Privacy policy

Last updated: May 17, 2026
HAVEN essentials ("we", "us", or "our") operates this store and website, including all related content, features, tools, products, and services (the "Services"), to provide you with a curated shopping experience. The Services are powered by Shopify. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed as described below.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. It does not include information that is collected anonymously or has been de-identified. Depending on how you interact with the Services, where you live, and as permitted by applicable law, we may collect or process the following categories of personal information, including inferences drawn from it:
  • Contact details — name, billing address, shipping address, phone number, and email address.
  • Financial information — credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, and payment confirmation.
  • Account information — username, password, security questions, preferences, and settings.
  • Transaction information — items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, and your past transactions.
  • Communications with us — information you include when contacting us, for example through customer support.
  • Device information — your device, browser, network connection, IP address, and other unique identifiers.
  • Usage information — how and when you interact with or navigate the Services.

Sources of Personal Information

We may collect personal information from the following sources:
  • Directly from you, when you create an account, use the Services, communicate with us, or otherwise provide your personal information.
  • Automatically through the Services, including from your device and through cookies and similar technologies.
  • From our service providers, when we engage them to provide technology or process information on our behalf.
  • From our partners or other third parties, where permitted by law.

How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use personal information to:
  • Provide, tailor, and improve the Services — perform our contract with you, process payments, fulfill orders, remember your preferences, send account-related notifications, process returns and exchanges, manage your account, arrange shipping, enable reviews, and recommend products.
  • Marketing and advertising — send marketing and promotional communications by email, text, or postal mail, and show you online advertisements based on your activity with the Services.
  • Security and fraud prevention — authenticate your account, provide a secure payment experience, detect and investigate fraudulent or unsafe activity, protect public safety, and secure our Services. You are responsible for keeping your account credentials safe.
  • Communicate with you — provide customer support, respond to inquiries, and maintain our business relationship.
  • Legal reasons — comply with applicable law, respond to legal process (including requests from law enforcement or government agencies), investigate or defend against legal claims, and enforce our terms and policies.

How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate purposes, including:
  • With Shopify and other vendors that perform services on our behalf (e.g. IT management, payment processing, analytics, customer support, cloud storage, order fulfillment, and shipping).
  • With business and marketing partners to provide marketing services and personalized advertising. For example, Shopify supports personalized advertising based on your activity across merchants. Our partners use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to opt out of this sharing here.
  • When you direct or consent to disclosure, such as to ship products, or through your use of social media widgets or login integrations.
  • With our affiliates or otherwise within our corporate group.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with legal obligations, to enforce our terms, and to protect our rights and the rights of others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them. Information you submit may be transmitted to and shared with Shopify and third parties located in countries other than your country of residence. We also use certain Shopify enhanced features that incorporate data from your interactions with our store, other merchants, and Shopify. In those cases, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may link to websites or platforms operated by third parties. We do not control and are not responsible for the privacy or security practices of those sites. You should review their privacy and security policies before using them. Information you share on public or third-party platforms may be viewable by other users without limit on its further use. Our inclusion of a link is not an endorsement.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you believe a child has provided us with personal information, please contact us using the details below so we can delete it. As of the effective date of this Privacy Policy, we do not have actual knowledge that we "sell" or "share" the personal information of individuals under 16, as those terms are defined under applicable law.

Security and Retention

No security measures are perfect, and we cannot guarantee absolute security. Information sent to us may not be secure in transit, so we recommend you do not use unsecured channels to send sensitive information. We retain personal information for as long as needed to maintain your account, provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may be subject to exceptions under applicable law:
  • Right to access / know — request access to the personal information we hold about you.
  • Right to delete — request that we delete personal information we hold about you.
  • Right to correct — request that we correct inaccurate personal information.
  • Right of portability — request a copy of the personal information we hold about you and, in some cases, that we transfer it to a third party.
  • Right to opt out of sale, sharing, or targeted advertising — opt out here. If you visit our website with the Global Privacy Control (GPC) signal enabled, we will treat it as an opt-out for that browser and device, and where possible the associated Shopify account. We do not currently honor other "Do Not Track" signals. Learn more at https://globalprivacycontrol.org/.
  • Managing communication preferences — opt out of promotional emails using the unsubscribe link in any marketing email. We may still send non-promotional messages about your account or orders.
If you reside in the UK or European Economic Area, you may also have, subject to local law:
  • Objection to and restriction of processing — ask us to stop or restrict processing for certain purposes.
  • Withdrawal of consent — where we rely on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, please contact us using the details below. We will not discriminate against you for exercising your rights. We may need to verify your identity before responding. You may use an authorized agent, but we will require proof of authorization. To learn more about Shopify's role and your rights regarding data Shopify processes, visit https://privacy.shopify.com/en.

Complaints

If you have complaints about how we process your personal information, please contact us using the details below. Depending on where you live, you may also have the right to appeal our decision or lodge a complaint with your local data protection authority. EEA residents can find their supervisory authority here.

International Transfers

We may transfer, store, and process your personal information outside the country where you live. When we transfer personal information out of the EEA or the UK, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant UK authority, unless the destination country has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice as required by law.

Data Controller and Contact

HAVEN essentials is operated by a sole proprietor registered in Hong Kong (Business Registration No. 41635850), trading as "HAVEN essentials". For the purposes of applicable data protection laws, we are the data controller of your personal information. Our registered business address is on file with the Hong Kong Inland Revenue Department and is available on request to data-protection regulators or other competent authorities.
For any questions about our privacy practices or this Privacy Policy, or to exercise any of the rights described above, please contact us at: info@havenessentials.us