Privacy Policy
Your privacy matters to us
This Privacy Policy explains how Laherba, s.r.o. collects, uses, stores and shares personal information when you visit laherba.co.uk, contact us or place an order.
We process personal information in accordance with applicable data protection law, including the EU GDPR and, where applicable, the UK GDPR and the Data Protection Act 2018.
Last updated: 14 September 2026
Your information is used only where there is a legitimate reason to process it.
You can exercise your data rights and unsubscribe from marketing at any time.
laherba@laherba.co.uk
1. Who Is Responsible for Your Personal Information?
The controller responsible for processing your personal information through this Website is:
Laherba, s.r.o.
Korunní 108
101 00 Prague 10
Czech Republic
Company Registration No.: 11836172
Email: laherba@laherba.co.uk
Website: www.laherba.co.uk
Because Laherba, s.r.o. is established in the Czech Republic, the EU GDPR applies to our processing as an EU-established controller. UK data protection law may also apply when we offer goods or services to individuals in the United Kingdom.
2. What Personal Information We Collect
Depending on how you interact with La Herba, we may process:
- Identity information: name and surname.
- Contact information: email address, telephone number, billing and delivery address.
- Order information: products ordered, order number, price, delivery method, payment status and transaction details.
- Account information: login and customer account information where you create an account.
- Communication information: messages you send to us by email, contact form, telephone, WhatsApp or other communication channels.
- Technical information: IP address, device and browser information, security logs, cookie identifiers and information about how the Website is used.
- Marketing information: newsletter subscription status, consent records and communication preferences.
We do not ask you to provide special-category personal data through our Website or customer-support channels. Please avoid including unnecessary sensitive personal information in messages sent to us.
3. Why We Use Your Personal Information
| Purpose | Information used | Lawful basis | Typical retention |
|---|---|---|---|
| Processing and delivering your order | Identity, contact, order and transaction information | Performance of a contract | For the contract and afterwards where required for accounting, tax or legal purposes |
| Customer service | Identity, contact, order and communication information | Contract performance and/or legitimate interests | Normally for the duration of the matter and a reasonable period afterwards |
| Accounting and legal compliance | Order, billing, payment and transaction records | Legal obligation | For the period required by applicable accounting, tax and other laws |
| Website security and fraud prevention | Technical, transaction and security information | Legitimate interests and, where applicable, legal obligations | Only for as long as reasonably required for security and fraud-prevention purposes |
| Newsletter and direct marketing | Email address, marketing preferences and subscription records | Consent or another lawful basis permitted by applicable electronic-marketing rules | Until you unsubscribe, withdraw consent or we no longer have a lawful reason to contact you |
| Analytics and website improvement | Cookie, device and usage information | Consent where required | According to the relevant cookie or analytics retention period |
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and whether your rights and interests override them.
4. Where Your Information Comes From
Most personal information is provided directly by you when you:
- Place an order.
- Create or use a customer account.
- Subscribe to our newsletter.
- Contact us.
- Change your cookie preferences.
We may also receive limited information from payment providers, delivery companies, fraud-prevention services and other providers involved in completing your transaction or operating the Website.
5. Who We Share Personal Information With
We do not sell your personal information.
We disclose information only where necessary for operating the Website, fulfilling orders, complying with law or providing services you request.
Recipients may include:
- Delivery and logistics providers such as postal services, couriers and collection-point operators.
- Payment providers such as Comgate and other payment methods offered at checkout.
- E-commerce and IT providers providing our shop platform, hosting, security, technical support and email infrastructure.
- Accounting and professional advisers where required for accounting, tax, legal or compliance purposes.
- Analytics and advertising providers where you have allowed the relevant cookies or technologies.
- Public authorities where disclosure is required by law.
These providers receive only the information reasonably necessary for the relevant purpose and are required to handle personal information in accordance with applicable data protection law.
6. International Data Transfers
Laherba, s.r.o. is established in the Czech Republic and works with service providers that may operate in different countries.
Where personal information is transferred internationally and data protection law requires additional safeguards, we use an appropriate legal transfer mechanism. This may include:
- An applicable adequacy decision or adequacy regulation.
- Approved contractual safeguards.
- Another transfer mechanism permitted by applicable law.
We also take reasonable steps to ensure that service providers protect personal information appropriately.
7. Marketing Communications
We may send you marketing emails where you have given valid consent or where another lawful electronic-marketing exception applies, such as the permitted customer “soft opt-in” where its legal requirements are satisfied.
You can stop receiving marketing communications at any time by:
- Using the unsubscribe link in a marketing email.
- Emailing us at laherba@laherba.co.uk.
Opting out of marketing does not affect service communications that are necessary for an order, account or customer-support request.
8. Cookies and Similar Technologies
Our Website uses cookies and similar technologies for functions such as shopping-cart operation, security, preferences, analytics and, where permitted, personalised content or advertising.
Essential cookies may be used without consent where they are necessary for the Website to function.
Non-essential cookies are used according to your cookie choices and applicable law. You can review or change your preferences through the Cookies settings available on the Website.
Further details are available in our Cookie Policy.
9. How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, contractual and dispute-resolution requirements.
Certain accounting and transaction records may need to be retained for several years and, for some categories of documents, applicable law may require retention for up to 10 years.
Marketing information is normally retained until you unsubscribe, withdraw consent or we determine that there is no longer an appropriate reason to retain it.
We may retain limited suppression information after an unsubscribe request so that we can respect your preference not to receive future marketing.
10. Your Privacy Rights
Depending on the circumstances and applicable law, you may have the following rights:
Ask whether we process your information and request a copy.
Ask us to correct inaccurate or incomplete information.
Ask us to delete information where the legal requirements apply.
Ask us to limit certain processing in appropriate circumstances.
Receive eligible information in a structured, machine-readable format.
Object to certain processing based on legitimate interests or to direct marketing.
Withdraw consent at any time where processing relies on consent.
Raise a concern with us or with the relevant data-protection authority.
To exercise a privacy right, contact: laherba@laherba.co.uk .
We may need to verify your identity before acting on certain requests.
11. How We Protect Your Information
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.
Access to personal information is limited to people and service providers who need it for legitimate business or legal purposes.
No online system can guarantee absolute security, but we review our processes and service providers with data protection and security in mind.
12. Questions and Complaints
If you have a question or concern about the way we process your information, please contact us first so that we can investigate the matter.
Information Commissioner's Office
If UK data protection law applies to the processing and you believe your rights have not been respected, you may also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk
As Laherba, s.r.o. is established in the Czech Republic, rights under EU GDPR may also be enforceable through the competent EU supervisory authority where applicable.
13. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technology, processors or legal obligations change.
The current version will always be published on this page together with its latest update date.