Privacy policy

Who handles your information

Pharmatura UG (haftungsbeschränkt) operates HAVN and is responsible for the personal information described here. Use the privacy request form to ask about your information or exercise your privacy rights.

Information we receive

You provide your name, email, delivery and billing addresses, and any phone number you enter when you create an account or order. We keep account records, cart contents, purchases, payment references, subscription details and the messages you send us to operate the store and handle your requests.

If you request email updates, we record the contact details you submit, your signup source, and the consent wording and time.

Your browser sends technical information, including your IP address and request details, so the website can respond. Cookies connect your visits to your cart, account and store preferences.

Why we use it

We use account and order information to carry out your purchase, manage recurring deliveries, provide support and process refunds. These uses are necessary to perform our contract with you or take the steps you request before a purchase.

We process records needed to meet legal obligations, including accounting and tax requirements. Our legitimate interests include protecting accounts, preventing misuse and investigating payment or delivery problems. Optional promotional messages depend on your consent, which you can withdraw through the privacy request form without affecting your purchases.

Required checkout fields are needed to process and deliver your order. You can browse without creating an account or signing up for promotional messages.

Payments, deliveries and email

Our Medusa store holds account, order and subscription records. Stripe processes payments and recurring billing through its hosted payment page. We send Stripe your email, a customer reference and payment details such as the amount and currency. Card numbers are entered with Stripe; HAVN does not receive them.

We receive payment and subscription status from Stripe. For fulfillment, our team submits the product quantities and delivery details to Supliful, whose fulfillment and delivery providers need that information to send your order. An internal order alert also contains your contact and delivery details.

When we send account and order emails, Resend processes the recipient address and message contents. These service messages are separate from promotional signup requests.

Operating from Germany and fulfilling US orders involves processing information in more than one country, including the United States. Contact us for information about the providers and transfer arrangements that apply to your data.

Cookies and tracking

The storefront uses cookies for cart contents, sign-in, account verification, secure order receipts, page caching, country selection and language preferences. Cart and sign-in cookies last up to seven days; verification, receipt and cache cookies last up to one day. Country and language preferences can last up to one year, and a sign-in return cookie lasts up to one hour. Cookies can be renewed or removed when you use the relevant feature.

This storefront does not currently run advertising pixels or optional audience analytics. We do not use it to sell personal information or share it for cross-context behavioral advertising. Browser Do Not Track signals do not change the essential store functions described above. Stripe's hosted payment page has its own privacy and cookie information.

You can remove or block cookies in your browser. Doing so can empty your cart, sign you out or prevent checkout from working. Use the privacy request form to ask about your information or withdraw promotional consent.

Keeping information

Retention depends on the record and its purpose: whether an account or subscription is active, whether an order or support request is unresolved, and whether accounting, tax or legal requirements require us to keep it. Removing browser cookies does not delete account or order records.

Ask us about the records linked to you through the privacy request form. A deletion request does not override records we must retain by law; we will explain any applicable exception when responding.

Your rights

Depending on the law that applies, you can request access to your information, corrections, deletion, a portable copy, or restrictions on its use. You can object to processing based on legitimate interests and withdraw consent for processing that relies on it. Withdrawal does not affect processing that was lawful before you withdrew consent.

US state law can also provide rights to opt out of sale, targeted advertising or certain profiling, limit some uses of sensitive information, and appeal a denied request. We do not penalize you for exercising an applicable privacy right. An authorized representative can contact us on your behalf; we may need to verify your identity or their authority before releasing or changing records.

Send requests and appeals through the privacy request form. You can also complain to the data protection authority responsible for your place of residence or work, or where you believe an infringement occurred. These rights are subject to the conditions and exceptions in applicable law.

Children and policy updates

HAVN's store is intended for adults. Please do not send children's personal information or medical records through our forms. Contact us if you believe a child has submitted personal information.

Updates to this policy appear here with a revised date. Material changes will be identified on this page, with further notice or consent where required before the changed use begins.