Privacy policy

At HenaShade, we are committed to safeguarding the privacy and security of every visitor to our online store. This Privacy Policy explains how we collect, use, store, and protect your personal information when you browse or make a purchase from our website, which offers Mice, Keyboards, and Headphones. We adhere to internationally recognized data protection principles, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to ensure your rights are respected at all times.

1. Information We Collect

We collect only the information necessary to process your orders, improve our services, and communicate with you effectively. The types of data we may collect include:

  • Order Information: Your name, shipping address, billing address, email address, and payment details (processed securely by our payment gateway).
  • Device and Usage Data: IP address, browser type, operating system, pages visited, time spent on our site, and referring URLs. This helps us optimize your shopping experience.
  • Communication Data: Any messages or inquiries you send to us via email at [email protected], including any attachments or details you choose to share.
  • Cookies and Similar Technologies: We use cookies to remember your preferences, track cart contents, and analyze site traffic. You can disable cookies in your browser settings, though some features may not function properly.

2. How We Use Your Information

Your personal data is used solely for legitimate business purposes, including:

  • Processing and fulfilling your orders, including shipping, delivery, and returns.
  • Providing customer support and responding to your inquiries via email.
  • Sending order updates, delivery confirmations, and service-related notifications.
  • Improving our website, product selection, and overall user experience through aggregated analytics.
  • Preventing fraudulent transactions and ensuring the security of our platform.
  • Complying with applicable legal obligations, such as tax and accounting requirements.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Any sharing of data is limited to trusted service providers (e.g., shipping carriers, payment processors) who are bound by confidentiality agreements and use your data only to perform their services.

3. Legal Basis for Processing (GDPR)

For users located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Contract Performance: Processing is necessary to fulfill our contract with you when you place an order.
  • Legitimate Interests: We may process data to improve our website, prevent fraud, and ensure network security, provided your rights do not override these interests.
  • Legal Obligation: Where we are required to retain or disclose information to comply with applicable laws.
  • Consent: Where you have explicitly agreed to receive non-essential communications, which you may withdraw at any time.

4. Data Storage and Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order records are kept for a minimum of 5 years to comply with tax and accounting regulations.
  • Customer support correspondence is retained for 2 years after the last interaction.
  • Analytics data is anonymized and stored for a maximum of 26 months.

All data is stored on secure servers with encryption in transit (TLS 1.2 or higher) and at rest (AES-256). Access to personal data is restricted to authorized personnel only, who are trained in data protection practices.

5. Data Protection Measures

We implement a combination of technical, administrative, and physical safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. These include:

  • Firewalls and intrusion detection systems to monitor and block malicious activity.
  • Regular security audits and vulnerability assessments of our infrastructure.
  • Pseudonymization and encryption of sensitive data wherever feasible.
  • Strict access controls, including multi-factor authentication for internal systems.
  • Secure payment processing through PCI-DSS compliant gateways. We never store full credit card numbers on our servers.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct any inaccurate or incomplete information.
  • Erasure: Ask us to delete your personal data, subject to legal retention obligations.
  • Restriction: Limit how we process your data in certain circumstances.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests or direct marketing.
  • Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days of receiving your request. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

7. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Specifically, we use:

  • Essential Cookies: Required for core functionality, such as maintaining your shopping cart and remembering your preferences.
  • Analytics Cookies: Help us understand how visitors interact with our site, allowing us to improve layout, product offerings, and performance.
  • Marketing Cookies: Used only with your explicit consent to display relevant product recommendations. These are not used for third-party advertising.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to complete purchases.

8. International Data Transfers

If you are accessing our website from outside your country of residence, your personal data may be transferred to and processed in countries where our servers or service providers are located. We ensure that any international transfer complies with applicable data protection laws by implementing standard contractual clauses or relying on adequacy decisions where available. By using our website, you acknowledge and consent to these transfers.

9. Children's Privacy

HenaShade does not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal data, please contact us at [email protected], and we will promptly delete such information from our records.

10. Third-Party Links

Our website may contain links to external sites (e.g., payment processors, shipping carriers). We are not responsible for the privacy practices or content of these third-party websites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page, and the revised version will apply to all information collected after the date of publication. We recommend that you review this page periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us via email at [email protected]. We are dedicated to addressing your inquiries promptly and transparently.

Thank you for trusting HenaShade with your information. We are committed to providing you with a secure and enjoyable shopping experience for all your Mice, Keyboards, and Headphones needs.