Privacy policy
Last updated: September 4, 2026
Henash operates this website and online store, including the products, content, features, and services made available through the website.
This Privacy Policy explains how Henash collects, uses, stores, and discloses personal information when you visit our website, browse our products, place an order, contact us, or otherwise interact with our services.
Henash uses Shopify to operate its online store. Shopify provides the ecommerce platform and related infrastructure that enables us to offer products and services through our website.
By using our website, you acknowledge that you have had the opportunity to review this Privacy Policy. Where applicable law requires your consent for a particular use of your personal information, we will request that consent separately.
1. Personal Information We Collect
The personal information we collect depends on how you interact with Henash and the services you use.
Information You Provide to Us
When you place an order, contact us, request customer support, subscribe to communications, or otherwise provide information through our website, we may collect:
- Your name
- Email address
- Telephone number, where you provide one
- Billing address
- Shipping address
- Order details
- Transaction details
- Information relating to returns, refunds, exchanges, or customer service requests
- Information contained in communications you send to us
- Other personal information that you voluntarily provide
You can browse most areas of our website without directly providing personal information. However, certain information is required when you place an order or request particular services.
Payment Information
When you purchase products from Henash, payment information is processed through the payment methods and payment service providers available at checkout.
Depending on the payment method used, we may receive information such as the payment method, transaction reference, payment status, and other information necessary to confirm and manage your purchase.
Payment card information may be collected and processed directly by the relevant payment provider. Henash does not claim to store complete payment card details where those details are processed directly by a third-party payment provider.
Information Collected Automatically
When you visit or use our website, certain technical and usage information may be collected automatically through cookies and similar technologies.
This information may include:
- IP address
- Browser type and version
- Device type and operating system
- Network information
- Pages visited
- Products viewed
- Referring website or source
- Information about how you interact with our website
- Technical information required to maintain website functionality and security
The information collected depends on the technologies and services enabled on our website.
2. How We Collect Personal Information
We may collect personal information from the following sources:
- Directly from you, when you place an order, contact us, submit information, or otherwise interact with our website.
- Automatically, when you browse or use our website through cookies and similar technologies.
- Through Shopify, which provides the ecommerce platform used to operate our store.
- Through service providers, where they process information on our behalf to provide services such as payment processing, shipping, website functionality, customer support, or other business services.
- From other third parties, where permitted by applicable law and where the information is relevant to providing our services or fulfilling our legal obligations.
3. How We Use Your Personal Information
We use personal information for purposes that are necessary to operate our business, provide our services, fulfill our obligations to customers, and comply with applicable law.
Depending on how you interact with Henash, we may use your personal information to:
- Process and fulfill your orders
- Process or facilitate payment for purchases
- Arrange shipping and delivery
- Send order confirmations and other transactional communications
- Manage returns, refunds, and exchanges
- Respond to questions and enquiries
- Provide customer support
- Maintain and improve our website and services
- Remember certain preferences where applicable
- Protect our website, customers, and business against fraud, misuse, and security threats
- Investigate suspected fraudulent, illegal, or unauthorized activity
- Maintain appropriate business and transaction records
- Comply with legal, tax, accounting, regulatory, and other applicable obligations
- Establish, exercise, or defend legal claims
- Send marketing communications where permitted by law and, where required, with your consent
We will not use your personal information for purposes that are incompatible with the purposes described in this Privacy Policy unless such use is permitted or required by applicable law.
4. Legal Bases for Processing
Where applicable under the General Data Protection Regulation (GDPR) and other data protection laws, we process personal information on one or more of the following legal bases.
Performance of a Contract
We may process personal information when necessary to enter into or perform a contract with you, including processing your order, arranging delivery, facilitating payment, providing customer support, and managing returns or refunds.
Legal Obligations
We may process personal information where necessary to comply with applicable legal, tax, accounting, regulatory, or other legal obligations.
Legitimate Interests
We may process personal information where necessary for our legitimate interests, such as maintaining website security, preventing fraud, improving our services, managing customer relationships, protecting our business, and establishing or defending legal claims.
Where we rely on legitimate interests, we consider your rights and freedoms and take appropriate measures where necessary to ensure that our interests do not override your applicable privacy rights.
Consent
Where consent is required by law, we will ask for your consent before processing personal information for the relevant purpose.
If processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew your consent.
5. Cookies and Similar Technologies
Henash and the service providers supporting our website may use cookies and similar technologies.
Cookies may be used for purposes such as:
- Keeping the website and shopping functionality working
- Remembering certain preferences
- Maintaining security
- Understanding website usage
- Improving website performance and functionality
- Supporting analytics
- Supporting marketing or advertising activities, where applicable
Some cookies may be necessary for the website to function and may not be optional. Other cookies may be optional and, where required by applicable law, will only be used after you provide the required consent.
6. How We Share Personal Information
We may disclose personal information to third parties when reasonably necessary to operate our business, provide our services, fulfill orders, protect our business, or comply with legal obligations.
Depending on the services we use, these third parties may include:
- Shopify, which provides our ecommerce platform and related services
- Payment providers, which process payments and transactions
- Shipping and delivery providers, which help us deliver your orders
- Technology and service providers, which support website functionality, security, communications, customer service, or other business operations
- Analytics or marketing service providers, where applicable and where such services are enabled on our website
- Professional advisers, such as legal, accounting, financial, or other professional advisers where necessary
- Government authorities, regulators, courts, or law enforcement, where disclosure is required or permitted by law
- Other parties, where you have specifically requested or authorized the disclosure or where disclosure is otherwise permitted by applicable law
We expect service providers that process personal information on our behalf to handle that information in accordance with applicable contractual, confidentiality, security, and data protection requirements.
7. Shopify
Our online store is powered by Shopify.
Shopify provides the ecommerce infrastructure that allows Henash to operate the website, display products, process orders, and provide related ecommerce functionality.
Information submitted through our website may therefore be processed by Shopify as part of providing its services.
Shopify may also process personal information independently for purposes described in its own privacy documentation.
For more information, please review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
Where Shopify processes personal information for its own purposes, Shopify may have separate responsibilities regarding that processing.
8. Marketing Communications
Where permitted by applicable law, Henash may use your contact information to send promotional communications about our products, services, offers, or other relevant updates.
Where consent is required, we will obtain your consent before sending promotional communications.
You can unsubscribe from promotional email communications at any time by using the unsubscribe mechanism included in the relevant communication or by contacting us at info@henash.store.
Unsubscribing from marketing communications will not prevent us from sending necessary non-promotional communications, such as information concerning an order, payment, delivery, return, refund, customer service request, security matter, or other transaction involving you.
9. Third-Party Websites and Services
Our website may contain links to websites, services, applications, or platforms operated by third parties.
If you follow a link to a third-party website, that website may collect and process your personal information under its own privacy policy and terms.
Henash does not control third-party websites and is not responsible for their privacy practices, security measures, content, or handling of personal information.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
10. Data Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, disclosure, or destruction.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
If we become aware of a personal data breach that requires notification under applicable law, we will take the steps required by the relevant legal requirements.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
The appropriate retention period may depend on factors including:
- The nature of the information
- The purpose for which it was collected
- Whether we have an ongoing relationship with you
- Whether the information is necessary to provide services or fulfill an order
- Legal, tax, accounting, or regulatory requirements
- The need to resolve disputes
- The need to establish, exercise, or defend legal claims
- Fraud prevention and security requirements
- When personal information is no longer required, we will delete it, anonymise it, or securely dispose of it where reasonably possible and as required by applicable law.
12. Your Privacy Rights
Depending on your location and subject to applicable legal conditions and exceptions, you may have certain rights concerning your personal information.
These rights may include:
Right of Access
You may have the right to request access to personal information we hold about you and information about how that information is processed.
Right to Correction
You may have the right to request correction of inaccurate or incomplete personal information.
Right to Deletion
You may have the right to request deletion of your personal information in certain circumstances.
Right to Restriction
You may have the right to request restriction of the processing of your personal information in certain circumstances.
Right to Object
You may have the right to object to certain processing activities, including processing based on legitimate interests and certain direct marketing activities.
Right to Data Portability
Where applicable, you may have the right to receive certain personal information in a structured, commonly used, and machine-readable format and, where legally required, request its transmission to another organisation.
Right to Withdraw Consent
Where we rely on consent as the legal basis for processing, you may withdraw your consent at any time.
Right to Lodge a Complaint
You may have the right to lodge a complaint with the data protection authority responsible for your location if you believe your privacy rights have been infringed.
These rights are not absolute and may be subject to conditions, limitations, and exceptions under applicable law.
To exercise your rights, please contact us using the details in the Contact Us section below.
We may need to verify your identity before processing certain requests to help protect your personal information from unauthorized access.
13. European Economic Area and United Kingdom
If you are located in the European Economic Area or the United Kingdom, you may have rights under applicable data protection legislation, including rights of access, correction, deletion, restriction, objection, data portability, and withdrawal of consent where consent is the legal basis for processing.
You may also have the right to object to processing based on legitimate interests in circumstances provided by applicable law.
If you believe that Henash has not handled your personal information appropriately, we encourage you to contact us first so that we can investigate your concern.
You may also have the right to lodge a complaint with your relevant supervisory authority.
Information about data protection authorities in the European Union is available through the European Data Protection Board.
For France, the relevant supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL). You can find information about CNIL and how to exercise your rights through the CNIL website.
14. International Transfers
Because Henash uses Shopify and may use service providers that operate internationally, your personal information may be processed or stored in countries outside France or outside the country in which you live.
Where personal information is transferred outside the European Economic Area or the United Kingdom, we will use appropriate safeguards where required by applicable data protection law.
Depending on the circumstances, these safeguards may include an adequacy decision, standard contractual clauses, or another legally recognised transfer mechanism.
Information about Shopify's international processing and privacy practices is available through the Shopify Consumer Privacy Policy.
15. Children's Privacy
Our website and services are intended for a general audience and are not directed toward children.
We do not knowingly collect personal information from children where doing so would be prohibited by applicable law.
If you believe that a child has provided personal information to Henash in circumstances where collection is not permitted, please contact us at info@henash.store.
If we become aware that we have collected personal information from a child in circumstances where the information should not have been collected, we will take appropriate steps to delete the information where required by applicable law.
16. Privacy Requests and Choices
- You can contact us if you want to:
- Request access to personal information we hold about you
- Request correction of inaccurate information
- Request deletion where applicable
- Request restriction of processing where applicable
- Object to certain processing activities
- Exercise your data portability rights where applicable
- Withdraw consent where processing is based on consent
- Unsubscribe from promotional communications
- Ask questions about our privacy practices
17. Complaints
If you have a concern about how Henash collects, uses, or handles your personal information, please contact us first.
We will review your concern and respond in accordance with applicable requirements.
If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority.
For information about supervisory authorities in the European Union, you can visit the European Data Protection Board.
For France, you can contact the CNIL.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology, privacy practices, or applicable legal requirements.
When we make changes, we will update the Last updated date at the top of this Privacy Policy.
Where required by applicable law, we will provide additional notice of material changes.
We encourage you to review this Privacy Policy periodically so that you remain informed about how Henash handles personal information.
19. Related Policies
For information about other aspects of shopping with Henash, please review our Terms of Service, Terms of Sale, Shipping Policy, Refund Policy, and Legal Notice.
These policies should be read together with this Privacy Policy.
20. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact us:
Henash
129 Avenue de Magudas
33320 Eysines
France
Telephone: +33 7 66 36 52 09
Email: info@henash.store
For applicable data protection purposes, Henash is responsible for the personal information it processes in connection with the services described in this Privacy Policy, except where another organisation is independently responsible for its own processing, such as Shopify or a payment service provider.
When you contact us regarding a privacy request, please provide enough information for us to understand and process your request. We may request additional information where reasonably necessary to verify your identity and protect your personal information.