Privacy policy

This Privacy Policy describes how hillhousehomehx.shop collects, uses, stores, discloses and otherwise processes personal information when you visit our website, communicate with us or purchase products through our online store.

For privacy-related questions or requests, contact:

info@hillhousehomehx.shop

The GDPR applies to businesses established in the European Union and can also apply to businesses outside the EU where their activities target individuals in the EU.

1. Scope of This Policy

This Policy applies to personal information processed in connection with:

hillhousehomehx.shop; customer accounts; online orders; checkout; payment administration; shipping and delivery; customer support; returns and refunds; fraud prevention; website analytics; marketing communications where applicable; and other interactions between you and our store.

2. Personal Information We May Collect

Depending on how you interact with the store, we may process information such as your name, email address, telephone number if supplied, billing details, shipping address, order details, product selections, transaction information, customer-service communications, return and refund information and account details.

We may also receive technical information such as IP address, browser information, device information, cookie identifiers, website usage information and information concerning your interaction with our store.

Payment-card information is generally processed through specialised payment service providers rather than being intentionally collected through ordinary customer-service email.

3. How We Collect Personal Information

Personal information may be collected directly from you when you place an order, create or use an account, subscribe to communications, submit a customer-service request, request a return or otherwise provide information to us.

Information may also be collected automatically through website technologies or received from service providers involved in operating the store, processing transactions, preventing fraud or completing deliveries.

4. Purposes of Processing

We may process personal information to:

Operate and maintain the website; provide products and services requested by customers; process and fulfil orders; process payments and refunds; arrange shipping and delivery; maintain transaction records; provide customer support; detect and prevent fraud or misuse; protect our systems and customers; comply with legal, accounting and regulatory obligations; analyse and improve store functionality; and send marketing communications where permitted by law.

5. Legal Bases Under the GDPR

Where the GDPR applies, processing may rely on one or more lawful bases depending on the particular activity.

These may include processing necessary for the performance of a contract or to take steps requested before entering into a contract, processing necessary to comply with legal obligations, processing based on legitimate interests where those interests are not overridden by the individual's rights and freedoms, and processing based on consent where consent is legally required.

The CNIL emphasises that GDPR information must be transparent, understandable and accessible to the individuals concerned.

6. Order and Contract Administration

We process information necessary to accept, administer, fulfil and document orders.

This may include customer identity and contact information, selected products, transaction details, delivery details, communications concerning the order and records relating to returns, refunds or complaints.

Without certain information, we may be unable to process or fulfil an order.

7. Payment Processing

Payments may be processed by Shopify Payments or other authorised payment providers available through checkout.

Those providers may independently process personal information for payment authorisation, fraud prevention, security, regulatory compliance and related purposes under their applicable terms and privacy policies.

8. Shopify

Our store uses Shopify ecommerce technology.

Shopify and its affiliates may process personal data as necessary to provide ecommerce-platform functionality and related services.

Shopify identifies Shopify International Limited as its contracting party for many merchants within Europe, subject to the merchant's circumstances and Shopify's applicable terms.

9. Shipping and Fulfilment Providers

Information necessary to deliver your order may be shared with appropriate carriers, logistics providers, warehouse operators and fulfilment partners.

The information shared is limited to what is reasonably necessary for order fulfilment, delivery, tracking, customer support, customs administration where relevant and related operational purposes.

10. Fraud Prevention and Security

We may process transaction, account, technical and behavioural information where reasonably necessary to protect customers, prevent payment fraud, detect misuse, secure the website and enforce legitimate contractual rights.

Payment processors and ecommerce service providers may also operate independent fraud-prevention systems.

11. Cookies and Similar Technologies

hillhousehomehx.shop may use cookies and similar technologies to provide essential website functionality, remember preferences, maintain shopping-cart functionality, understand website performance, prevent fraud and, where permitted, support analytics or advertising.

Under French rules implementing the ePrivacy framework, certain non-essential cookies and trackers require prior user consent, while strictly necessary technologies may be exempt.

Where consent is required, users should be given an appropriate opportunity to accept or refuse relevant non-essential technologies.

12. Marketing Communications

Where permitted by applicable law, we may send promotional communications to customers or subscribers.

Where consent is required for electronic marketing, communications will be sent on the basis of valid consent or another lawful basis permitted by applicable legislation.

You may unsubscribe from marketing communications using the unsubscribe mechanism provided in the message or by contacting info@hillhousehomehx.shop.

Withdrawing consent to marketing does not prevent us from sending transactional communications necessary for an existing order or customer-service matter.

13. Disclosure of Personal Information

Personal information may be shared with service providers where reasonably necessary to operate our business.

These may include ecommerce-platform providers, payment providers, fraud-prevention providers, hosting and infrastructure providers, logistics providers, carriers, analytics providers, customer-service technology providers, professional advisers and governmental or regulatory authorities where disclosure is required by law.

We do not authorise service providers to use information contrary to the purposes for which it was legitimately provided.

14. International Transfers

Some service providers may process personal information outside France or the European Economic Area.

Where GDPR transfer restrictions apply, appropriate transfer mechanisms and safeguards should be used as required by applicable law.

The location in which information is technically processed may depend on the service provider, infrastructure and service used.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including fulfilling contracts, maintaining legitimate business records, complying with accounting or tax requirements, resolving disputes, protecting legal rights and satisfying applicable legal obligations.

Different categories of information may therefore be retained for different periods.

When information is no longer reasonably required, it may be deleted, anonymised or otherwise handled in accordance with applicable law.

16. Your GDPR Rights

Where the GDPR applies, you may have rights including access to personal data, rectification of inaccurate data, erasure in applicable circumstances, restriction of processing, data portability where applicable, objection to certain processing and withdrawal of consent where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

You may exercise applicable rights by contacting:

info@hillhousehomehx.shop

We may need to verify your identity before completing certain requests.

17. Right to Object to Direct Marketing

Where your personal information is processed for direct marketing, you may object to that processing.

Once a valid objection to direct marketing has been received, the relevant data should no longer be used for that purpose except where another legally permissible basis applies to different processing.

18. Complaints to a Supervisory Authority

Individuals in France may have the right to lodge a data-protection complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) or another competent European supervisory authority.

Contacting us first at info@hillhousehomehx.shop may allow us to investigate and resolve your concern directly, but doing so does not remove any statutory right to contact a supervisory authority.

19. Children's Privacy

Our store is not intended to knowingly collect unnecessary personal data from children.

Where applicable law requires parental or guardian authorisation for a particular processing activity, appropriate safeguards should be applied.

If you believe that a child has provided personal information improperly, contact info@hillhousehomehx.shop.

20. Information Security

We use reasonable organisational and technical measures intended to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.

However, no internet transmission or electronic storage method can be guaranteed to be completely secure.

Customers should use appropriate security practices when maintaining accounts or communicating sensitive information online.

21. Third-Party Websites

Our website may contain links to independent third-party websites or services.

Their privacy practices are governed by their own policies. We are not responsible for the independent privacy practices of third-party websites that we do not control.

22. Changes to This Privacy Policy

We may update this Privacy Policy when our practices, technologies, services or legal obligations change.

The current version will be published through hillhousehomehx.shop with an updated revision date where appropriate.

23. Contact

Privacy enquiries and GDPR requests may be sent to:

hillhousehomehx.shop
Email: info@hillhousehomehx.shop