Last updated: 20 August 2026
1. Who we are
This website, hemelshop.com ("we", "us", "our"), is operated by Hemelshop.com,
[registered company address], [company registration number / VAT number]. We are the data controller responsible for the personal
data described in this policy.
If you have any question about this policy or about how we handle your personal data, contact us at
[privacy@hemelshop.com] or through our
contact page.
2. What personal data we collect
- Account data - name, email address, password (stored in hashed form), and your language and currency preferences.
- Order data - billing and shipping address, phone number, the products you ordered, order value, invoices and delivery status.
- Payment data - payments are processed by our payment providers. We receive confirmation of payment and a masked reference; we do not store your full card number.
- Communications - messages you send us through the contact form, by email, and newsletter subscription status.
- Technical data - IP address, browser type and version, device type, pages viewed, and the date and time of your visit, collected through cookies and server logs.
3. Signing in with Google
You can create an account or sign in to hemelshop.com using your Google account. If you choose to do
so, Google asks for your consent and then shares a limited set of data with us.
- What we receive: your basic Google profile (name and profile picture URL), your Google account email address, and the fact that the email address is verified.
- Why we use it: solely to create and authenticate your hemelshop.com customer account, to link it to your order history, and to contact you about your orders.
- What we store: your name and email address on your customer record, plus an identifier that links your customer record to your Google account. We do not store your Google password.
- What we do not do: we do not sell, rent or trade data received from Google, we do not use it for advertising or profiling, and we do not transfer it to third parties except the service providers listed in section 6 that act on our behalf.
- Revoking access: you can disconnect hemelshop.com from your Google account at any time at myaccount.google.com/permissions. You can also ask us to delete your customer account (see section 8).
Our use of information received from Google APIs adheres to the
Google API Services User Data Policy,
including the Limited Use requirements.
4. Why we use your data and on what legal basis
- To perform our contract with you - creating and managing your account, processing and delivering your orders, handling returns, refunds and warranty claims.
- To comply with legal obligations - issuing invoices and keeping accounting, tax and customs records.
- With your consent - sending newsletters and marketing emails, and setting non-essential cookies. You can withdraw consent at any time.
- For our legitimate interests - keeping the site secure, preventing fraud and abuse, and improving our shop and service.
5. Cookies
We use cookies that are strictly necessary to run the shop - they keep you signed in, remember the
contents of your basket and store your language and currency choice. We also use cookies to measure
how the site is used so we can improve it. You can block or delete cookies in your browser settings,
but the shop will not work correctly without the strictly necessary ones.
6. Who we share your data with
We do not sell your personal data. We share it only with parties who need it to deliver our service to you:
- payment providers, to take and refund payments;
- shipping and courier companies, to deliver your order;
- our hosting and IT service providers, who keep the website running;
- our accountants and professional advisers;
- public authorities, where we are required to disclose data by law.
These providers act on our instructions and are bound by contract to protect your data.
7. International transfers
Some of our service providers may process data outside your country. Where data leaves the European
Economic Area, we rely on an adequacy decision or on the European Commission's Standard Contractual
Clauses to protect it.
8. How long we keep your data
- Account data - for as long as your account is open, and for a short period afterwards in case you reopen it.
- Order, invoice and accounting records - for the period required by tax and commercial law (typically up to 10 years).
- Marketing consent - until you unsubscribe.
- Server logs - normally no longer than 12 months.
To have your account and the personal data we are not legally required to keep deleted, email
[privacy@hemelshop.com] from the address registered on your account.
9. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you and receive a copy of it;
- have inaccurate data corrected;
- have your data erased where we no longer have a valid reason to keep it;
- restrict or object to our processing;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- lodge a complaint with your national data protection authority.
Write to [privacy@hemelshop.com] to exercise any of these rights. We will
respond within one month.
10. Security
The site is served over HTTPS, passwords are stored hashed and salted, and access to customer data is
limited to staff who need it to do their job. No system is completely secure, but we take reasonable
technical and organisational measures to protect your data.
11. Children
Hemelshop.com is intended for adults. We do not knowingly collect personal data from children under
16. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last
changed. Material changes will be announced on the website.
13. Contact
Hemelshop.com
[registered company address]
Email: [privacy@hemelshop.com]
Web: Contact form
