Privacy policy

Last updated: August 21, 2026

This Privacy Policy explains how HEARTH & HUE LLC collects, uses, discloses and protects personal data when you visit hearthandhuehome.com, place an order or contact us.

Data Controller

HEARTH & HUE LLC is the controller responsible for the processing described in this policy.

HEARTH & HUE LLC
1356 E Elm St
Springfield, MO 65802
United States

Email: support@hearthandhuehome.com

Personal Data We Collect

Depending on how you interact with the store, we may collect:

Name and contact details, including email address, billing address and delivery address.
Order information, including products, quantities, prices, returns and refunds.
Payment-related information processed through the payment method selected at checkout.
Account information if you create or use a customer account.
Customer-service communications and withdrawal requests.
Device and technical information, such as IP address, browser type, device type and basic security logs.
Cookie preferences and consent records.
Advertising and conversion information when Google Ads and the Google Tag are activated and the required consent has been provided.
Information necessary to prevent fraud, secure the store and comply with legal obligations.

We do not require customers to provide a public telephone number through this policy.

How We Use Personal Data

We process personal data to:

Accept, process and fulfil orders.
Arrange delivery from the Netherlands to supported destinations.
Process cancellations, withdrawals, returns and refunds.
Communicate about orders and customer-service requests.
Operate, maintain and secure the Shopify store.
Prevent fraud, misuse and unauthorized transactions.
Maintain financial, tax, transaction and compliance records.
Establish, exercise or defend legal claims.
Measure Google Ads conversions and advertising performance after the relevant tools are activated and where the required consent has been provided.
Comply with applicable consumer, privacy and ecommerce requirements.

Legal Bases

Where the GDPR applies, we rely on one or more of the following legal bases:

Contract: processing necessary to accept and fulfil an order or take requested pre-contractual steps.
Legal obligation: processing required for accounting, tax, consumer-protection, product-safety or other legal duties.
Legitimate interests: operating and securing the store, preventing fraud, responding to customers and protecting legal rights, where those interests are not overridden by individual rights.
Consent: non-essential cookies, Google advertising storage, Google Tag advertising functions and related conversion tracking where consent is required.

You may withdraw consent at any time through the store’s Cookie preference controls. Withdrawal does not affect processing lawfully performed before consent was withdrawn.

Shopify and Service Providers

The store is hosted through Shopify. Shopify processes data needed to provide the ecommerce platform, checkout, security, hosting and related services.

We may disclose necessary personal data to service providers that support:

Shopify store operation and hosting.
Payment processing selected by the customer at checkout.
Order fulfilment and delivery.
Customer service.
Fraud detection and store security.
Professional accounting and legal compliance.
Google Ads, Google Tag and conversion measurement after these services are activated and subject to applicable consent requirements.

Service providers may process personal data only for the applicable service or as otherwise permitted by law.

Payments

Available payment methods are displayed at checkout and may include American Express, Apple Pay, Bancontact, Diners Club, Discover, Google Pay, Mastercard, PayPal, Shop Pay and Visa.

Payment information is processed by the selected payment provider and Shopify’s checkout infrastructure. HEARTH & HUE LLC does not receive or store complete payment-card credentials where they are handled directly by those providers.

Google Ads, Google Tag and Consent Mode

HEARTH & HUE plans to use Google Ads.

When activated, the Google Tag and Google Ads conversion tracking may process information about interactions with the website and completed purchases to measure advertising performance.

Google Consent Mode is used with the store’s Cookie consent controls to communicate relevant consent choices to Google and adjust tag behaviour. Where consent is required, advertising cookies and consent-dependent advertising functions will not be activated unless the visitor grants the relevant permission.

Consent choices may cover advertising storage, advertising user data and advertising personalization. Visitors may change or withdraw their choices through the Cookie preference controls.

This policy does not state that Google Analytics, Meta Pixel or TikTok Pixel is used because those tools have not been confirmed.

International Data Transfers

HEARTH & HUE LLC is established in the United States, the store is operated through Shopify, and orders are fulfilled from the Netherlands. Service providers may process information in countries outside the customer’s country of residence.

Where the GDPR requires safeguards for an international transfer, the transfer will rely on an applicable legal mechanism, such as an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including:

Completing orders, returns, refunds and customer-service requests.
Maintaining records required by accounting, tax, consumer and commercial laws.
Preventing fraud and protecting store security.
Resolving disputes and enforcing agreements.

When personal data is no longer required, it is deleted, anonymized or retained only where continued storage is legally required.

GDPR Rights

Where the GDPR applies, you may have the right to:

Receive information about how your personal data is processed.
Request access to your personal data.
Request correction of inaccurate or incomplete data.
Request deletion where the legal conditions are met.
Request restriction of processing.
Receive eligible data in a structured, commonly used and machine-readable format.
Object to processing based on legitimate interests.
Object at any time to direct-marketing processing.
Withdraw consent at any time.
Request safeguards relating to qualifying solely automated decisions.
Submit a complaint to the competent data-protection supervisory authority.

Send a request to support@hearthandhuehome.com. We may request information reasonably necessary to verify identity. We respond without undue delay and normally within one month, subject to any lawful extension.

Children’s Data

The store sells home goods and is not directed to children. We do not knowingly request children to submit personal data for their own purchases.

Security

We use reasonable organizational and technical measures appropriate to the nature of the store and the personal data processed. No online system is entirely free from risk, but we work with established service providers and apply measures intended to protect confidentiality, integrity and availability.

Changes to This Policy

We may update this policy when store operations, legal requirements or relevant services change. The revised version will be posted on this page with an updated date.