Privacy Policy
What personal information we collect, why we hold it, who we share it with, and the rights you have over it.
Privacy policy — last updated: 27 August 2026
This policy explains what personal information Her Birkin Bags collects, why, who we share it with, and what rights you have over it. It is written to be read, not to be survived.
Who this privacy policy covers
Her Birkin Bags is registered in San Diego, California under company number CSDHBB901342027, at 7007 Friars Rd, San Diego, CA 92108, United States. We are the data controller for the information described here.
Contact us about anything in this policy by email at sales@herbirkinbags.com, by telephone on +1 (614) 547 3596, on WhatsApp at +31 97005035146, or by post at Her Birkin Bags, 7007 Friars Rd, San Diego, CA 92108, United States.
What we collect, and why
| Information | Why we hold it | Lawful basis |
|---|---|---|
| Name, delivery and billing address, email, telephone | To take payment, ship your order, clear customs and contact you about it | Performance of a contract |
| Order history and correspondence | To handle returns, warranty claims and questions about past purchases | Performance of a contract; legal obligation |
| Identity documents, where requested on higher-value orders | Fraud prevention and anti-money-laundering checks | Legal obligation; legitimate interests |
| Payment details | Handled entirely by our payment provider — we never see or store full card numbers | Performance of a contract |
| Website usage and device information | To keep the site working, secure and reasonably fast | Legitimate interests |
| Analytics and marketing cookies | To understand how the site is used, where permitted | Consent |
| Email address, if you subscribe | To send you new arrivals and occasional notes | Consent |
We do not buy personal data, and we do not sell yours.
Who we share it with
- Payment providers — our card payment processor, our bank where you pay by wire transfer or direct deposit, and our cryptocurrency payment processor where you pay in BTC, ETH, USDT, USDC or BCH. They receive your payment and billing details directly and act as their own controllers for that data.
- Couriers — PostNL, Prime Transport and UPS. They receive your name, address, telephone number and email so they can deliver and, where relevant, contact you.
- Customs authorities — for international shipments we are legally required to declare the recipient’s name and address, and the nature and value of the goods. For UK deliveries we also declare and pay the import VAT and duty ourselves, which involves passing your details to HM Revenue & Customs through our carrier.
- Our hosting and technology providers — Hostinger and the plugin and analytics services this site runs on, who process data on our instructions.
- Professional advisers and authorities — accountants, insurers and lawyers where necessary, and law enforcement where we are legally required to.
Where your information goes
We operate from the United States. If you are in the United Kingdom or the European Economic Area, buying from us necessarily involves transferring your personal information outside the UK/EEA so that we can take payment, ship to you and account for the sale.
Where we make those transfers we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses. You can ask us for details of the safeguards in place.
How long we keep it
- Order and transaction records — seven years from the end of the tax year in which the sale was made, because tax law requires it.
- Correspondence — three years from your last contact with us.
- Marketing consent — until you withdraw it.
- Identity verification documents — five years from the end of our business relationship with you, then deleted.
Cookies
Some cookies are strictly necessary — they remember what is in your bag and keep you logged in, and the site cannot function without them. Anything beyond that, including analytics and any advertising measurement, is set only if you agree.
You can clear or block cookies in your browser at any time. Blocking the necessary ones will break checkout.
Your rights
If you are in the UK or EEA, you have the right to ask us for a copy of your personal information; to have it corrected; to have it deleted; to restrict or object to how we use it; to receive it in a portable format; and to withdraw consent at any time where consent is what we relied on.
If you are a California resident, you have the right to know what personal information we collect and disclose, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under California law.
To exercise any of this, email sales@herbirkinbags.com. We will respond within one month. We may need to verify who you are first — for an account holding delivery addresses and order history, that protects you.
Some requests we cannot fully honour: we cannot delete transaction records we are legally required to keep, and we will tell you plainly when that applies.
Complaints
Please raise anything with us first at sales@herbirkinbags.com — most things are a misunderstanding we can fix quickly.
If you are not satisfied, you can complain to the data protection regulator where you live. In the United Kingdom that is the Information Commissioner’s Office (ico.org.uk). In the EEA it is your national supervisory authority.
Changes to this privacy policy
If we change this privacy policy materially, we will update the date at the top. Where a change affects how we use information you have already given us, we will tell you directly. Our Legal page indexes every policy, and our Terms & Conditions govern the sale itself.