At HERONGCORE ("we", "our", "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website herongcore.com, place an order, or otherwise interact with us (collectively, the "Service").
By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service.
Table of Contents
1. Information We Collect
We collect information that you voluntarily provide and information collected automatically when you use the Service.
- Personal Identification Information: name, email address, phone number, shipping & billing address, company name (for B2B inquiries).
- Payment Information: processed securely by our payment partners (PayPal, Stripe, etc.). We do not store full credit card numbers on our servers.
- Account Data: username, password (hashed), order history, wishlist, and product reviews.
- Communications: messages you send us via contact forms, email, or live chat.
- Device & Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, time spent, click patterns, and approximate location (city/country level).
2. How We Use Your Information
We use the information we collect for the following purposes:
- Process and fulfill your orders, including shipping, delivery, and returns.
- Respond to your inquiries, quotes, and customer service requests.
- Send you transactional emails (order confirmation, shipping updates).
- Send marketing communications only if you have explicitly opted in (you can unsubscribe at any time).
- Improve our website, products, and customer experience through analytics.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our terms.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, our legal bases under the General Data Protection Regulation (GDPR) for processing your personal data include:
- Performance of a contract — to fulfill your orders and provide the services you request.
- Consent — for marketing emails, non-essential cookies, and any optional features.
- Legitimate interests — for website analytics, fraud prevention, and business operations that do not override your rights.
- Legal obligation — for tax, accounting, and customs compliance.
4. Cookies & Tracking Technologies
We use cookies, web beacons, and similar technologies to operate the site, remember your preferences, and measure performance. Categories include:
- Strictly necessary cookies — required for the site to function (e.g., cart, login).
- Performance cookies — Google Analytics 4, anonymized usage statistics.
- Marketing cookies — Facebook Pixel, Google Ads (only with your consent).
You can manage cookie preferences via the cookie banner shown on your first visit, or through your browser settings. For details, see our Cookies Policy.
5. Sharing of Your Information
We do not sell your personal data. We share information only with the following categories of recipients, and only the minimum necessary:
- Logistics partners (DHL, FedEx, UPS, USPS, local carriers) — to deliver your orders.
- Payment processors (PayPal, Stripe) — to process transactions securely.
- IT service providers — hosting (Shopify / AWS), email (Klaviyo), customer chat (Tidio), under data processing agreements.
- Analytics & advertising — Google Analytics 4, Meta Pixel, only with consent where required.
- Legal authorities — when required by law or to protect our legal rights.
6. Data Retention
We keep your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Typical retention periods:
- Order records: 7 years (tax & accounting).
- Marketing subscriptions: until you unsubscribe.
- Support tickets: 24 months.
- Analytics data: 14 months (Google Analytics default).
7. Data Security
We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, encryption at rest for sensitive fields, access controls, regular backups, and staff training. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights & Choices
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data (subject to legal exceptions).
- Restriction — ask us to limit processing in certain situations.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests or for direct marketing.
- Withdraw consent — at any time, without affecting prior lawful processing.
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers operate. For transfers out of the EEA/UK, we rely on Standard Contractual Clauses (SCCs) or other approved mechanisms to ensure your data remains protected.
10. Children's Privacy
Our Service is not directed to children under 16 (or older, where local law requires). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.
11. Changes to This Privacy Policy
We may update this policy from time to time. The "Last updated" date at the top reflects when changes were made. Material changes will be notified via email or a prominent banner on the site. Your continued use of the Service after such changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Mail: HERONGCORE — Privacy Office, [Registered Address to be inserted]
- Response time: Within 30 days