Privacy Policy
LaHerba.co.uk
Effective Date: November 20th 2025
1. Introduction
This policy explains how Laherba, s.r.o. (referred to as "we," "us," or "Controller") processes the personal data of customers from the United Kingdom (UK) through the website www.laherba.co.uk. We ensure that your personal data is processed in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
2. Who We Are (Controller)
Name: Laherba, s.r.o.
Registered Office: Korunní 108, 101 00 Prague, Czech Republic
Company Reg. No. (IČO): 11836172
Contact Person/Email: laherba@laherba.co.uk
3. What Data We Collect and Why
We collect and process data only to the extent necessary to achieve specific, legitimate purposes:
| Purpose of Processing | Categories of Personal Data | Lawful Basis (UK GDPR) | Retention Period |
|---|---|---|---|
| Order Processing and Delivery | Name, surname, shipping address, email, phone number, order details. | Performance of a contract (Art. 6(1)(b)) | During the term of the contract and 10 years thereafter for tax and accounting compliance. |
| Customer Support and Communication | Name, email, content of communication. | Legitimate Interest (Art. 6(1)(f)) | For the duration of the communication and a maximum of 1 year afterwards. |
| Marketing and Newsletter | Email address (only if you have subscribed). | Consent (Art. 6(1)(a)) | Until consent is withdrawn (opt-out). |
| Compliance with Legal Obligations | Billing data, order records, IP address upon purchase. | Compliance with a legal obligation (Art. 6(1)(c)) | As required by relevant legal regulations (e.g., tax laws). |
4. Recipients and Data Transfers
We do not sell your personal data to third parties. We only provide it to those entities necessary for fulfilling your order and operating the e-shop (Processors).
These include:
-
Delivery Companies: Royal Mail, FedEx, Packeta – for delivering goods.
-
Payment Service Providers: Comgate – for processing payments.
-
Accounting and Tax Firms: For meeting legal obligations.
-
IT Service Providers: Hosting, CMS platform, security.
As our company is based in the Czech Republic (EU), data transfer between us and the UK is based on the Adequacy Regulations, which ensures the protection of personal data at an equivalent level.
5. Your Rights Under UK GDPR
As a data subject, you have the following rights:
-
Right to Access – to confirm whether we process your data and access it.
-
Right to Rectification – to correct inaccurate or incomplete data.
-
Right to Erasure – to request deletion of data no longer necessary or upon withdrawal of consent.
-
Right to Restriction – to limit processing in certain cases (e.g., dispute over accuracy).
-
Right to Data Portability – to receive your data in a machine-readable format.
-
Right to Object – to processing based on legitimate interests.
-
Right to Withdraw Consent – at any time where processing is based on your consent.
To exercise any of these rights, please contact us at info@laherba.co.uk.
6. Complaints
If you believe your data rights have been violated, you can lodge a complaint with:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: www.ico.org.uk
7. Cookies
Our website uses cookies to enhance user experience and analyse traffic. You are informed of this via a cookie banner and can choose to grant or decline consent for non-essential cookies. Details are available in our [Cookie Policy].
8. Changes to the Privacy Policy
We may update this policy from time to time. Any changes will be posted on this page. Please check regularly for updates.