We collect two categories of information: information you provide directly, and information collected automatically when you use the Site.

Information you provide — Order Information

When you make a purchase or attempt a purchase, we collect:

• Name
• Billing and shipping address
• Payment information (credit card numbers, PayPal, Afterpay details — processed by our payment providers, not stored by us)
• Email address
• Phone number

Information collected automatically — Device Information

When you visit the Site, we automatically collect certain device and browsing information, including:

• IP address
• Web browser type and version
• Pages and products you view
• Referring websites or search terms that brought you here
• Date, time, and duration of your visit
• Internet service provider

This information is collected via cookies, log files, and web beacons — described in more detail in the Cookies section below.

Information you provide voluntarily

If you sign up for our email or SMS list, participate in a survey, or contact us directly, we may collect the information you provide in those interactions, including email address, phone number, and any responses or preferences you share.

We use the information we collect to:

• Process and fulfill your orders, including payment, shipping, and delivery confirmation
• Communicate with you about your order status, returns, and exchanges
• Screen orders for potential fraud or security risk
• Send marketing emails and SMS messages where you have opted in — you can opt out at any time
• Improve and optimize the Site by analyzing how customers browse and interact with it
• Comply with applicable legal obligations

Legal basis for processing (EU/EEA residents)

Where required by GDPR, we rely on the following lawful bases:

• Contract performance — processing your order, arranging shipping, and providing order confirmations
• Legitimate interests — fraud screening, site analytics, and improving the shopping experience
• Consent — sending marketing emails and SMS messages, and placing non-essential cookies
• Legal obligation — retaining transaction records as required by applicable law

We do not sell your personal information. We share it only with third-party service providers who help us operate the Site and fulfill orders. Each provider processes your data in accordance with their own privacy policy.

We use the following technologies to collect Device Information:

Cookies are small data files placed on your device. They help us remember your preferences, keep you logged in, and understand how you use the Site. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent — however, some parts of the Site may not function properly without them.

Log files automatically record actions on the Site. Log data includes your IP address, browser type, internet service provider, referring and exit pages, and timestamps.

Web beacons, tags, and pixels are electronic files that record how you browse the Site and interact with our emails. They are used in combination with cookies to measure marketing effectiveness.

You can opt out of Google Analytics tracking at any time using the Google Analytics opt-out browser add-on.

For more information about cookies and how to manage them, visit allaboutcookies.org.

We use your personal information to show you advertising we believe may be of interest to you, including on third-party websites and social media platforms. This is sometimes called interest-based or behavioral advertising.

You can opt out of interest-based advertising through:

• Network Advertising Initiative (NAI) opt-out portal
• Digital Advertising Alliance (DAA) opt-out portal

Please note that opting out of targeted advertising does not mean you will stop seeing ads — you will still see ads, they just will not be tailored based on your browsing behavior.

Do Not Track

Some browsers send a "Do Not Track" signal. The Site does not currently alter its data collection practices in response to Do Not Track signals. If our practices change, this policy will be updated accordingly.

Regardless of where you are located, you may contact us at info@houseofheros.com to:

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information.

Categories of personal information collected (past 12 months):

• Identifiers — name, email address, IP address, phone number
• Commercial information — purchase history, products considered
• Internet or other electronic network activity — browsing behavior on the Site
• Geolocation data — general location derived from IP address
• Inferences — drawn from above categories to understand preferences

We do not collect sensitive personal information as defined by the CPRA (e.g., Social Security numbers, precise geolocation, biometric data, or health information).

If you are a resident of the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

We retain order information — including your name, address, email, and purchase history — for as long as necessary to fulfill orders, comply with applicable legal and tax obligations, resolve disputes, and enforce our agreements.

Marketing data (email and SMS subscription records) is retained until you unsubscribe or request deletion.

Device and analytics data collected via cookies and log files is retained in accordance with the data retention policies of the respective third-party providers (Shopify, Google Analytics).

To request deletion of your personal information, email info@houseofheros.com. We will process deletion requests within 30 days, subject to any legal retention obligations.

House of HÉROS is based in the United States. If you are visiting the Site from outside the United States — including from the European Economic Area — your information will be transferred to and processed in the United States and potentially other countries where our service providers operate, including Canada.

These countries may not have the same data protection laws as your country of residence. When we transfer data from the EEA, we do so using appropriate safeguards, including reliance on standard contractual clauses where required by GDPR.

By using the Site and providing your personal information, you acknowledge that your data will be transferred to the United States and processed there.

The Site is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at info@houseofheros.com and we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, service providers, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of the Site after any changes constitutes your acceptance of the updated policy.

For questions, requests, or complaints about this Privacy Policy or our data practices, please contact us at:

House of HÉROS
Email: info@houseofheros.com
Website: houseofheros.com

We will respond to all requests within 30 days. For CCPA requests, the response window is 45 days.