Privacy Policy

HerCreate ("HerCreate", "we", "us") operates hercreate.com. We respect your privacy, and this policy explains what we collect, why, and what you can do about it.

If you only read one section, read section 4 — it lists every company that touches your data.

1. Who we are

For the purposes of the EU and UK General Data Protection Regulation, HerCreate is the data controller of the personal data described in this policy.

Controller: HerCreate Address: 30 N Gould St Ste R Sheridan, WY 82801 USA Contact: privacy@hercreate.com

2. What we collect

Information you give us

• Account information — your name, email address, and a password (stored hashed, never in plain text).
• Order information — the products you bought, order number, transaction ID, and the country you purchased from.
• Support correspondence — the content of emails, tickets, and messages you send us.
• Newsletter sign-up — your email address, and the date and source of consent.

Information collected automatically

• Server logs — IP address, browser type, operating system, referring page, and the date and time of each request.
• Usage data — pages viewed, downloads initiated, and licence key activations across WordPress, Canva, and other product types.
• Cookies — see section 7.

What we never collect

We do not receive, process, or store your full card number, CVV, or bank details. Payment data is captured directly by our Merchant of Record and never passes through our servers. We see only the last four digits of your card, your billing country, and the transaction ID.

3. Why we collect it, and on what legal basis

What we do	Why	Legal basis (GDPR)
Create and maintain your account	To give you access to your downloads	Performance of a contract
Process orders, licenses, refunds	To sell you a product	Performance of a contract
Send transactional emails (receipts, license keys, renewal reminders)	You bought something	Performance of a contract
Provide support	To answer your questions	Performance of a contract
Send marketing emails and newsletters	To tell you about new products	Consent — withdrawable at any time
Analytics and site improvement	To understand what works	Legitimate interests
Fraud prevention and chargeback defence	To protect the business	Legitimate interests
Tax and accounting records	Because the law requires it	Legal obligation

We do not use automated decision-making or profiling that produces legal effects concerning you.

4. Who we share your data with

We do not sell, rent, or trade your personal information. Ever.

We share data only with the following processors, and only as much as each needs to do its job:

Processor	Purpose	Data shared
Paddle.com Market Ltd	Merchant of Record, payments, tax, invoicing	Name, email, billing country, order details
Verifone / 2Checkout	Merchant of Record, payments, tax, invoicing	Name, email, billing country, order details

Each processor is bound by a data processing agreement. Some are located outside your country, including outside the EEA and UK; where that is the case, transfers are covered by Standard Contractual Clauses or an equivalent adequacy mechanism.

We will also disclose information where legally compelled — in response to a subpoena, court order, or lawful government request — or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Business transfers

If HerCreate is acquired, merged, or ceases operating, your information may be transferred as a business asset. You will be notified by email before any such transfer, and any acquirer will remain bound by this policy, or you will be given the opportunity to delete your data first.

6. How long we keep it

• Account and order data: for as long as your account is active, then for 7 years after your last transaction, as required for tax and accounting purposes.
• Support correspondence: 3 years.
• Marketing consent records: until you unsubscribe, then a suppression record indefinitely so we do not email you again.
• Server logs: 90 days.

7. Cookies

A cookie is a small text file stored by your browser.

We use:

• Essential cookies — to keep you logged in and to keep your cart. These cannot be disabled, and no consent is required for them.
• Analytics cookies — to understand how the site is used. These are set only after you consent.
• Marketing cookies — set by advertising and social platforms if you consent.

You can withdraw consent at any time through the cookie settings link in our footer, or by clearing cookies in your browser. Refusing non-essential cookies does not affect your ability to buy or download anything.

We do not display third-party advertising on hercreate.com.

8. Your rights

Wherever you live, you may ask us to:

• Access the personal data we hold about you
• Correct anything inaccurate
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Restrict or object to processing
• Withdraw consent for marketing at any time

If you are in the EU or UK, these rights come from the GDPR, and you may also lodge a complaint with your national supervisory authority.

If you are in California, the CCPA and CPRA give you the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined, and we have not done so in the preceding twelve months. We will not discriminate against you for exercising any right.

To exercise any right, email privacy@hercreate.com. We respond within 30 days, free of charge. We may ask you to verify your identity before we act.

9. Security

We take reasonable measures to protect against unauthorised access, alteration, or destruction of personal data: encrypted connections (TLS), hashed passwords, restricted internal access, and regular review.

No system is perfectly secure. If a breach affects your personal data and poses a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of it.

10. Children

Our products are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, email privacy@hercreate.com and we will delete it.

11. Changes to this policy

We may update this policy. Material changes will be announced by email to registered users and posted here with a revised date. Continued use of the site after a change constitutes acceptance of the updated policy.

12. Contact

HerCreate
Privacy enquiries: privacy@hercreate.com
General support: support@hercreate.com
Registered address: 30 N Gould St Ste R Sheridan, WY 82801 USA