Privacy Policy

This website is owned and operated by HEMLEVA.

HEMLEVA respects your privacy and is committed to protecting your personal data. By using this website, you agree to the following Terms and Conditions and Privacy Policy.

This privacy policy will tell you how HEMLEVA uses your personal data when you visit our website, interact with us, and buy our goods and services. It also tells you about your privacy rights and how the law protects you.

This privacy policy was last updated on 24th of May 2018, and is subject to change at any time.

TL;DR: (too long; didn’t read)

We keep some data about you. We only use it for its intended purpose: to provide you with information, either ours or from a third party, and to fulfill your orders.
We do not, never have, and never will never sell your data. We do not disclose your data, with the exception of your comments on our website.
You have the right to access your data, the right to have your data modified/corrected, and the right to have your data deleted.
We may keep your data indefinitely.
Data may be given to law enforcement, but only when a legal process is followed.

Information I Collect To fulfill your order, you must provide me with certain information, such as your name, email address, postal address, phone number (if you are outside of the US), payment information, and the details of the product that you’re ordering.

Personal data which we collect about you Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We collect a variety of information about our wonderful customers and visitors to the HEMLEVA website. This personal data falls into these categories:

Identity Data includes title, first name, last name, username or similar identifier and an encrypted version of your login/password. If you interact with us through social media, this may include your social media user name.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Financial Data includes payment card details.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Profile Data includes your username and password, purchases or orders made by you, preferences, feedback and survey responses, as well as any profile data which we have added (for example, using analytics and profiling).
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Usage Data includes information about how you use our website, products and services.
Tracking Data includes information we or others collect about you from cookies and similar tracking technologies, such as web beacons, pixels, and mobile identifiers.
Marketing and Communications Data includes your preferences in receiving direct marketing from us and our third parties and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. We collect that information through Google Analytics to provide information about your device and browser, your location (based on your device’s IP address), and (if applicable) how you reached our website. We only use this information to analyze visitor metrics, and where our visitors come from. We do not store this information, but Google may. You can read their policy here: https://policies.google.com/privacy . We may create and keep backups and/or reports of certain information provided and stored by Google. If you choose not to share personal data with us, or refuse certain contact permissions, we might not be able to provide the products and services you’ve asked for.

Your Communications Any communications made through our ‘contact,’ blog, blog comments, newsletter sign up or other related pages, or directly to our phones or mailing or email addresses is not held privileged or confidential and is subject to viewing and distribution by third parties. We own any and all communications displayed on our website, servers, comments, emails or other media as allowed by United States law, and will not give credit or pay royalties for unsolicited user-generated content such as blog comments or emails. For more information on when and how we store and use your communications or any data provided by you in those communications, please refer to our Privacy Policy on this page.

We maintain a right to republish any submission in whole or in part as reasonably necessary in the course of our business. You agree not to submit any content or communications that could be illegal or serve an unlawful purpose, including, but not limited to communications that are potentially libelous or maliciously false, obscene, abusive, negligent or otherwise harmful or inappropriate.

Why I Need Your Information and How I Use It I rely on a number of legal bases to collect, use, and share your information, including:

as needed to provide my services, such as when I use your information to fulfill your order, to settle disputes, or to provide customer support;
when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for my mailing list;
if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law

Information Sharing and Disclosure Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances, as follows:

I share information with Etsy, Squarespace, Stripe, Shipstation and PayPal as necessary to provide you my services and comply with my obligations under both the Etsy and Squarespace Seller Policy and the Etsy Terms of Use.
Service providers. I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies. I will share your name and address with these third parties, but only to the extent necessary to perform these services.
Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

Data Retention I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 4 years.

Your Rights If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below:

Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
Change, restrict, delete. You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will delete your personal information upon request.
Object. You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
Complain. If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

Intellectual Property Notice All images, text, designs, graphics, trademarks and service marks are owned by and property of HEMLEVA or the properly attributed party. It is a violation of federal law to use any of our intellectual property in whole or in part, and modification of any materials contained on this site is illegal and may be prosecuted to the fullest extent permissible should we choose to do so, including asking for financial penalties (damages) and/or an injunction forcing you to stop using our intellectual property immediately.

(1) You may use our intellectual property with clear and obvious credit back to our site, as well links back to the page where the materials, designs, images, text, quote or post is located when it is appropriate to do so. However, you may never claim any of our intellectual property as your own or your unique creation, even with attribution.

Termination If at any time we feel you have violated these Terms and Conditions, then we shall immediately terminate your use of our website and any related communications as we deem appropriate. It is within our sole discretion to allow any user’s access of our website, and we may revoke this access at any time without notice, and if necessary, block your IP address from further visits to our site(s).

How to Contact Me For purposes of EU data protection law, I, Samantha Leung, am the data controller of your personal information. If you have any questions or concerns, you may contact me at: admin@hemleva.com.