Privacy Policy

Last updated: January 25, 2026

Heir manages this shop and website, including all related information, content, features, tools, products, and Services, to provide you, the customer, with a personalized shopping experience (the "Services"). Heir is Powered by Shopify, enabling us to deliver these Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use the Services, make a purchase or other transaction, or otherwise communicate with us. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail regarding the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing the Services, you indicate that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies you or another individual or can reasonably be linked to you or another individual. Personal information does not include information that has been collected anonymously or de-identified such that it cannot reasonably be linked to you. We may collect or process the following categories of personal information, including inferences drawn from this information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact details: including your name, address, billing address, shipping address, phone number, and email address.
Financial information: including credit card, debit card, and financial account numbers, payment card information, transaction details, payment method, payment confirmation, and other payment data.
Account details: including your username, password, security questions, preferences, and settings.
Transaction data: including items you view, place in your cart, add to your wishlist, purchase, return, exchange, or cancel, and your transaction history.
Communications with us: including information you include in your communications with us, such as when sending a customer support inquiry.
Device data: including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information: including information about your interaction with the Services, such as how and when you navigate through or interact with the Services.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you: including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
Automatically via the Services: including from your device when you use our products or Services or visit our websites, through the use of cookies and similar technologies.
From our service providers: including when we engage them to enable certain technologies and when they collect or process your personal information on our behalf.
From our partners or other third parties.

How We Use Your Personal Information

Depending on how you communicate with us or which Services you use, we may use personal information for the following purposes:

Providing, customizing, and improving the Services: To perform our agreement with you, process payments, fulfill orders, remember preferences, send account notifications, handle returns/exchanges, enable reviews, and create a tailored shopping experience (such as product recommendations).
Marketing and advertising: For promotional purposes, such as sending marketing messages via email, SMS, or post, and displaying online advertisements based on your activity.
Security and fraud prevention: To verify your account, ensure a secure payment experience, detect and investigate fraudulent or illegal activities, and secure our Services. You are responsible for keeping your account credentials safe.
Communicating with you: To provide customer support, respond to inquiries, and maintain our business relationship.
Legal reasons: To comply with applicable laws, respond to legal processes (such as government requests), or investigate potential violations of our terms and policies.

How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy, including:

With Shopify and other service providers: Who perform services on our behalf (e.g., IT management, payment processing, data analytics, fulfillment, and shipping).
With business and marketing partners: To provide marketing services and advertising. For example, we use Shopify to support personalized advertising based on your activities across different merchants.
Upon your instruction or consent: Such as when you request we ship products or use social media widgets/login integrations.
With our affiliates: Or otherwise within our corporate group.
In connection with business transactions: Such as a merger or bankruptcy, or to protect our rights and the safety of our users.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve them. Information you submit will be transmitted to Shopify and third parties who may be located in countries other than where you live. Additionally, we use certain Shopify enhanced features that include data obtained from your interactions with our store and other merchants. In these instances, Shopify is the controller responsible for processing your information and responding to rights requests. For more information, please visit the Shopify Privacy Policy for Customers.

Third-Party Websites and Links

Our Services may contain links to third-party platforms. We are not responsible for the privacy or security of these sites. Please review their individual policies. Information shared in public areas or on third-party social networks may be viewed by other users without restriction.

Children’s Data

The Services are not intended for children. We do not knowingly collect personal information from individuals under the age of majority in your jurisdiction. If you are a parent or guardian of a child who has provided us with data, please contact us to request its deletion.

Security and Retention

No security measure is perfect. Information sent to us may not be secure during transmission; we recommend avoiding insecure channels for sensitive data. We retain your information based on factors such as account maintenance, service delivery, legal obligations, and dispute resolution.

Your Rights and Choices

Depending on where you live, you may have the following rights (subject to certain legal exceptions):

Right of Access/To Know: To request access to the information we hold about you.
Right to Delete: To request that we delete your personal information.
Right to Correct: To request correction of inaccurate information.
Right to Portability: To receive a copy of your data or have it transferred to a third party.
Managing Communication Preferences: You may opt-out of promotional emails via the "unsubscribe" link.

For residents of the UK or EEA:

Objection/Restriction of Processing: To stop or limit processing for certain purposes.
Withdrawal of Consent: To withdraw consent where processing is based on it.

To exercise these rights, please contact us using the details below. We will not discriminate against you for exercising your rights.

Complaints

If you have complaints about how we process your information, please contact us. You also have the right to lodge a complaint with your local data protection authority. For the EEA, a list of authorities can be found here.

International Transfers

We may transfer, store, and process your information outside of your country of residence. For transfers outside the EEA or UK, we rely on recognized mechanisms such as the European Commission's Standard Contractual Clauses (SCCs).