Privacy policy
Privacy policy
Last updated: 24 April 2026. We collect only what we need to send you your order, serve your account, and improve the store.
1. Who we are
The data controller for this website is Selimind LLC, 2100 Cerrillos Road, Santa Fe, NM 87505, USA ("Herby," "we," "us"). EU representative: Selimind Europe BV, Utrechtsestraat 41, 1017 VH Amsterdam.
2. What we collect
- Account data: name, email, date of birth, password hash.
- Order data: billing & shipping address, items purchased, order history.
- Payment data: processed by Stripe and PayPal. We never see your card number.
- Browsing data: pages viewed, products viewed, referrer, approximate location (from IP).
- Marketing preferences: email consents, SMS consents, categories of interest.
3. Why we process it
- To fulfill your order (contractual necessity).
- To operate and improve the store (legitimate interest).
- To send you marketing, if you consent (consent).
- To comply with tax, accounting and anti-fraud obligations (legal obligation).
4. Who we share with
- Carriers (DHL, DPD, FedEx) — for delivery.
- Payment processors (Stripe, PayPal, Klarna) — for payment.
- Email and SMS providers (Klaviyo, Twilio) — if you consent.
- Analytics (privacy-preserving; Plausible and Amplitude).
- Tax authorities, when legally required.
We do not sell your data. Ever.
5. How long we keep it
Account data: until you delete your account. Order data: 10 years, for tax and accounting. Marketing preferences: until you withdraw consent. Analytics: 24 months.
6. Your rights
- Access: ask what we hold on you.
- Rectification: correct it.
- Erasure: delete your account and associated personal data.
- Portability: receive your data as a machine-readable file.
- Objection: stop us processing it for marketing.
Exercise any right by emailing [email protected]. We reply within 30 days.
7. International transfers
Some of our processors are based outside your country (e.g., Stripe in the US, fulfillment in Singapore). Transfers are covered by Standard Contractual Clauses and, for EU/UK, Adequacy Decisions where available.
8. Cookies
See our Cookie policy.
9. Changes
We may update this policy. Material changes are notified by email to account-holders. The current version is always at this URL.
10. Complaints
You may lodge a complaint with your national data protection authority (e.g., the ICO in the UK, the AP in the Netherlands) or, in the US, your State Attorney General.