Privacy Policy

• Order information: name, shipping and billing address, email address, phone number, and the products you purchase.
• Payment information: payments are processed by our payment providers (including Shopify Payments, PayPal and card networks). We never see or store your full card number.
• Device and usage data: IP address, browser type, device type, pages viewed, referring URLs and interactions with the store, collected through cookies and similar technologies.
• Communications: messages, reviews and support requests you send us.

• To process, produce, package and ship your order and to handle returns.
• To send order confirmations, shipping updates and customer service replies.
• To prevent fraud, abuse and unauthorised transactions.
• To improve our products, website performance and merchandising.
• To send marketing emails where you have opted in. You can unsubscribe at any time using the link in any email.

Where applicable law requires a legal basis, we rely on: performance of a contract (to fulfil your order), our legitimate interests (fraud prevention, service improvement), your consent (marketing, non-essential cookies) and compliance with legal obligations (tax and accounting records).

We share personal data only with service providers who help us run the store, and only as needed: our e-commerce platform (Shopify), payment processors, shipping carriers and fulfilment partners, email and analytics providers, and professional advisers. We may also disclose information when required by law or to protect our rights. We do not sell your personal information.

We use strictly necessary cookies to keep your cart and session working, and optional analytics or advertising cookies to understand how the store is used. You can control cookies through your browser settings; blocking essential cookies may break checkout. See our Cookie Policy for details.

We keep order records for as long as needed to fulfil the order and to meet legal, accounting and tax requirements (typically up to 7 years). Marketing data is kept until you unsubscribe. Support conversations are kept for up to 24 months.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent, and to opt out of targeted advertising or the "sale" or "sharing" of personal information. California residents may exercise CCPA/CPRA rights, and EEA/UK residents may exercise GDPR rights. To make a request, email support@helmchair.store. We will not discriminate against you for exercising your rights.

The store is served over HTTPS with TLS encryption, and payment data is handled by PCI-DSS compliant processors. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data.

Our store is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.

We are based in the United States, and your information may be processed in the United States and other countries where our providers operate. Where required, we use appropriate safeguards such as standard contractual clauses.

We may update this Privacy Policy to reflect changes in our practices or the law. The updated version is indicated by the "Last updated" date at the top of this page.

Questions or requests about privacy: support@helmchair.store.