Privacy policy

Your information, explained

HELLOVALE LTD is the controller of personal information used to run hellovale.com and our related shopping and support services. This notice explains what we use, why we use it and the choices available to you. Shopify provides the ecommerce platform. Where this notice and our terms differ on personal-information handling, this notice takes precedence.

What we receive

The information involved depends on your interaction with us. It can include:

• Contact and delivery details: name, email, telephone number, billing and shipping addresses.
• Purchase and financial information: orders, items viewed or placed in a cart, transactions, returns, cancellations, payment method and payment confirmations. Payment providers process card and account details under their own safeguards.
• Account information: login details, preferences and settings where you create or use an account.
• Messages and contributions: support correspondence, reviews and other content you choose to send.
• Device and usage information: IP address, browser, device and network identifiers, and how you navigate and interact with the store.
• Inferences or preferences drawn from these interactions where permitted by law.

Anonymous or properly de-identified data that cannot reasonably identify a person is not personal information. We receive information directly from you, automatically through the site and cookies, and from providers or partners involved in the services.

Why we use it

We use relevant information to fulfil orders and contracts, arrange shipping, manage accounts and preferences, handle refunds and exchanges, answer questions, send order updates, enable reviews and improve the shopping experience. Security and fraud-prevention work helps protect customers, accounts and the store. We also use records to meet legal obligations, respond to valid official requests and establish or defend legal claims.

Where lawful, we may use information for relevant marketing, product recommendations and advertising, including activity-based advertising across websites. Promotional messages and non-essential tracking are subject to consent or other applicable legal requirements. You can unsubscribe from marketing at any time; essential order and service messages may still be sent.

Our legal grounds

For UK and EEA users, processing may be necessary to perform a contract or take steps at your request, meet a legal obligation, pursue legitimate interests such as secure operations and proportionate service improvement, or act on your consent. We assess legitimate interests against your rights. When consent is the basis, you can withdraw it without affecting earlier lawful processing.

Cookies and advertising choices

Essential technologies support functions such as the cart, security and your selected preferences. Analytics and advertising tools may use cookies or similar identifiers where permitted. Use the store’s privacy controls, where available, to change non-essential choices. You can also adjust browser settings, although restricting essential cookies may affect functionality.

Where applicable privacy law gives you an opt-out from a “sale”, “sharing” or targeted advertising, you can use Your privacy choices or contact us. Shopify’s supported Global Privacy Control signal is treated as an opt-out where required for the browser or device concerned, and for an associated Shopify account where the platform can make that connection. Other generic “Do Not Track” browser signals may not be recognised. More information is available at Global Privacy Control.

Who may receive information

We share only information relevant to a legitimate purpose with Shopify and providers supporting hosting, IT, storage, payments, delivery, fulfilment, analytics, reviews and customer support. Business or advertising partners may receive information for lawful marketing services under their own notices. Information may also be disclosed when you ask or consent—for example, to deliver an order or use an external integration.

Other possible disclosures include affiliates or our corporate group where applicable, a business transfer such as a merger or insolvency, valid legal or regulatory requests, and action needed to protect legal rights, customers or the service. These disclosures remain subject to applicable law and appropriate safeguards.

Shopify’s role

Information you provide to the store is shared with Shopify and relevant service providers to operate and improve the platform. Some Shopify enhanced services use information about interactions across Shopify merchants. For processing Shopify undertakes as its own controller, Shopify is responsible for the corresponding rights requests. Read the Shopify consumer privacy notice and visit the Shopify privacy portal for further information and choices.

Public posts, external websites and children

A public review or information posted to a public social platform can be seen by others. An external website follows its own privacy and security practices; linking to it does not make it part of our store or necessarily endorse it. Review its notice before supplying information.

Our shopping services are intended for adults, not children. We do not knowingly collect children’s personal information or knowingly sell or share information about individuals under 16 as those terms are defined in applicable law. A parent or guardian can contact us to request removal if a child has supplied information.

Protection, retention and international use

We use appropriate organisational and technical safeguards, but no system or transmission can be promised perfectly secure. Avoid sending sensitive information through unsecured channels. Retention depends on the purpose: maintaining your account, completing and supporting transactions, meeting legal obligations, resolving disputes and enforcing agreements. Information is not kept longer than needed for those purposes.

Shopify and other providers may store or process information outside your country. Where UK or EEA information is transferred internationally, recognised safeguards such as adequacy decisions, the European Commission’s Standard Contractual Clauses or applicable UK transfer instruments are used as required.

Rights you may exercise

Depending on your location and the legal exceptions that apply, you may ask to access or know the information we hold, correct inaccuracies, delete information, obtain a portable copy, object to or restrict processing, withdraw consent, or opt out of sale, sharing or targeted advertising. Rights are not absolute, and a lawful exception may affect a request.

Write to support@hellovale.com to exercise these rights or use an available privacy control. We may need reasonable identity verification before acting. An authorised agent may act for you where the law permits; we may ask for proof of that authority and confirmation from you. We respond within the time required by law and do not discriminate against you for exercising a right.

Concerns or complaints

Please contact us first if you have a privacy concern. Where applicable, you can appeal a decision or complain to your local supervisory authority. UK users may contact the Information Commissioner’s Office; EEA users may contact their local data-protection authority.

Changes and contact

We may update this notice as services, operations or legal requirements change. We will show the revised date and provide any further notice required by law. Contact HELLOVALE LTD at the address below or support@hellovale.com for privacy questions or rights requests.

HELLOVALE LTD
Company number 17491674 · Registered in England and Wales
Office 7565, 58 Peregrine Road, Hainault, Ilford, Essex, IG6 3SZ, United Kingdom
support@hellovale.com

Last updated: 4 October 2026