Privacy Policy

The data controller is Hellstar World:

For any question about this policy, or to exercise any right described below, contact us using the details above. We reply to privacy requests within 30 days.

Information we collect

We only collect what we need to sell you something, deliver it, and keep the store working. In practice that falls into four groups.

1. Information you give us

• Order details — the name, billing address, shipping address, email address and phone number you enter at checkout.

• Account details — if you create an account, your email address, password (stored encrypted) and order history.

• Payment details — the payment method you choose. We do not receive or store your full card number. Card data is entered directly with our payment provider and we see only the last four digits and the result of the transaction.

• Communications — anything you send us by email or WhatsApp, including sizing questions, order issues, and any photos or details you choose to share.

• Marketing preferences — whether you have opted in to receive offers, and your discount code usage.

2. Information collected automatically

When you browse the site, we and our service providers record limited technical information:

• pages viewed, products viewed and the referring page or search term;

• approximate location derived from your IP address (country and region, not a street address);

• browser type, device type, operating system and screen size;

• the date and time of your visit.

We use WP Statistics, a self-hosted analytics tool that runs on our own servers. Unlike Google Analytics, the visit data it produces is stored on our infrastructure and is not shared with or sold to any advertising network. IP addresses are recorded in anonymised or hashed form. We use this data to understand which products and pages people actually want, and to fix what is broken.

3. Information from third parties

• Payment providers — confirmation that a payment succeeded or failed, and fraud-screening results.

• Shipping carriers — tracking events and delivery confirmation for your parcel.

We do not buy personal data from data brokers, and we do not use it to build advertising profiles.

4. Sensitive information

We do not ask for and do not want sensitive personal information (such as health data, precise geolocation, biometric data or government ID numbers). Please do not send it to us.

Cookies and similar technologies

A cookie is a small file your browser stores when you visit a site. We use a small number of them, and only for three purposes: keeping your cart working, keeping you logged in, and counting visits.

We do not use advertising or cross-site tracking cookies. There is no Facebook Pixel, no Google Ads tag and no third-party retargeting on this site. Because of that, we do not show a cookie consent banner for essential cookies — they are strictly necessary for the store to function, and non-essential tracking is not present.

You can block or delete cookies at any time in your browser settings. If you block essential cookies, the cart and checkout will stop working.

How we use your information

We will not use your information for automated decision-making that produces legal effects, and we do not carry out profiling for advertising.

Who we share your information with

We share personal data only with the service providers needed to run the store, and only for the purposes above. Each is bound by contract to protect it.

We may also disclose data where we are legally required to (for example, a valid court order or tax request), or to establish or defend legal claims.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months.

International transfers

We are based in the United States and our servers and service providers may store or process your data there. If you are in the European Economic Area or the United Kingdom, this means your data leaves your region. Where that happens, transfers are protected by appropriate safeguards — standard contractual clauses approved by the European Commission, or an equivalent lawful mechanism — together with the security measures described below.

How long we keep your information

When a retention period ends we delete or irreversibly anonymise the data.

How we protect your information

• The whole site runs over HTTPS/TLS, so data between your browser and us is encrypted in transit.

• Card payments are processed by a PCI-DSS-compliant payment provider; we never store your full card number on our servers.

• Access to customer data is limited to the small number of people who need it, protected by unique credentials and, where available, two-factor authentication.

• We keep WordPress, WooCommerce and all plugins updated, and run a web application firewall (Cloudflare) in front of the site.

No method of transmission or storage is perfectly secure. If a breach ever affects your rights, we will notify you and the relevant authority as required by law.

Your rights

Depending on where you live, you have some or all of the following rights over your personal data. To use any of them, email info@hellstarworld.com with enough detail for us to find your records. We will not charge you, and we will respond within 30 days.

If you are in the EU or UK (GDPR / UK GDPR):

• Access — get a copy of the data we hold about you.

• Rectification — correct anything inaccurate.

• Erasure — ask us to delete your data (“right to be forgotten”), subject to legal retention duties.

• Restriction — ask us to pause processing while a dispute is resolved.

• Portability — receive your data in a machine-readable format.

• Object — object to processing based on legitimate interests, including profiling.

• Withdraw consent — at any time, where we rely on consent (for example, marketing).

• Complain — lodge a complaint with your national data protection authority. In the UK, that is the Information Commissioner’s Office.

If you are a California resident (CCPA / CPRA):

• Right to know what personal information we collect, use, disclose and (if applicable) sell or share, and the categories of recipients.

• Right to delete personal information we hold about you.

• Right to correct inaccurate personal information.

• Right to opt out of the sale or sharing of personal information. We do not sell or share it, so there is nothing to opt out of — but you may still submit a request and we will confirm.

• Right to limit the use and disclosure of sensitive personal information. We do not collect sensitive personal information.

• Right to non-discrimination — we will not deny you service or charge you more for exercising your rights.

You may use an authorised agent to submit a request on your behalf. We honour the Global Privacy Control (GPC) browser signal as a valid opt-out request for the sale or sharing of personal information.

Marketing and how to opt out

If you opt in, we may email you or message you on WhatsApp about new drops, restocks and offers. Every marketing email has a one-click unsubscribe link, and you can reply STOP to any marketing WhatsApp message. Opting out of marketing does not stop transactional messages about an order you have placed.

Children’s privacy

This store is intended for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 16 (or under 13 in the United States, where that is the applicable threshold). If you believe a child has given us their data, contact us and we will delete it.

Links to other sites

Our site may link to third-party services such as 17track for parcel tracking, or to our social profiles. Those sites have their own privacy policies. We are not responsible for how they handle your data, so please read their policies before using them.

Changes to this policy

We may update this policy to reflect changes in our practices or in the law. When we do, we will change the “Last updated” date at the top, and for material changes we will post a notice on the site. Please check back occasionally.

How to contact us

For any privacy question, request or complaint:

If you are not satisfied with our response, you have the right to complain to your local data protection authority. We would appreciate the chance to resolve it first.