Privacy Policy
Overview
Heart & Thorn operates this website and related services to provide customers with access to products, information, and ordering functionality (the “Services”). The Services are powered by Shopify.
This Privacy Policy explains how we collect, use, and disclose personal information when you use the Services or communicate with us. If there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy governs the handling of personal information.
By using the Services, you acknowledge that you have read and understand this policy.
Personal Information We Collect
“Personal information” refers to information that identifies or can reasonably be linked to an individual. It does not include anonymized or de-identified data.
We may collect:
- Contact details (name, address, phone number, email)
- Payment and financial information
- Account details (login credentials, preferences)
- Transaction data (orders, purchases, returns)
- Communications (support inquiries, messages)
- Device and technical data (IP address, browser, identifiers)
- Usage data (how you interact with the Services)
Sources of Information
We collect personal information:
- Directly from you
- Automatically through your use of the Services
- From service providers acting on our behalf
- From partners or third parties
How We Use Personal Information
We use personal information to:
Provide and Improve Services
Process orders, manage accounts, arrange delivery, and improve site functionality.
Marketing and Advertising
Send promotional communications and show relevant advertisements, where permitted.
Security and Fraud Prevention
Protect accounts, detect fraud, and maintain system security.
Customer Support
Respond to inquiries and maintain communication with customers.
Legal Compliance
Comply with applicable laws and enforce policies.
Disclosure of Personal Information
We may disclose personal information:
- To Shopify, vendors, and service providers
- To marketing and business partners
- When directed or consented by you
- Within our corporate group
- In connection with legal obligations or business transactions
Relationship with Shopify
Our Services are hosted by Shopify, which processes personal information to operate and improve the platform. Information may be transferred to other jurisdictions.
For more information, refer to Shopify’s privacy policy.
Third-Party Links
Our website may include links to third-party websites. We are not responsible for their privacy practices.
Children’s Data
The Services are not intended for children. We do not knowingly collect personal information from minors.
Security and Retention
We use reasonable safeguards to protect personal information, but no system is completely secure.
Retention depends on operational, legal, and contractual requirements.
Your Rights
Depending on your location, you may have rights to:
- Access your data
- Request deletion
- Correct inaccuracies
- Request portability
- Opt out of targeted advertising
Requests may require identity verification.
Communication Preferences
You may opt out of marketing emails at any time. Transactional messages may still be sent.
Complaints
If you have concerns about how your information is handled, you may contact us or your local data protection authority.
International Transfers
Personal information may be transferred and processed outside your country using recognized legal safeguards.
Changes to This Policy
We may update this policy from time to time. Updates will be posted on this page with a revised date.
Contact
For questions or requests regarding this policy, please use the contact methods provided on our website.