Privacy policy

Last updated: June 22, 2026

The website and e-commerce store located at this domain are owned and operated by her®, a proprietary wellness brand of KMM Marcena Trading. Throughout this document, the terms "we," "us," and "our" refer to her® and KMM Marcena Trading. We provide this website, including all information, tools, features, products, and services, to you—the customer—conditioned upon your acceptance of all terms, conditions, policies, and notices stated here.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase from, or otherwise communicate with us regarding the Services. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of our Services, you acknowledge that you have read and understood the collection, use, and disclosure of your information as described herein.

1. Personal Information We Collect or Process

When we use the term "personal information," we refer to information that identifies, relates to, describes, or can reasonably be linked directly or indirectly to you or another individual. Personal information does not include data that has been permanently anonymized or de-identified so that it can no longer identify or be linked to you.

Depending on how you interact with our Services, we may collect and process the following categories of personal information:

  • Contact Details: Including your legal name, billing address, shipping address, phone number, and email address.

  • Financial Information: Including credit card, debit card, or other financial account numbers, payment card expiration dates, security codes, payment confirmations, and transaction details processed through secure payment gateways.

  • Account Credentials: Including your selected username, encrypted password, security questions, and specific account preferences or settings.

  • Transaction Information: Including records of the specific items you view, add to your cart, add to your wishlist, purchase, return, exchange, or cancel, alongside your historical purchase timeline.

  • Customer Communications: Information you intentionally include in your communications with us, such as customer support inquiries, product reviews, or feedback forms.

  • Device Identifiers: Information automatically shared by your device, browser, or network connection, including your IP address, device type, operating system version, browser type, and other unique online identifiers.

  • Usage Data: Logs concerning your interaction with our website, including timestamped access history, navigation paths, clickstreams, page-view durations, and search terms used within the Services.

2. Personal Information Sources

We collect personal information from the following distinct pipelines:

  • Directly From You: When you manually provide information to us by creating an account, filling out a form, completing a transaction, subscribing to updates, or initiating a support request.

  • Automatically Through the Services: Collected dynamically via your device or browser when you navigate our platform, utilizing cookies, web beacons, and similar digital tracking technologies.

  • From Our Service Providers: Trusted partners who collect or process data strictly on our behalf to facilitate operations (such as payment processing infrastructure, cloud hosting, and order fulfillment logistics).

  • From Third-Party Platforms: Data received from integrated social media widgets, login integrations, or collaborative marketing networks that you have authorized to share information with us.

3. How We Use Your Personal Information

We process personal information under strict lawful grounds to fulfill the following operational and marketing purposes:

  • Providing and Optimizing Services: Fulfilling our sales contracts, processing transactions, managing your customer account, arranging product shipping, facilitating returns/exchanges, remembering your shopping preferences, and providing localized content.

  • Marketing and Targeted Advertising: Disseminating promotional communications, newsletters, and text messages (where explicitly opted-in), and displaying tailored online advertisements based on your browsing patterns and historical cart additions.

  • Security and Fraud Prevention: Authenticating user accounts, evaluating transaction risk, detecting and investigating unauthorized or malicious behavior, defending against systemic cyber threats, and securing our retail infrastructure.

  • Customer Care and Relationship Management: Responding to inquiries, offering product information, resolving fulfillment anomalies, and cultivating an intentional, supportive business relationship with you.

  • Regulatory and Legal Compliance: Complying with applicable laws, responding to lawful government mandates or court orders, defending legal claims, participating in civil discovery, or protecting our statutory property rights.

4. How We Disclose Personal Information

Under specific, legitimate business contexts, we may share categories of personal information with select third parties:

  • With Shopify and Core Processors: We disclose data to our primary e-commerce host, Shopify, as well as third-party vendors who perform specialized operational services on our behalf (e.g., IT management, secure payment gateways, data analytics, customer support, and postal fulfillment handlers).

  • With Advertising Partners: To serve targeted marketing banners or custom audience ads. Depending on your geographical jurisdiction, you may possess an inherent legal right to opt-out of targeted profiling and digital data sharing.

  • By Direct Consent or Request: Sharing information with independent external applications when you intentionally authorize social media login widgets or direct us to use specific cross-platform tools.

  • Corporate Restructuring: In the event of a corporate asset sale, merger, consolidation, or transition of brand management under KMM Marcena Trading.

5. Relationship with Shopify

Our digital store is hosted via the Shopify platform. Shopify acts as an essential data processor for the information you submit through our storefront. Your personal information will be transmitted to, stored, and processed by Shopify on secure global servers outside of your immediate country of residence.

Furthermore, to maintain core features, optimize checkout reliability, and protect our store from transactional fraud, we utilize enhanced analytical features provided by Shopify. These features securely aggregate automated tracking data across participating merchants. Shopify controls this system autonomously. To review Shopify's direct privacy governance, data processing frameworks, or to utilize their centralized privacy mechanism, please consult the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

6. Third-Party Links

Our website may feature hyperlinked references to external domains or digital platforms operated by independent third parties. Following these external links places you under the distinct privacy rules of those specific operators. We do not evaluate, endorse, guarantee, or assume liability for the privacy protocols, content, accuracy, or data security measures utilized on external websites.

7. Children's Data

Our products and digital services are not intended for use by children. We do not intentionally or knowingly collect, process, or maintain personal information from individuals under the legal age of majority within their respective national jurisdictions. If a parent or legal guardian discovers that a minor has submitted personal data to us, you may contact our compliance team using the contact nodes below to request immediate, complete erasure.

8. Data Security and Retention

Please note that no digital data transmission over the internet or cloud storage network can be guaranteed as 100% impenetrable. While we maintain administrative and technical safeguards to shield your data, we cannot guarantee absolute, flawless security. We strongly advise against using unencrypted, public communication channels to transmit highly confidential financial details or sensitive credentials to us.

We retain your personal information only for the duration strictly necessary to fulfill the specific operational purposes detailed in this policy, manage your customer account, resolve transactional disputes, maintain our historical financial ledgers, and satisfy statutory regulatory compliance windows.

9. International Data Transfers

Your personal data may be transferred to, stored in, and processed across international boundaries (including the United States, Canada, and Singapore) where our hosting providers maintain data centers.

When transferring data out of specific jurisdictions like the European Economic Area (EEA) or the United Kingdom (UK), we ensure valid legal mechanisms are active—such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent cross-border data protection treaties—unless the destination country has officially been granted an Adequacy Decision by the corresponding governing authority.

10. Jurisdictional Rights and Choice

Depending on your geographical location or citizenship, you are granted specific statutory rights regarding your personal information under frameworks such as the Philippines Data Privacy Act of 2012 (Republic Act No. 10173)and standard global data protection frameworks. These choices are respected and enforced across our store:

Framework of Rights

Statutory Right Operational Meaning & Choice
Right to Be Informed / Know The right to receive clear, transparent notice regarding whether your personal information is being processed, why it is being collected, and who receives it.
Right to Access The right to request a comprehensive summary or confirmation of the personal data we hold about you.
Right to Rectification / Correct The right to demand that inaccurate, outdated, or incomplete data within your profile be immediately corrected or amended.
Right to Erasure or Blocking The right to request that your personal information be deleted or permanently suspended from our processing systems, subject to lingering statutory retention rules.
Right to Object / Opt-Out The right to withdraw your consent from data processing entirely, including profiling or direct automated marketing communications.
Right to Data Portability The right to obtain a secure, structured, electronic copy of your data for seamless transfer to another platform.

To exercise any of these privileges, or to designate an authorized legal agent to file a request on your behalf, please contact our Data Compliance representative using the direct channels provided in Section 12. We do not discriminate, penalize, or alter your access to our premium wellness essentials if you choose to exercise your statutory privacy rights.

11. Complaints

If you believe that our handling of your personal information infringes upon your statutory data rights, please contact our team directly so we can address your concerns immediately.

If we cannot reach a resolution, you retain the absolute legal right to appeal our decision or lodge an official regulatory complaint with your native data privacy authority:

  • In the Philippines: You may file a formal case or report directly to the National Privacy Commission (NPC).

  • In the EEA/UK: You may appeal directly to your regional Data Protection Authority (DPA) or Information Commissioner's Office (ICO).

12. Contact Node

Should you have any precise questions about our operational privacy practices, this policy, or wish to formally execute your legal rights, please contact us via our dedicated regulatory compliance channels:

  • Electronic Node: hi@her-essentials.com

  • Physical Head Office:

    her® 

    KMM Marcena Trading

    78-C Scout De Guia Street, Barangay Laging Handa

    Quezon City, Metro Manila, 1103

    Philippines