Privacy Policy

Last updated: November 6, 2025

Human Design Shop and Human Design Studios (“we”, “us”, “our”) respect your privacy and are committed to protecting the personal information you share with us through humandesignshop.com (the “Site”), our showrooms, and our customer service channels. This Privacy Policy explains what information we collect, how we use it, your rights, and how to contact us.

1. Scope & Applicability

This policy applies to personal information we collect online via the Site and through in-person purchases or services at our showroom located at 415 Nāhua St, Honolulu, HI. It also covers communications through email, phone, social media, and other customer support channels.

2. Information We Collect

2.1. Information You Provide Directly

• Account information (name, email, password, phone, billing and shipping address)
• Order information (products purchased, SKUs, preferences, order notes)
• Payment information (payment card or payment processor token — we do not store full card numbers on our servers)
• Custom order specifications, engraving text, sizing information, and uploaded photos for custom work
• Customer service communications, returns or repair requests, warranty claims

2.2. Information Collected Automatically

• Technical data such as IP address, browser type, operating system, device identifiers, and pages viewed
• Site activity and usage data (clicks, search queries, product views)
• Cookies, pixels and similar technologies (see Cookies section below)

2.3. Information from Third Parties

We may receive information from third parties, such as payment processors, analytics providers, marketing partners, and shipping carriers (e.g., tracking numbers). Where required by law, we will only combine or use third-party data according to applicable rules.

3. How We Use Personal Information

We use your personal information for lawful business purposes including:

• Processing and fulfilling orders, returns, repairs and exchanges
• Payment authorization, fraud prevention, and billing
• Providing customer service, warranty support, and order updates
• Personalizing your experience (recommended products, saved preferences)
• Sending transactional messages (order confirmations, shipping notices)
• Marketing communications (where you have consented), such as newsletters, promotions and offers
• Analytics, site improvement, A/B testing and performance monitoring
• Complying with legal obligations and responding to lawful requests

4. Legal Bases for Processing (Where Applicable)

If you are a resident of the European Economic Area (EEA), our legal bases for processing personal data include:

• Contract performance — to fulfill your orders and our obligations;
• Consent — when you opt-in for marketing or promotional communications;
• Legitimate interests — for fraud prevention, site analytics, and improvement (balanced with your rights); and
• Compliance with legal obligations — to meet tax, customs or legal record-keeping requirements.

5. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to operate the Site, analyze usage, and deliver personalized content. You may see:

• Essential cookies — required for site functionality (checkout, security).
• Performance cookies — these collect anonymous analytics (e.g., Google Analytics).
• Functional cookies — remember preferences and settings.
• Advertising/targeting cookies — used by ad partners for relevant advertising.

Most browsers allow you to block or delete cookies. Blocking cookies may affect site functionality (including checkout). For analytics opt-out you can visit Google’s Analytics opt-out page.

6. Third Parties & Service Providers

We may share data with service providers who perform services on our behalf, including:

• Payment processors and fraud prevention providers (e.g., Stripe, PayPal, or other processors) — to process payments.
• Shipping carriers and fulfillment partners — to deliver orders and provide tracking updates.
• Analytics and advertising providers (e.g., Google Analytics, Meta Business Tools) — for measurement and ads.
• Customer support platforms, CRM systems and email service providers — to manage communications and marketing (with consent where required).

We require these providers to maintain appropriate security and confidentiality standards and use your data only as instructed by us.

7. Marketing Communications & Opt-Out

We send marketing emails only with your consent or where permitted by law. You can opt out at any time by clicking the “unsubscribe” link in any marketing email, or by emailing [email protected]. Even if you opt out of marketing, you will still receive transactional emails about your orders.

8. Your Privacy Rights

The rights available to you depend on your jurisdiction. The main rights are listed below:

8.1. European Residents (GDPR)

• Right to access a copy of your personal data
• Right to correct inaccurate data
• Right to erasure (right to be forgotten), subject to legal exceptions
• Right to restrict processing or to object to processing
• Right to data portability
• The right to withdraw consent where processing is based on consent

8.2. California Residents (CCPA / CPRA)

If you are a California resident, you may have additional rights including:

• Right to know what categories of personal information we have collected and sold or disclosed for a business purpose
• Right to request deletion of personal information, subject to exceptions
• Right to opt out of sale/sharing for cross-context behavioral advertising
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, California residents may contact us at [email protected] or call +1 (646) 522-1049. You may also designate an authorized agent to submit requests on your behalf (we may require proof of identity).

8.3. How to Exercise Your Rights

To make a request (access, deletion, correction, portability, or opt-out), email [email protected] with “Privacy Request” in the subject line. Provide sufficient details to allow us to locate your records (order number, name, email). We will verify your identity before fulfilling requests.

9. Data Retention

We retain personal data as long as necessary to provide services, complete transactions, comply with legal obligations (e.g., tax and accounting), resolve disputes, enforce agreements, and for our legitimate business interests (e.g., analytics). Typical retention periods:

• Order records, receipts and invoices — retained for at least 7 years for tax and accounting.
• Account information — retained until account deletion or inactivity for a period defined by our account policy.
• Marketing preferences — retained until you unsubscribe or revoke consent.

10. Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect personal data. These measures include encrypted connections (SSL/TLS), secure access controls, and the use of reputable third-party providers for payments and storage. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of data.

11. International Data Transfers

Human Design Shop operates in the United States and may transfer personal data to service providers located in other jurisdictions. Where transfers occur from the EEA or other regions with data protection laws, we ensure appropriate safeguards (standard contractual clauses or equivalent) are in place where required.

12. Children

Our Site and services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us immediately at [email protected] and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will post the updated policy on this page with a revised “Last updated” date. Significant changes will be communicated by email or notice on the Site where appropriate.

14. Contact & Complaints

If you have questions, concerns, or a complaint about our privacy practices, contact us:

• Email: [email protected]
• Phone: +1 (646) 522-1049
• Address: 415 Nāhua St, Honolulu, HI 96815

You also have the right to lodge a complaint with a supervisory authority in your jurisdiction (for EEA residents) or with the California Attorney General (for California residents) if you believe your rights have been violated.

15. Additional Information for California: “Do Not Sell or Share My Personal Information”

We do not sell personal information for monetary consideration. If you wish to opt out of the sharing of personal information for targeted advertising (if applicable), please contact us at [email protected] or visit the site mechanisms provided on our cookie notice. We will honor verified opt-out requests in accordance with applicable law.

16. Links to Other Sites

Our Site contains links to third-party sites. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies before providing personal information.

17. Appendix: List of Major Third-Party Service Types

Examples of third-party service providers we use (these may change):

• Payment processors (e.g., Stripe, PayPal, or similar)
• Analytics (e.g., Google Analytics, Google Tag Manager)
• Advertising platforms (e.g., Meta / Facebook Ads, Google Ads)
• Email & CRM (e.g., Klaviyo, Mailchimp, or similar)
• Shipping & fulfillment partners and carriers