HERBYZEE
Privacy Policy
What data we collect, why we collect it, and the choices you have.
This policy explains what personal data we collect when you use this website or order from us, why we collect it, who we share it with, and what control you have.
Data we collect
- Order data — name, delivery address, phone number, email address, and order contents.
- Payment data — for bank transfers, the payment proof and transaction reference you upload. We do not collect or store card numbers, PINs, CVVs, or OTPs.
- Account data — your email, a securely hashed password, saved addresses, wishlist, and order history.
- Support data — messages, photos, and videos you send us about an order.
- Technical data — IP address, browser and device type, and pages viewed, collected through cookies and analytics.
Why we use it
- To process, verify, pack, and deliver your orders.
- To call or message you for COD verification and delivery coordination.
- To handle returns, exchanges, refunds, and support requests.
- To detect and prevent fraud and abuse of promotions.
- To improve the site, our products, and our stock planning.
- To send order updates. Marketing messages are sent only where you have opted in, and every one carries an unsubscribe option.
Who we share it with
- Courier partners — your name, address, and phone number, so they can deliver your parcel. This sharing is essential and cannot be opted out of while still ordering delivery.
- Service providers — hosting, email, SMS, WhatsApp, and analytics providers acting on our instructions.
- Authorities — where disclosure is required by law or to establish or defend legal claims.
We do not sell your personal data, and we do not rent or trade your contact list.
Cookies
We use cookies to keep your cart and session working, remember preferences, and measure site usage. Blocking essential cookies in your browser will break cart and checkout functionality. Analytics cookies can be blocked without affecting your ability to order.
How long we keep it
Order and transaction records are retained for as long as needed for accounting, tax, and warranty purposes. Account data is retained while your account is open. Support conversations are retained for a reasonable period after the case closes.
Security
We use encrypted connections, hashed passwords, and access controls limiting order data to staff who need it. No system is perfectly secure, but we notify affected customers promptly if a breach materially affects their data.
Your rights
You may ask us to give you a copy of the data we hold about you, correct anything inaccurate, delete your account, or stop sending you marketing. Contact us through our Customer Service page. We may need to verify your identity first, and some records must be retained where the law requires it.
Children
This site is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
Changes
We may update this policy. The current version is always published on this page.
Contact
For any privacy question or request, reach us through our contact page. See also our Terms of Service.