Privacy policy

Privacy Policy – HeroPortal

Last updated: 15/02/2026

HeroPortal operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). HeroPortal is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect or Process

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked to you. It does not include information that has been anonymized or de-identified.

Depending on how you interact with the Services and where you live, we may collect the following categories of personal information:

  • Contact details: name, billing address, shipping address, phone number, and email address.

  • Financial information: payment card details, transaction data, payment confirmations, and other payment-related information (processed securely by our payment providers).

  • Account information: username, password, preferences, and settings.

  • Transaction information: products viewed, added to cart or wishlist, purchased, returned, exchanged, or cancelled, and order history.

  • Communications: information you provide when contacting us (e.g. customer support requests).

  • Device information: IP address, browser type, device identifiers, and network information.

  • Usage information: how and when you interact with or navigate the Services.

Sources of Personal Information

We collect personal information from the following sources:

  • Directly from you when you create an account, place an order, contact us, or otherwise provide information.

  • Automatically through cookies and similar technologies when you use the Services.

  • From service providers who help us operate the store (e.g. payment processors, hosting, analytics, shipping).

  • From partners or third parties, where permitted by law.

How We Use Your Personal Information

We use personal information for the following purposes:

1. Provide, Tailor, and Improve the Services

To process payments, fulfill orders, manage accounts, arrange shipping, handle returns and exchanges, send order-related communications, enable reviews, and personalize your shopping experience.

2. Marketing and Advertising

To send marketing communications (where permitted), display advertisements, and recommend products based on your interactions with the Services. You may opt out of marketing emails at any time.

3. Security and Fraud Prevention

To authenticate accounts, secure transactions, detect and prevent fraud or malicious activity, and protect the Services.

4. Communication

To provide customer support and maintain our business relationship with you.

5. Legal Obligations

To comply with applicable laws, respond to lawful requests, enforce our terms and policies, and protect our rights and the rights of others.

How We Disclose Personal Information

We may disclose your personal information in the following circumstances:

  • With Shopify and service providers that perform services on our behalf (e.g. payment processing, hosting, analytics, fulfillment, shipping).

  • With marketing and advertising partners, where permitted by law.

  • When you request or consent to the disclosure (e.g. shipping products, social media integrations).

  • With affiliates or within our corporate group.

  • In connection with a business transaction (e.g. merger, acquisition) or to comply with legal obligations.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information to provide and improve the Services. Your information may be transferred to and processed in countries outside your country of residence.

To learn more about how Shopify uses personal information and your rights, please visit:
https://privacy.shopify.com

Third-Party Websites and Links

The Services may include links to third-party websites or platforms. We are not responsible for the privacy practices or content of those third parties. Accessing third-party sites is at your own risk.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority. If you believe a child has provided us with personal information, please contact us to request deletion.

Security and Retention of Information

No method of transmission or storage is completely secure. We take reasonable measures to protect your personal information but cannot guarantee absolute security.

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements.

Your Rights and Choices

European Union / United Kingdom (GDPR)

If you are located in the EU or UK, you have the right to:

  • Access your personal information

  • Rectify inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time (where processing is based on consent)

United States

Depending on your state of residence (e.g. California), you may have the right to:

  • Know what personal information we collect and disclose

  • Request deletion of personal information

  • Correct inaccurate personal information

  • Opt out of the sale or sharing of personal information for targeted advertising

  • Not be discriminated against for exercising your rights

Canada (PIPEDA)

If you are located in Canada, you have the right to access and correct your personal information and to withdraw consent, subject to legal and contractual restrictions.

Exercising Your Rights

You may exercise your rights by contacting us using the details below. We may need to verify your identity before processing your request. We will respond within the time limits required by applicable law.

International Transfers

Your personal information may be transferred to and processed outside your country of residence. For transfers from the EU or UK, we rely on approved safeguards such as Standard Contractual Clauses or adequacy decisions.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time for legal, regulatory, or operational reasons. The updated version will be posted on this page with a revised “Last updated” date.

Contact Information

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, please contact us:

HeroPortal
📧 Email: heroportal@use.startmail.com
📍 Address: Carrer del Sol Naixent 55, 08394 Sant Vicenç de Montalt, Barcelona, Spain

For the purposes of EU and UK data protection laws, HeroPortal is the data controller of your personal information.