Herbman Hustlin takes the privacy of its customers seriously and is committed to the following policy.
The Information We Collect:
Information Provided By You
We collect the following personal information on customers who have created orders with us.
This information is required to process payment and deliver your order to you and is provided by you to Herbman Hustlin when you place an order with us online or over the telephone.
Information Collected Automatically
We store some information automatically as you browse our site, such as the IP address of the device you are visiting with. This is for the purpose of security and gaining information on the way you use the website for market research etc.
How we use this information
The information you provide to us is used so that we can offer you, the customer, the best experience possible.
Herbman Hustlin is committed to being transparent when it comes to data and your privacy. We use data that you provide us for the following reasons:
Processing your order - We use the information you provide to process your order. For example, we need to supply address details to our suppliers and couriers in order for them to dispatch your purchase.
Provide you with order details and account information - This section of the website allows you to manage your contact details, and view your order history.
Offer a better service - For example, we use anonymised order data to offer better products for sale.
Marketing - Unless you give us consent, we do not use information you provide to us as part of placing an order for marketing purposes. You can opt-in or opt-out to receive marketing communications as outlined below.
Research - We use anonymised order data for market research purposes. For example, to report on how many orders we had from a city/town in a given period.
Gift Vouchers - Gift vouchers are available to purchase on herbmanhustlin.com. As they are an intangible item, information about the recipient and sender are needed to actually process the voucher order and deliver to the recipient. As part of placing an order for a gift voucher, you give us permission to contact the recipient with the information regarding the voucher on your behalf.
Who we share this information with
In order to fulfil our contractual obligation to you as a customer who has placed an order with us, it may be necessary for us to share information with other third party data processors. An example of those third parties can be found below.
As a customer, you can request to see a comprehensive list of data that we share with other data processors.
Saved card details and payment information
Herbman Hustlin does not store card details directly. Instead, any card details you provide are stored securely by Shopify Payments.
We retain information provided indefinitely as we use it to provide individuals access to information about their order history.
We also retain customer records in accordance with FCA and PCI policy - as governed by law and in interest of preventing crime and fraud.
In compliance with GDPR, we respect the individuals right to access, rectification and erasure of personal data. For more information on how to access, edit or erase information we hold please see the relevant points below.
Marketing communications are only sent to users who explicitly opt-in and give Herbman Hustlin consent, at the time of creating an account, to contact them for marketing purposes (e.g. special offers, discounts, seasonal promotions etc).
If you are subscribed to our marketing emails and no longer wish to receive them, you can unsubscribe from marketing communications easily by clicking the unsubscribe link located at the bottom of every marketing email.
Lawful Basis for Processing Personal Data
Herbman Hustlin has a lawful basis for processing personal data, that you provide at the time of placing an order, in order to fulfil our contractual obligations to you. For example, without using the delivery details that you provide to us at time of purchase, we wouldn't be able to delivery your order to you.
By placing an order and disclosing this information with us at the time of purchase, you consent to the collection, storage and processing of that information in the manner as set out in this policy.
This lawful basis for processing personal data is in compliance with the new GDPR as stated in Article 6(1)(b):
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Full information on lawful basis for processing personal data can be found on the Information Commissioner's Office website
Right Of Access: Data Access Requests
In compliance with GDPR, individuals have the right to access your personal data. Individuals have the right to obtain
What does this mean?
The purpose of right access under GDPR is to clarify the reasons to allow individuals to access their personal data. Individuals should be aware of, and can verify the lawfulness of the processing (details of which can be found above).
You can request to see a copy of the data that we hold.
Herbman Hustlin has the right to charge a reasonable fee when a request is manifestly unfounded or excessive, particularly if the request is repetitive. Herbman Hustlin may also charge a reasonable fee to comply with requests for further copies of the same information. The fee will be based on the administrative costs of providing the information.
herbmanhustlin.com must provide this information without delay and within one month of the receipt of the request. This period can be extended by a further two months where requests are numerous or complex. If this is the case then Herbman Hustlin must inform the individual within one month of the receipt of the request and explain why the extension is necessary.
What if the request is manifestly unfounded or excessive?
Where requests are manifestly unfounded or excessive, in particular because they are repetitive, herbmanhustlin.com can:
Where herbmanhustlin.com refuse to respond to a request, we must first explain to the individual why we have made this decision and inform them of their right to complain to the supervisory authority and to a judicial remedy without undue delay and at the latest within one month.
If you require any further assistance with regards to matters of privacy, then please do not hesitate to email us on firstname.lastname@example.org