Privacy policy
Effective date: 2026-05-08
H'Urban Apothika ("HUA," "we," "our," or "us") values your trust. This Privacy Policy explains what information we collect when you visit our store, what we do with it, and the rights you have.
By using our store, you agree to the practices described here.
1. Information We Collect
Information you provide directly:
- Order information — when you place an order, we collect your name, shipping address, billing address, email address, phone number, and the items you purchase. We do not see or store your full payment card number; that is handled by our payment processor (see §3).
- Account information — if you create an account, we collect your email and any optional details you choose to add (e.g., name, address book, subscription preferences).
- Subscription preferences — if you subscribe to a recurring delivery, we record your selected products, frequency, and renewal schedule.
- Email subscription information — if you join our newsletter, we collect your email address and any preferences you indicate.
- Customer support communications — when you email us at info@bveats.com or use a contact form, we keep a record of the conversation so we can help you.
Information collected automatically:
- Device and browsing information — IP address, browser type, device type, pages visited, time spent on pages, and referring website. This helps us improve the store and detect security issues.
- Cookies and similar technologies — small data files stored on your device to remember your cart, keep you logged in, recognize you on return visits, and (where used) measure marketing performance. See §4.
- Analytics data — if and when web analytics tools (such as Google Analytics 4) or marketing measurement pixels (such as the Meta Pixel) are connected to our store, we receive aggregate and pseudonymous information about how the store is used and how visitors interact with our marketing.
We do not intentionally collect health information, medical history, diagnoses, or any data that would qualify as protected health information (PHI) under HIPAA. We are not a HIPAA-covered entity. Please do not send sensitive health information through customer support — share with your healthcare practitioner instead.
2. How We Use Your Information
- Fulfilling your order — preparing, shipping, and tracking your purchase; processing returns and exchanges.
- Managing your account and subscriptions — keeping your details current, processing recurring renewals, sending order and shipping notifications, applying any subscription discounts.
- Communicating with you — answering questions, sending order updates, responding to feedback, sending newsletters or promotional emails (only if you opt in).
- Improving the store — understanding which products and pages are most useful, fixing bugs, refining navigation.
- Detecting fraud and protecting the store — flagging suspicious orders, preventing card-testing or chargebacks, maintaining account security.
- Complying with our legal obligations — including tax records, sales records, and responding to lawful requests from authorities.
3. Third-Party Service Providers Who Handle Your Information
To run the store, we use trusted vendors who process your information on our behalf. They are bound by their own privacy policies and by contracts that limit how they may use your data.
- Shopify, Inc. — storefront platform, order processing, account hosting. shopify.com/legal/privacy
- Loop Subscriptions — subscription billing and management.
- Stripe (via a Shopify-listed third-party gateway app) — card processing and fraud screening. stripe.com/privacy
- PayPal — alternative checkout payment processing. paypal.com/legalhub/privacy
- Shipping carriers (USPS, UPS, FedEx) — delivering your order. Each carrier's own privacy policy applies once your order leaves our hands.
We may connect additional vendors over time (for example, email-marketing or analytics platforms). When we do, this policy will be updated to name them.
We do not sell your personal information. We share it with the vendors above only for the limited purposes described, and with authorities when legally required.
4. Cookies and Similar Technologies
We use cookies for:
- Strictly necessary — keeping your shopping cart, signing you in, security. These cannot be turned off without breaking the store.
- Functional — remembering your preferences (e.g., region, language).
- Analytics — understanding aggregate traffic patterns (only if a web analytics tool is connected).
- Marketing — measuring ad performance and re-engaging visitors (only if a marketing pixel is connected).
Most browsers let you control cookies through their settings. If you disable cookies entirely, parts of the store (cart, checkout, account) may not work properly.
5. Your Rights
Depending on where you live, you may have the following rights with respect to your information:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to fix information that is inaccurate or incomplete.
- Deletion — ask us to delete your information, subject to limited exceptions (e.g., we are required to keep tax and order records for a period set by law).
- Portability — request your information in a portable format.
- Opt out of marketing — unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by contacting us.
- Opt out of "sale" or "sharing" of personal information (California residents — CCPA / CPRA) — we do not sell your personal information; if our practices change, we will provide a "Do Not Sell or Share" mechanism.
- Lodge a complaint — with a data protection authority where you live.
To exercise any of these rights, email info@bveats.com with your request. We will respond within the timeframes required by applicable law (typically 30–45 days). We may need to verify your identity before completing the request.
We sell to U.S. customers only at this time. If you are visiting from outside the United States, please understand that your information will be processed in the United States.
6. Data Retention
We keep your information for as long as your account is active and as long as needed to fulfill the purposes described in this policy. Order, billing, and tax records are typically retained for at least seven (7) years to comply with U.S. tax and accounting requirements. Marketing email information is retained until you unsubscribe or ask us to delete it.
7. Children's Privacy
Our store is intended for adults aged 18 and older. We do not knowingly collect information from children under 13. If you believe a child has provided information to us, please contact info@bveats.com and we will delete it.
8. Security
We use commercially reasonable measures — including encryption in transit (HTTPS), restricted vendor access, and Shopify's PCI-compliant payment infrastructure — to protect your information. No system is perfectly secure, and we cannot guarantee absolute security; please use a strong, unique password and keep your account credentials confidential.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective date" at the top will reflect the most recent change. Material changes will be communicated via email (if you are subscribed) or a prominent notice on the store before they take effect.
10. Contact Us
Questions about this policy or your information can be sent to:
H'Urban Apothika
6208 W 87th St
Los Angeles, CA 90045
info@bveats.com