Privacy Policy (GDPR Compliant)
Last updated: 22nd May 2025
This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
Data We Collect
-
Name, email address, phone number (via contact forms or bookings)
-
Billing/shipping info (for orders)
-
IP address and browser info (for analytics)
Purpose of Processing
We use your data to:
-
Deliver products/services
-
Process payments
-
Communicate with you
-
Improve our offerings via analytics
Consent & Your Rights
You have the right to:
-
Access or correct your data
-
Withdraw consent at any time
-
Request the deletion of your data
Contact: fern@herbalistdoula.com to exercise these rights.
Data Sharing
We do not sell your personal data. We may share it with:
-
Payment processors (e.g., Stripe, PayPal)
-
Email marketing tools (e.g., MailerLite, Mailchimp)
-
Wix (our website provider)
Data Retention
We keep your data only as long as necessary for legal and business purposes (up to 7 years for tax law compliance).
Cookies
We use cookies to improve functionality and analyze traffic. You can manage cookie settings via your browser.
Security
We use Wix.com as our website provider, which maintains robust security protocols including SSL encryption, secure hosting, and compliance with GDPR and PCI standards. While we rely on Wix’s secure infrastructure, we also limit access to personal data, collect only necessary information, and ensure that any third-party services we use (e.g., payment processors, email tools) follow GDPR-compliant practices.
If you have questions about data security, you can contact us at: fern@herbalistdoula.com.