Privacy Policy

Information we collect

We may collect information you provide, including your name, email address, telephone number, billing and shipping details, account information, order history, communications, exchange requests, and marketing preferences. Payment-card information is handled by the payment processor used at checkout and is not intended to be stored directly by HermanaCo.

Optional first-party analytics run only after you choose Allow analytics. We record allowlisted page paths, basic shop, cart, contact, and newsletter actions, a broad source group, event time, and a random per-tab session identifier that expires after 30 minutes of inactivity. Analytics do not store names, emails, IP addresses, full referrers, browser user-agent strings, search terms, campaign parameters, or form and chat content, and are not linked to customer, account, or order records. Your analytics choice is saved in local storage and the temporary session in session storage. Essential storefront and account features may use storage separately. Historical visit records from the previous logger are excluded from the consented analytics report.

Separately, our server keeps a daily aggregate count of successful homepage document requests, including requests when optional analytics is declined. It temporarily reads the referrer hostname to group requests as search, social, other referral, or direct/unknown; search referrals do not distinguish paid from organic traffic. It saves only the UTC date, this fixed group and a total, with no cookies, visitor identifiers, IP addresses, raw referrers, or individual request records. Reloads may count again. Global Privacy Control and Do Not Track requests, known bots, and identified test or owner requests are excluded from this counter. It does not track journeys or identify people.

When you explicitly submit an analytics preference, we separately increment a daily accepted or declined choice total. We store only the UTC date, choice category, and integer total, with no visitor identifier, IP address, referrer, individual request record, or link to browsing activity. Repeated submissions count again; these are not unique people. Leaving without choosing is not recorded as a decline. Global Privacy Control and Do Not Track disable this counter. No extra cookies or browser storage are used for this counter. Hosting and security providers may separately process technical logs needed to deliver and protect the site.

How we use information

• Provide the storefront, accounts, checkout, fulfillment, exchanges, and customer support
• Process and document orders and maintain inventory and business records
• Secure the site, prevent misuse, and troubleshoot performance
• Measure site traffic and improve products and customer experience
• Send marketing only when you have opted in, with an unsubscribe option
• Meet legal, tax, accounting, and regulatory obligations

How information may be shared

We may share information with service providers that help operate the business, such as website hosting, payment processing, shipping, email, customer support, analytics, security, accounting, and professional advisers. We may also disclose information when required by law, to protect rights and safety, or in connection with a business transfer. We do not currently sell personal information or share it for cross-context behavioral advertising.

Your choices and requests

You may unsubscribe from promotional email using the link in the message. You may also ask to access, correct, or delete information associated with you by emailing us. We may need to verify your identity and may retain information when required for orders, fraud prevention, taxes, disputes, or other legal obligations. Additional rights may apply depending on where you live and which privacy laws apply to HermanaCo.

Tracking signals and third parties

HermanaCo does not currently track visitors across unrelated websites for targeted advertising. Global Privacy Control and Do Not Track signals disable optional analytics. You can decline or withdraw analytics permission using Privacy choices on the storefront. Withdrawing stops future analytics and clears the local analytics session; it does not erase events already recorded. Service providers may collect information as needed to provide their services under their own notices.

Retention, security, and children

We retain information only as reasonably needed for the purposes above and applicable legal obligations. We use reasonable administrative and technical safeguards, but no internet transmission or storage system is completely secure. This site is not directed to children under 13, and we do not knowingly collect their personal information.

Policy changes

We may update this policy as the business or legal requirements change. Material changes will be posted on this page with a revised effective date and, when appropriate, an additional notice.