to a valid request from a court or regulator, or to enforce our terms. In each case your data stays protected under the terms of this policy.

We keep personal data only as long as necessary for the purpose it was collected for, or as required by law. Order and accounting records are kept for as long as UK tax and accounting rules require. Customer service communications are kept for a reasonable period after your last contact with us in case a related issue comes up again.

If you unsubscribe from marketing, we keep a record of your opt-out so we don't email you again, and we delete inactive marketing data after a reasonable period. You can ask us to delete your data at any time, see the rights section below, and we will do so unless we're legally required to keep it.

We use cookies and similar technologies on himmaleh.org. Necessary cookies, such as those that keep your basket working and keep the site secure, don't require your consent. Analytics and marketing cookies are only set with your permission, in line with UK rules on cookies and electronic communications.

You can manage your cookie preferences through the cookie banner shown on your first visit, or by adjusting your browser settings to block or delete cookies. Turning off necessary cookies may affect how the site works, for example your basket may not save correctly.

For any question about this policy or to exercise your rights, email us at contactus@himmaleh.org or call +44 7936 273422. We aim to respond to all privacy requests within one month, extendable by a further two months for complex requests, and we'll let you know if that's needed.