On this page
This Privacy Policy explains how Herbaléa Naturals Ltd (“HERBALÉA”, “we”, “us”) collects, uses and protects your personal data when you visit magnesium.herbaleastore.com or place an order with us. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).
1. Who we are (Data Controller)
The data controller responsible for your personal data is:
- Herbaléa Naturals Ltd
- Registered office: 27 Hatch Street Upper, Dublin 2, D02 FX65, Ireland
- Company registration no.: 689214 (Ireland) · EU VAT: IE3892140TH
- Email: privacy@herbaleastore.com
2. Personal data we collect
We only collect the data we need to take your order, deliver it and improve our service:
- Order & contact details — first and last name, email address, phone number, billing and shipping address (street, city, province, postal code, country).
- Order information — products purchased, quantity, order value, payment method (Pay Now or Cash on Delivery) and order date.
- Payment data — card and wallet payments are processed by our payment provider; we never see or store your full card number.
- Technical & usage data — IP address, device and browser type, pages viewed and approximate location, collected through cookies and similar technologies.
- Communications — messages you send us by email, contact form or social media.
3. How we use your data
- To process, fulfil and deliver your order and send order confirmations and shipping updates.
- To provide customer support and handle returns, refunds and guarantee claims.
- To prevent fraud and keep our website and customers secure.
- To measure and improve our website and our advertising (including via the Meta Pixel — see section 6).
- To send marketing emails about similar products, where you have agreed or where permitted by law (you can unsubscribe at any time).
- To comply with our legal, accounting and tax obligations.
4. Legal bases for processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Accounting, tax and legal compliance | Legal obligation |
| Fraud prevention & site security; service improvement | Legitimate interests |
| Marketing cookies, the Meta Pixel and marketing emails | Consent (which you may withdraw at any time) |
5. Who we share your data with
We never sell your personal data. We share it only with trusted service providers (“processors”) who act on our instructions:
- Shipping & fulfilment partners — to pick, pack and deliver your parcel and provide tracking.
- Payment providers — to process Pay Now transactions securely.
- Meta Platforms Ireland Ltd — for advertising measurement and optimisation via the Meta Pixel.
- Google Ireland Ltd — for order processing tools and analytics infrastructure.
- Email & hosting providers — to host our website and send transactional and marketing emails.
- Professional advisers and authorities — where required by law.
6. Cookies & tracking technologies
Our website uses cookies and similar technologies to make the site work, remember your cart, and measure performance and advertising.
- Essential cookies — required for the cart, checkout and security. These cannot be switched off.
- Analytics & marketing cookies — including the Meta Pixel (ID 1014985984731880), which helps us understand which ads lead to purchases and show you more relevant ads on Facebook and Instagram. The pixel may record events such as page views, add-to-cart, checkout and purchases.
You can manage or refuse non-essential cookies through your browser settings or our cookie banner. Refusing them will not stop you from buying.
7. International data transfers
Some of our providers may process data outside the European Economic Area (for example in the United States). Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision to keep your data protected.
8. How long we keep your data
We keep order and invoice data for as long as required by accounting and tax law (typically up to 10 years). Marketing data is kept until you unsubscribe or object. Technical data from cookies is kept for the lifetime of the relevant cookie. When data is no longer needed, we delete or anonymise it.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data (“right to be forgotten”);
- restrict or object to processing, including direct marketing;
- request your data in a portable format; and
- withdraw consent at any time, without affecting prior processing.
10. Contact & complaints
For any privacy question, contact privacy@herbaleastore.com or write to Herbaléa Naturals Ltd at the address above. If you believe we have not handled your data properly, you also have the right to lodge a complaint with your national data protection authority (in Ireland, the Data Protection Commission, dataprotection.ie).