Cart (0)
The Luxe Bag Chain
The Cherry Charm
The Initial — Personalized Bag Charm
Estimated total
Your cart is empty
Effective date: September 7, 2026
This Privacy Policy describes how HELDDA ("HELDDA," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information when you visit or use heldda.com (the "Site"), place an order, communicate with us, or otherwise use our services (collectively, the "Services").
Please read this Privacy Policy carefully. If you do not agree with it, please do not use the Services. Depending on where you live, you may have additional rights under applicable privacy laws.
HELDDA is an online retail brand operating through heldda.com. For questions about this Privacy Policy or our handling of personal information, contact us at support@heldda.com.
The personal information we collect depends on how you interact with us and may include:
Contact information: name, billing address, shipping address, email address and telephone number.
Order and account information: products viewed or purchased, order history, returns, refunds, preferences and account login details.
Payment information: payment method, billing details, transaction status and limited payment-card information supplied by our payment processors. We generally do not receive or store complete card numbers.
Customer-support information: messages, emails, reviews, survey responses and other information you provide when contacting us.
Device and usage information: IP address, browser type, device identifiers, operating system, referring pages, pages viewed, interactions with the Site and approximate location derived from an IP address.
Marketing information: communication preferences, email or SMS subscription status, campaign interactions and advertising identifiers.
Information you make public: product reviews, photographs, comments or other content submitted for publication.
Fraud-prevention information: information used to authenticate transactions, detect suspicious activity and protect customers and the Services.
Inferences: preferences or likely interests derived from your purchases and interactions with the Services.
You may choose not to provide certain information, but this may prevent us from completing an order or providing parts of the Services.
We collect personal information:
Directly from you when you create an account, place an order, subscribe to marketing, submit a review or contact us.
Automatically through cookies, pixels, local storage and similar technologies when you use the Site.
From service providers such as Shopify, payment processors, analytics providers, advertising partners, fraud-prevention providers, customer-support tools and delivery partners.
From social-media platforms when you interact with our pages, advertisements or social-commerce features.
From other lawful sources, including publicly available sources, where appropriate.
We may use personal information to:
Process payments and fulfil, ship, track, return or refund orders.
Create and manage customer accounts.
Communicate about orders, deliveries, enquiries, complaints and customer support.
Operate, maintain, personalise and improve the Site and Services.
Remember preferences and provide relevant product recommendations.
Send email or SMS marketing where permitted and manage marketing choices.
Measure advertising performance and display relevant advertising.
Detect, investigate and prevent fraud, abuse, security incidents and illegal activity.
Enforce our terms, protect our rights and resolve disputes.
Meet tax, accounting, consumer-protection and other legal obligations.
Establish, exercise or defend legal claims.
Where UK or European data-protection law applies, we rely on one or more of the following lawful bases:
Contract: to process and fulfil orders and provide requested Services.
Consent: for certain marketing, cookies or other processing where consent is required. You may withdraw consent at any time.
Legitimate interests: to operate and improve our business, provide customer support, prevent fraud, secure the Services and conduct proportionate marketing, provided those interests are not overridden by your rights.
Legal obligation: to comply with applicable laws, regulatory requirements and valid legal requests.
We and our service providers use cookies, pixels and similar technologies to operate the Site, remember preferences, understand Site usage, measure performance, prevent fraud and support advertising.
Where required, non-essential cookies are used only after you provide consent. You can manage available choices through our cookie banner and the Your Privacy Choices link on the Site. You may also adjust browser settings, although blocking some cookies may affect Site functionality.
Where legally required, we recognise supported opt-out preference signals, such as Global Privacy Control, as a request to opt out for the browser or device sending the signal.
We may work with advertising and analytics partners to measure campaigns and show advertisements that may be more relevant to you. This can involve disclosing identifiers, device information, online activity and commercial information to those partners.
Some US privacy laws may define certain advertising-related disclosures as a "sale," "sharing," or use for targeted advertising, even when no money is exchanged. Where those laws apply, you may opt out through the Your Privacy Choices link on the Site or by contacting us.
We do not knowingly sell personal information for money.
If you subscribe to marketing, we may send promotional emails or text messages in accordance with your choices and applicable law. You can unsubscribe from emails using the link in any marketing email. You can opt out of text messages by replying STOP. Message and data rates may apply.
We do not share text-messaging originator opt-in data and consent with third parties for their own marketing or promotional purposes. We may share information with providers that help us deliver messaging services, solely as necessary to provide those services and subject to appropriate restrictions.
Opting out of marketing does not prevent us from sending non-promotional communications about transactions, orders, security or customer support.
We may disclose personal information to:
Shopify and commerce providers that host and operate our online store.
Payment processors and financial institutions that process payments, refunds and fraud checks.
Suppliers, warehouses, fulfilment providers, carriers and customs partners that prepare and deliver orders.
Technology providers supporting analytics, hosting, communications, customer service, security and fraud prevention.
Advertising and social-media partners as described above and subject to your available choices.
Professional advisers including accountants, auditors, insurers and legal advisers.
Government bodies, regulators, courts or law-enforcement authorities when required by law or reasonably necessary to protect rights, safety and security.
Parties to a corporate transaction involving a merger, financing, restructuring, sale of assets, insolvency or acquisition, subject to applicable law.
Other parties at your direction or with your consent.
Service providers are authorised to process information only for the relevant services they provide, subject to applicable contractual and legal obligations. Some recipients, such as payment providers or social-media platforms, may independently determine how they process personal information under their own privacy policies.
Our store is hosted by Shopify, which processes personal information to provide and improve commerce services. Shopify may process information in countries other than your own. You can learn more about Shopify's processing and available privacy controls through the Shopify Privacy Portal.
We operate internationally and may transfer personal information outside your country, including to the United States, Canada, China and other countries where our service providers, suppliers and delivery partners operate.
Where UK or European law requires safeguards for an international transfer, we use an available lawful mechanism, such as an adequacy regulation, approved contractual clauses, the UK International Data Transfer Agreement or Addendum, or another legally recognised safeguard. You may contact us for more information about safeguards relevant to your personal information.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
Complete orders and provide customer support.
Maintain business, tax and accounting records.
Comply with legal and regulatory obligations.
Prevent fraud and abuse.
Resolve disputes and enforce agreements.
Retention periods vary according to the type of information, our relationship with you, legal requirements and applicable limitation periods. When information is no longer required, we delete or anonymise it where reasonably practicable.
We use reasonable administrative, technical and organisational measures designed to protect personal information. However, no transmission or storage system is completely secure, and we cannot guarantee absolute security.
You are responsible for keeping account credentials confidential. Please notify us promptly if you believe your account or personal information has been compromised.
Depending on where you live, you may have rights to:
Access or receive a copy of your personal information.
Correct inaccurate or incomplete information.
Request deletion of personal information.
Restrict or object to certain processing.
Receive certain information in a portable format.
Withdraw consent where processing is based on consent.
Opt out of targeted advertising or the sale or sharing of personal information.
Limit certain uses of sensitive personal information, where applicable.
Appeal our refusal of a privacy request, where applicable.
Not receive discriminatory treatment for exercising a privacy right.
These rights are subject to legal conditions and exceptions. We may need to verify your identity before completing a request. An authorised agent may submit a request where permitted by law, but we may require proof of authority and identity verification.
To exercise a privacy right, email support@heldda.com or use the Your Privacy Choices link where available. In your message, describe your request and the email address associated with your account.
Please contact us first if you have concerns about our use of your personal information so that we can try to resolve them.
If you are in the United Kingdom, you may also complain to the Information Commissioner's Office (ICO) through ico.org.uk.
If you are in the European Economic Area, you may complain to the data-protection authority in the country where you live, work or believe an infringement occurred.
The Services are not intended for children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us so we can review and, where appropriate, delete it.
The Site may contain links to websites or services operated by third parties. We are not responsible for their privacy, security or content. Review their privacy policies before providing personal information.
We may update this Privacy Policy to reflect changes to our practices, technology, legal requirements or Services. We will post the revised version on this page and update the effective date. Where required, we will provide additional notice or obtain consent.
For questions, privacy requests or complaints, contact:
HELDDA
Email: support@heldda.com