Skip to content

Privacy policy

Last updated: 20 October 2026

This policy explains what personal information TELLU HIMA collects when you visit this website, place an order or contact us, how we use it, and the choices you have.

Who we are

TELLU HIMA sells Himalayan incense online and is responsible for the personal information described here. For any privacy question, write to hello@telluhima.com.

What we collect

  • Orders and delivery: your name, email address, delivery and billing address, a phone number if you give one, and the items you order.
  • Account: your name, email address, a password (stored only in hashed form), saved addresses and order history. If you sign in with Google, we receive your name and email address from Google; we never see your Google password.
  • Payment: payments are handled by PayPal. We do not see or store your card or PayPal login details. PayPal tells us whether the payment succeeded and gives us the details we need to record your order.
  • Messages: if you use the contact form, the topic, your name, your email address and your message.
  • Usage data, only if you accept analytics cookies: the pages you view, your approximate location, and device and browser details, collected through Google Analytics.
  • Technical data: your IP address and request logs, processed by our hosting provider to run and protect the site. Cloudflare Turnstile checks that forms are filled in by a person and may process your IP address and browser signals for that purpose.

How we use it

  • To take payment, deliver your order, send your order confirmation and give you support (to perform our contract with you).
  • To run your account and let you reset your password (to perform our contract).
  • To reply to your messages (our legitimate interest in answering you).
  • To keep the site secure and prevent abuse and fraud (our legitimate interest).
  • To keep the records that tax, accounting and other laws require (legal obligation).
  • To understand how the site is used and improve it, through Google Analytics (only with your consent).

We do not sell your personal information, and we do not use advertising or retargeting cookies.

Who we share it with

  • PayPal, to process your payment.
  • Cainiao and its delivery partners, who receive your name, delivery address and phone number so that your parcel can be delivered.
  • Resend, which sends our emails for us, such as order confirmations and password resets.
  • Hostinger, our hosting provider, which runs the website.
  • Supabase, which hosts our database, where your account, order and address details are stored.
  • Cloudflare, for the Turnstile check on forms.
  • Google, for Google Analytics (with your consent) and for Google sign-in if you choose to use it.

These providers receive only what they need to do their job. We may also disclose information where the law requires it.

International transfers

Our hosting and database providers and several of the services above operate in the United States and other countries, so your information may be processed outside the country where you live, including outside the UK, the European Economic Area and Switzerland. Where the law requires safeguards for such transfers, we rely on the mechanisms those providers offer, such as standard contractual clauses.

Cookies and similar technologies

We use a small number of cookies and browser storage items. The first group is essential and always on; the second is optional.

Essential

  • Login session (cookie): keeps you signed in. It expires after 14 days or when you log out.
  • Google sign-in check (cookie): used only while you sign in with Google, to protect that step. It expires after 10 minutes.
  • Shopping bag (browser storage): a reference and key to your bag, so it is still there when you come back.
  • Your cookie choice (browser storage): remembers whether you accepted or declined analytics.
  • Checkout: when you open the PayPal payment step, PayPal loads its own script and may set its own cookies, as described in PayPal’s privacy policy.

Analytics (only if you accept)

  • Google Analytics sets cookies named _ga and _ga_ followed by an identifier. They tell visitors and sessions apart and can last up to two years. If you decline, or later change your mind, Google Analytics is not loaded and these cookies are removed.

You can change your choice at any time with “Cookie settings” at the bottom of every page. You can also block or delete cookies in your browser settings, but the essential ones are needed to sign in and check out.

How long we keep it

We keep order records for as long as tax, accounting and other legal obligations require. Your account details are kept until you ask us to delete your account. Messages are kept for as long as needed to answer you and deal with any follow-up. Analytics data is kept for the period set in our Google Analytics account.

Your rights

Depending on where you live, including under the GDPR and UK GDPR and the privacy laws of Switzerland, Australia, New Zealand, Canada and some US states, you may have the right to access your information, correct it, delete it, restrict or object to how we use it, receive a copy of it, and withdraw consent at any time.

To use any of these rights, email hello@telluhima.com. We may ask you to confirm who you are first. You also have the right to complain to your local data protection authority.

Security

The site is served over HTTPS, passwords are stored in hashed form, and access to customer data is limited. No online service can be completely secure, so please choose a strong, unique password.

Children

This website is not aimed at children under 16, and we do not knowingly collect their personal information.

Changes to this policy

If we change how we handle personal information, we will update this page and the date at the top.

Contact

Questions about this policy or your information? Email hello@telluhima.com or use the contact page.