Privacy policy

This Privacy Policy explains how ARVFORM, a trading name of HE4L LTD (Company No. 16250783) ("we", "us", "our"), collects, uses and protects your personal data when you visit our website or place an order. We process personal data in accordance with the EU General Data Protection Regulation (GDPR). Our store is powered by Shopify.

Information we collect

Depending on how you use our site, we may collect: contact details (name, billing and delivery address, email, phone number); order and transaction details; payment confirmation (your full card number is processed by our payment providers and never stored by us); account details if you create an account; communications you send us; and technical data such as your device, browser, IP address and how you interact with the site, collected through cookies and similar technologies.

How we collect it

We collect information directly from you when you order or contact us, automatically through your use of the site, and from service providers who help us operate the store.

How we use your information

We use your data to process and deliver your orders, manage your account, provide customer support, prevent fraud and keep the site secure, meet our legal obligations, and — where you have opted in — send you marketing. Our lawful bases are performance of our contract with you, our legitimate interests in running the business, compliance with legal obligations, and your consent for marketing.

How we share your information

We share data only with the providers who help us run the store — our e-commerce platform (Shopify), payment processors, and delivery carriers — and where required by law or to protect our rights. We never sell your personal data.

Relationship with Shopify

Our store is hosted by Shopify, which processes personal data about your use of the site to provide and improve the service. Your information may be transmitted to and processed by Shopify and its sub-processors. You can read more in the Shopify Consumer Privacy Policy.

Third-party links

Our site may link to websites we do not operate. We are not responsible for their privacy practices, and we encourage you to review their policies before sharing your information.

Children's data

Our site is not intended for children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with their data, contact us and we will delete it.

Security and retention

We use appropriate technical and organisational measures to protect your data, though no method of transmission is completely secure. We keep your personal data only for as long as we need it to provide our services, meet legal and accounting obligations, and resolve disputes.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw marketing consent at any time. To exercise any of these, email support@arvform.com.

Complaints

If you have a concern about how we handle your data, please contact us first. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

International transfers

Where your data is transferred outside the European Economic Area, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses.