Privacy policy

Who we are

Heimora is the data controller for this website. Registered trading address: 13 Butts Rd, Thornton-Cleveleys, FY5 4HX, United Kingdom. Contact support@heimora.store for any privacy request.

What we collect

• Order information: name, delivery address, email address and phone number, used to fulfil and deliver your order.
• Payment information: handled entirely by our payment provider. We never see or store full card numbers.
• Support correspondence: emails and call notes, kept so we can resolve queries.
• Marketing: your email address, only if you subscribe to our newsletter.

Legal bases

We process order data to perform our contract with you, support data on the basis of legitimate interests, marketing data on the basis of your consent, and accounting records to comply with legal obligations.

Who we share it with

Only the processors needed to run the shop: our hosting provider, our payment provider, and the carriers who deliver your parcel (Royal Mail, Evri, DPD). We never sell personal data, and we do not share it for third-party advertising.

How long we keep it

Order and transaction records are kept for six years to meet UK accounting requirements. Support correspondence is kept for two years. Newsletter subscriptions are kept until you unsubscribe.

Your rights

Under UK GDPR you may request access to your data, correction, deletion, restriction, or a copy in portable form, and you may object to processing or withdraw consent at any time. Email support@heimora.store and we will respond within one month. You also have the right to complain to the Information Commissioner's Office.

Security

This site is served entirely over HTTPS. Access to order data is limited to staff who need it, and payment details are processed by our provider rather than stored by us.