CART

PRIVACY POLICY

Last Updated: September 25, 2026

Headache Shop is operated by HIDDEN PROCESS Ltd.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit the Headache Shop website, create an account, place an order, contact us, or subscribe to our marketing communications.

1. Information We Collect

Depending on how you use the website, we may collect information including:

  1. your name;
  2. email address;
  3. telephone number;
  4. billing and delivery address;
  5. account information;
  6. order and transaction information;
  7. communications and enquiries sent to us;
  8. newsletter subscription status and consent records;
  9. IP address;
  10. browser and device information;
  11. website activity and technical logs;
  12. Cookie and similar technology information; and
  13. interactions with emails, such as delivery, opening, and link click information where such tracking is enabled.

Payment information may be processed directly by third party payment providers. We do not intentionally collect or store complete payment card details where those details are handled directly by the payment provider.

2. How We Collect Personal Information

We may collect personal information when you:

  1. create or use an account;
  2. place or manage an order;
  3. provide delivery or billing information;
  4. contact customer service;
  5. complete a form on the website;
  6. separately choose to subscribe to our newsletter;
  7. interact with our emails;
  8. browse or otherwise use the website; or
  9. communicate with us through other available channels.

Certain technical information may also be collected automatically through Cookies, server logs, analytics technologies, email tracking technologies, and similar systems.

3. How We Use Personal Information

We may use personal information to:

  1. process and fulfil orders;
  2. process payments and refunds;
  3. arrange shipping and delivery;
  4. provide customer service;
  5. create and administer user accounts;
  6. respond to enquiries;
  7. send transactional communications relating to orders or accounts;
  8. send newsletters and marketing communications where the user has separately provided appropriate consent;
  9. maintain records of newsletter consent and unsubscribe requests;
  10. improve our products, website, and services;
  11. understand website and email engagement;
  12. detect fraud, abuse, and security incidents;
  13. maintain the security and operation of the website;
  14. comply with legal and regulatory obligations; and
  15. establish, exercise, or defend legal rights where necessary.

4. Newsletter and Marketing Communications

Users may separately choose to subscribe to newsletters and marketing communications from Headache Shop.

Where consent is required, marketing communications will only be sent after the user has actively chosen to subscribe.

Agreement to the Terms of Use or this Privacy Policy does not, by itself, constitute consent to receive marketing communications.

We may retain information showing when and how a user subscribed so that we can maintain appropriate records of consent.

Users can withdraw their consent and unsubscribe from marketing emails at any time by selecting the unsubscribe link included in the email or contacting us directly.

Withdrawal from marketing communications will not affect transactional communications necessary for orders, account administration, customer service, or other services requested by the user.

5. Email Service Provider

We may use Brevo as an external service provider to manage email subscribers, marketing campaigns, automated communications, and transactional emails.

Where Brevo processes personal information on our behalf, information processed may include details such as:

  1. name;
  2. email address;
  3. contact attributes provided to us;
  4. IP address;
  5. date and time an email was sent;
  6. email delivery information;
  7. email opening information; and
  8. links clicked within an email.

Brevo may use technologies such as tracking pixels and tracked links to provide email delivery, analytics, security, and reporting functionality.

Where required by applicable law, we will provide appropriate notice or obtain consent before using non essential tracking technologies.

6. Cookies and Similar Technologies

Headache Shop may use Cookies and similar technologies to operate the website, remember preferences, maintain shopping cart functionality, support account login, improve website performance, analyse website usage, and support marketing functionality.

Cookies are small files stored on your browser or device.

You may control or disable Cookies through your browser settings or other consent controls made available on the website.

Disabling certain Cookies may affect the operation of some website functions, including shopping cart, account, login, or checkout functionality.

Where applicable, non essential analytics or marketing Cookies will be managed in accordance with relevant consent requirements.

7. Disclosure of Personal Information

We do not arbitrarily sell or disclose personal information to unrelated third parties.

We may disclose information where reasonably necessary to service providers that assist us in operating the website and providing services, including:

  1. payment processors;
  2. logistics and delivery providers;
  3. website hosting and infrastructure providers;
  4. email and marketing service providers, including Brevo;
  5. information technology and security providers;
  6. professional advisers; and
  7. other contractors that provide services necessary for our operations.

These service providers may process information only to the extent necessary to provide their services, subject to applicable contractual and legal requirements.

We may also disclose personal information where required by law, regulation, court order, judicial process, law enforcement request, or another competent authority.

8. Information Relating to Other People

If you provide personal information relating to another person, including the name, address, telephone number, or other delivery information of a recipient, you confirm that you are authorized to provide that information for the relevant purpose.

9. International Data Processing

Some of the service providers used to operate Headache Shop may process or store information outside the country in which you are located.

For example, email, cloud infrastructure, analytics, payment, or other technology providers may operate systems in different jurisdictions.

Where required, we take reasonable steps to ensure that personal information transferred to external service providers is handled in accordance with applicable privacy and data protection requirements.

10. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.

These measures may include access controls, password protection, encryption, firewalls, security monitoring, backups, and restrictions on access to personal information.

However, no internet based system or method of electronic storage can be guaranteed to be completely secure.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including order administration, customer service, accounting, legal compliance, dispute resolution, fraud prevention, and marketing consent records.

Retention periods may vary depending on the nature of the information and applicable legal requirements.

Where information is no longer required, we may securely delete or anonymise it.

12. Access, Correction and Other Privacy Requests

Subject to applicable law, you may contact us to request access to personal information we hold about you or request correction of inaccurate information.

Where applicable, you may also request deletion, restriction, withdrawal of consent, or exercise other rights available under relevant privacy laws.

We may need to verify your identity before processing certain requests.

13. Business Transfers

If HIDDEN PROCESS Ltd. or the Headache Shop business undergoes a merger, restructuring, acquisition, sale, transfer of assets, or similar change of control, personal information associated with the relevant business may be transferred as part of that transaction.

Where required by applicable law, appropriate notice will be provided and personal information will continue to be subject to applicable privacy protections.

14. Third Party Websites

The website may contain links to websites or services operated by third parties.

Those websites operate under their own privacy policies and practices. We recommend reviewing the privacy information provided by the relevant third party before providing personal information to them.

15. Changes to This Privacy Policy

HIDDEN PROCESS Ltd. may update this Privacy Policy from time to time to reflect changes to our services, technology, business operations, service providers, or legal requirements.

The latest version will be published on this website together with the date of the most recent update.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise a privacy right, or have concerns regarding the handling of your personal information, please contact:

HIDDEN PROCESS Ltd.
Email: headache.frequent.shop@gmail.com