Privacy Policy

This Privacy Policy explains how HERMAVIO, LLC collects, uses, protects, stores, and discloses personal information when you visit hermavio.com, create an account, place an order, contact us, submit a return or refund request, or otherwise interact with our website and services.

By using hermavio.com, you acknowledge that your personal information may be processed as described in this Privacy Policy. We are committed to handling personal information responsibly and using reasonable administrative, technical, and organizational safeguards to protect the information entrusted to us.

1. Website Platform and Store Operation

This website is a self-hosted store built on WordPress and powered by WooCommerce. WordPress provides the website content management framework, while WooCommerce provides functionality necessary to operate our online store, including product pages, shopping cart functionality, checkout, customer accounts, order management, and related e-commerce features.

Because the website is self-hosted, HERMAVIO, LLC is responsible for managing the website environment and for taking reasonable measures to maintain the security of information processed through the store. Certain functionality is provided by carefully selected third-party services, including payment processors, hosting providers, shipping providers, security services, analytics services, and other technology providers where necessary.

2. Information We Collect

We may collect information that you voluntarily provide when using our website. This may include your name, billing address, shipping address, email address, telephone number, account information, order details, products purchased, customer service communications, return requests, refund requests, and other information necessary to process or support your transaction.

We may also collect technical information automatically when you use the website, including IP address, browser type, device type, operating system, referring pages, pages viewed, approximate geographic region derived from network information, website interaction information, timestamps, cookie identifiers, and security-related information.

3. Information Collected During Checkout

When you place an order, we collect information necessary to complete and administer the transaction. This may include your name, contact details, billing address, delivery address, selected products, order value, selected shipping method, payment method type, order number, transaction status, and related checkout information.

We use this information to confirm your order, arrange shipment, provide tracking information, communicate about the transaction, process returns or refunds, prevent fraud, maintain transaction records, and provide customer support.

4. Payment Information and Third-Party Payment Providers

Payments made through hermavio.com are processed by trusted third-party payment service providers, including Stripe and PayPal. Depending on the payment option selected at checkout, payment information is securely transmitted to the applicable payment provider for authorization and processing.

HERMAVIO, LLC does not store customers' complete payment information on our servers. We do not store full payment card numbers, CVV or CVC security codes, complete PayPal login credentials, Apple Pay payment credentials, Google Pay payment credentials, or other complete sensitive payment authentication information.

We may retain limited transaction-related information provided by Stripe, PayPal, WooCommerce, or another payment provider, such as transaction identifiers, payment status, payment method type, payment date, refund status, or limited masked payment information. Such information may be necessary for accounting, customer support, refund processing, fraud prevention, and payment dispute management.

5. Payment Security

We take payment security seriously. Payment transactions are handled through Stripe, PayPal, and other payment methods supported by those providers rather than by directly storing sensitive card credentials within our website database.

Our website uses HTTPS and SSL/TLS encryption to help protect information transmitted between your browser and our website. Payment providers may additionally use technologies and controls such as encryption, tokenization, transaction authentication, fraud detection, payment risk analysis, and other payment security mechanisms.

Where applicable, payment transactions may also be subject to safeguards associated with PCI-DSS, 3D Secure, Strong Customer Authentication, card network security requirements, and fraud-prevention systems maintained by the applicable payment provider or financial institution.

6. How We Use Personal Information

We use personal information only where reasonably necessary for legitimate business, contractual, security, or legal purposes. This includes processing and fulfilling orders, arranging delivery, sending order and shipping notifications, managing customer accounts, providing customer service, responding to inquiries, processing returns and refunds, maintaining transaction records, and improving our services.

We may also use information to detect suspicious activity, prevent fraudulent transactions, protect our website, verify orders, investigate delivery issues, respond to payment disputes, comply with legal obligations, enforce our policies, and protect the rights and interests of HERMAVIO, LLC and our customers.

7. Order Fulfillment and Shipping Information

To deliver an order, we may share necessary information with shipping carriers, fulfillment providers, logistics partners, customs authorities, or other service providers involved in transportation and delivery. This information may include the recipient's name, delivery address, telephone number, email address where required, package details, and other information necessary to complete delivery.

We disclose only the information reasonably necessary for shipment processing, customs clearance where applicable, delivery, tracking, and investigation of shipping issues. Shipping providers process information according to their own legal obligations and privacy practices.

8. Returns, Refunds, and Customer Service

When you request a return, refund, replacement, or other customer service assistance, we may collect your order number, contact information, reason for the request, product information, photographs, shipment records, communications, and other supporting information necessary to review the matter.

Approved refunds are processed through the original payment method in accordance with our Return & Refund Policy and Payment Policy. Because payments are processed through third-party providers such as Stripe and PayPal, refund-related transaction information may also be processed by those providers.

9. Payment Disputes and Chargebacks

Where a payment dispute, chargeback, unauthorized transaction claim, fraud review, or similar payment investigation is initiated, we may use and disclose relevant transaction records to Stripe, PayPal, card issuers, banks, payment networks, fraud-prevention services, or other authorized parties involved in the dispute process.

Information provided for this purpose may include order confirmation, transaction identifiers, customer communications, shipping address, billing information, tracking information, delivery confirmation, return or refund records, product information, and other documentation reasonably necessary to establish the history and legitimacy of a transaction.

We limit such disclosures to information reasonably necessary to investigate or respond to the payment dispute, protect against fraud, and comply with the requirements of payment providers and financial institutions.

10. Cookies and Similar Technologies

hermavio.com may use cookies and similar technologies that are necessary for website functionality, shopping cart operation, checkout, account login, security, preferences, analytics, and other features. Necessary cookies help maintain sessions, remember cart contents, prevent security abuse, and support essential WooCommerce functionality.

Depending on the services enabled on the website, optional analytics or preference cookies may also be used. Where required by applicable law, non-essential cookies will be subject to appropriate consent choices.

You may control cookies through your browser settings or available cookie preference tools. Disabling necessary cookies may affect shopping cart, checkout, login, or other essential website functions.

11. Information Security Measures

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, unlawful disclosure, alteration, misuse, accidental loss, or destruction.

Security measures may include HTTPS connections, SSL/TLS encryption for information in transit, access controls, administrative account restrictions, strong authentication practices, role-based access where appropriate, secure hosting configurations, software updates, security patches, firewall or security filtering tools, malware monitoring, login protection, and controlled access to website administration systems.

We also seek to limit access to personal information to personnel, service providers, or systems that reasonably require access for operational, security, customer service, accounting, or legal purposes.

12. Data Minimization and Access Controls

We follow the principle that personal information should be collected and retained only where reasonably necessary for defined business or legal purposes. We do not intentionally collect sensitive information that is unrelated to completing orders or operating our services.

Administrative access to customer and order information is restricted to authorized persons who require such access for their responsibilities. Where appropriate, access privileges are limited according to role and operational need in order to reduce unnecessary access to customer information.

13. Website Maintenance, Updates, and Security Monitoring

Because hermavio.com operates through a self-hosted WordPress and WooCommerce environment, we take reasonable steps to maintain the website platform, themes, plugins, and other software components. This may include applying updates, security patches, compatibility updates, and other maintenance measures when appropriate.

We may monitor website activity, login attempts, error logs, IP-related security events, transaction patterns, or other technical information when reasonably necessary to identify malicious activity, unauthorized access, automated abuse, fraud, or other security threats.

14. Backups and Recovery

We may maintain protected website or database backups for business continuity, disaster recovery, technical restoration, and security purposes. Backups may temporarily contain personal information that existed in the website database at the time the backup was created.

Access to backups is restricted and backups are retained only for legitimate operational or security purposes. Information contained in backups is not used for unrelated marketing or commercial purposes.

15. Third-Party Service Providers

We may use third-party service providers to support the operation of hermavio.com. These may include Stripe, PayPal, website hosting providers, WooCommerce-related service providers, shipping and logistics companies, email providers, fraud-prevention services, website security services, analytics providers, and professional advisers where necessary.

These providers may process limited personal information on our behalf or as independent service providers depending on the nature of their services. We seek to provide only information reasonably necessary for them to perform their specific functions.

We do not sell customer payment information to third parties, and we do not disclose personal information to unrelated third parties solely for their independent use without an appropriate purpose or legal basis.

16. Disclosure Required by Law

We may disclose personal information where reasonably necessary to comply with applicable laws, regulations, court orders, subpoenas, lawful governmental requests, tax requirements, customs requirements, financial regulations, or other legally enforceable obligations.

Information may also be disclosed where reasonably necessary to investigate fraud, protect the security of our website, enforce our agreements, protect our legal rights, protect customers or other persons, or establish, exercise, or defend legal claims.

17. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including order fulfillment, customer service, refunds, payment disputes, fraud prevention, accounting, legal compliance, tax requirements, and enforcement of our agreements.

Different categories of information may require different retention periods. Where information is no longer reasonably necessary and no longer subject to a legal, financial, contractual, security, or dispute-related retention requirement, we will take reasonable steps to delete, anonymize, or securely dispose of it.

Certain transaction records may need to be retained for longer periods where required by applicable tax, accounting, payment, fraud-prevention, legal, or regulatory obligations.

18. Data Breach and Security Incident Response

Although no internet-based service can guarantee absolute security, we maintain reasonable measures intended to reduce the risk of unauthorized access to personal information. If we become aware of a security incident affecting personal information, we will investigate the incident and take reasonable steps to contain, remediate, and document the issue.

Where required by applicable law, we will notify affected individuals, regulatory authorities, or other appropriate parties within the legally required time periods. We may also take steps such as resetting credentials, restricting access, applying security updates, preserving investigation records, and working with relevant service providers.

19. European Privacy Rights and GDPR

If you are located in the European Economic Area, European Union, or another jurisdiction where the General Data Protection Regulation (GDPR) applies, you may have additional rights regarding your personal information.

Depending on the circumstances, our legal bases for processing personal information may include performance of a contract, compliance with legal obligations, legitimate interests, protection against fraud and security threats, and consent where consent is legally required.

For example, we process order and shipping information because it is necessary to fulfill a purchase contract. We may process transaction records because of legal, accounting, or fraud-prevention obligations. Optional marketing or non-essential cookie processing may rely on consent where required.

20. Your Rights Under GDPR

Subject to applicable law, individuals protected by the GDPR may have the right to request access to personal information, correction of inaccurate information, deletion of information, restriction of processing, objection to certain processing activities, and portability of certain information.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing performed before the withdrawal. Some requests may be limited where we are required to retain information to fulfill legal, accounting, fraud-prevention, contractual, or dispute-related obligations.

To exercise an applicable privacy right, contact us at [email protected]. We may request reasonable information to verify your identity before fulfilling a request in order to prevent unauthorized access to customer information.

Individuals in applicable European jurisdictions may also have the right to submit a complaint to the competent data protection supervisory authority if they believe that their personal information has been processed unlawfully.

21. International Data Transfers

Because hermavio.com serves customers internationally and uses service providers such as payment processors, hosting services, logistics providers, and other technology providers, personal information may be processed in countries other than the country in which you reside.

Where applicable privacy laws require safeguards for international transfers, we and our relevant service providers may rely on recognized legal mechanisms or other appropriate safeguards for transferring personal information between jurisdictions.

Stripe, PayPal, shipping providers, hosting providers, and other service providers may maintain infrastructure or operations in multiple countries and may process information according to their own privacy policies and applicable legal obligations.

22. Children's Privacy, Policy Updates, and Contact Information

hermavio.com is intended for customers who are legally capable of entering into online purchasing transactions. We do not knowingly collect personal information from children where such collection would be prohibited by applicable law.

If a parent or legal guardian believes that a child has provided personal information to us improperly, please contact us at [email protected] so that we can review the matter and take appropriate action.

We may update this Privacy Policy when reasonably necessary to reflect changes to our website, WooCommerce configuration, payment services, security practices, business operations, legal obligations, or service providers. The updated version will be published on hermavio.com, and the version displayed on the website will represent the current Privacy Policy.

If you have questions about this Privacy Policy, the information we collect, our security practices, payment-related privacy, or a privacy rights request, you may contact us using the information below:

Company: HERMAVIO, LLC
Website: hermavio.com
Address: 10011 SE Division St, Ste 101, Portland, OR 97266, US
Phone: +1 (503) 762-2500
Email: [email protected]