Privacy Policy

Who We Are

Herbasense, part of Herbalveda ("we", "us", "our"), sells Ayurvedic herbs, oils, and wellness essentials online at https://herbalveda.shop. For the purposes of UK data protection law, we are the data controller for the personal information described in this policy.

Information We Collect

We collect information you give us directly and information generated as you use the site:

Account details — name and email address. We don't store passwords: you sign in with a single-use code we email you, or with Google, in which case we hold the account identifier Google gives us.
Order information — billing and shipping addresses, phone number, and order/order-history details.
Payment information — handled entirely by our payment processor (Stripe); we never see or store your full card number.
Wishlist, reviews, and preferences — products you save, reviews you submit, and marketing preferences.
AI shopping assistant conversations — messages you send our chat assistant, so we can respond and improve the assistant's answers.
Usage and device data — pages visited, approximate location (from IP address), browser/device type, and referral source, collected via cookies and similar technologies.

How We Use Your Information

We use your information to:

Create and manage your account, and process and deliver your orders.
Provide customer support and respond to your enquiries.
Send transactional emails — order confirmations, shipping updates, and receipts.
Send marketing emails about new products and offers, where you've opted in — you can unsubscribe at any time.
Detect and prevent fraud, and keep our site secure.
Understand how our site is used, so we can improve it.

Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

Contract — to process and fulfil the orders you place with us.
Legitimate interests — to keep our site secure, prevent fraud, and improve our products and service.
Consent — for marketing emails and non-essential cookies.
Legal obligation — to meet tax, accounting, and regulatory requirements.

Cookies & Tracking

We use cookies and similar technologies to:

Keep you signed in and remember what's in your cart (essential — always on).
Remember your region and currency preferences.
Understand aggregate site usage through analytics, so we can improve the store.

You can control or disable non-essential cookies through your browser settings at any time; essential cookies are required for the site to function and cannot be disabled.

We don't sell your personal information. We share it only with trusted service providers who help us run the business, under contracts that require them to protect your data:

Stripe — payment processing.
Shipping carriers — to deliver your order.
Resend — to deliver transactional and marketing emails.
Google — if you choose to sign in with your Google account.
Cloud storage (Amazon S3) — to securely store documents such as invoices.
AI providers (OpenAI) — to power our shopping assistant's responses to your messages.

We may also disclose information where required by law or to protect our legal rights.

Data Retention

We keep account and order data for as long as your account is active, and for a reasonable period afterwards to meet our tax, accounting, and legal obligations. You can ask us to delete your account at any time — see Your Rights below.

Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Restrict or object to certain processing.
Receive your data in a portable format.
Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at contact@herbalveda.shop. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Children's Privacy

Our site is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us and we'll remove it.

International Transfers

Some of our service providers process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your information to UK data protection standards.

Data Security

We use industry-standard technical and organisational measures — including encryption in transit, access controls, and secure hosting — to protect your data against unauthorised access, loss, or misuse.

Changes to This Policy

We may update this policy from time to time. We'll update the "last updated" date above, and let you know of any material changes.

Contact Us

For any questions about this policy or how we handle your data, email us at contact@herbalveda.shop.