Privacy Policy
We collect as little as we can, never sell your data, and use it mainly to get your order to you.
Who we are
What we collect
- Order information: name, shipping and billing address, email, phone number and the items you order.
- Payment information: card payments are handled by our payment processor. We do not see or store your full card number.
- Newsletter: your email address, only if you choose to subscribe.
- Technical data: an essential cart cookie that remembers your basket, and standard server logs (including IP address) kept briefly for security and fraud prevention.
- Analytics data: with your consent, we use Google Analytics to understand how the store is used (pages viewed, products viewed, items added to cart, purchases). Your IP address is anonymized.
- Advertising data: with your consent, we use Google Ads and the Meta (Facebook) pixel to measure our advertising and, where applicable, to show you more relevant ads on other platforms. These set advertising cookies and share limited event data (such as page and purchase events) with Google and Meta. If you reach the store from one of our ads, we also store the ad click ID in a cookie (
_hco_click, 90 days) so we can tell that the ad led to your order.
Analytics and advertising run only through our cookie consent banner. In the EU/EEA they are off until you opt in; in the United States they run on an opt-out basis and you can reject them at any time. We honor the Global Privacy Control (GPC) and "Do Not Track" browser signals: if your browser sends one, we treat it as an opt-out of the "sale" or "sharing" of your personal information and of targeted advertising. The Meta pixel does not load, no personalized advertising signals are sent, and you are not added to advertising or remarketing audiences. We do continue to measure whether one of our own ads led to a purchase. You can switch that off as well, and manage analytics, on Your Privacy Choices.
Why we use it
Who we share it with
- Payment processing (e.g. Stripe) to take your payment.
- Shipping & fulfillment (e.g. DHL, and our fulfillment partner) to pack and deliver your order.
- Email / newsletter (our email service provider) to send messages you subscribed to.
- Analytics & advertising (Google and Meta) to measure how the store and our ads perform. Cookie-based analytics and advertising run only if you allow them in our consent banner. Separately, when an order follows a click on one of our own ads, we report that order to Google from our own order records, so that we can tell which ads work even when a browser blocks our measurement scripts. That report contains the order number, the ad click ID and the order value; your email address is included only in hashed form and only if you have allowed advertising, never when you have opted out or sent a Global Privacy Control signal.
- Hosting & infrastructure to operate the website.
We may also disclose information where required by law. We do not sell or rent your personal information. When you allow advertising cookies, we share limited information with Google and Meta for measurement and advertising, which may be considered "sharing" for cross-context behavioral advertising under California law. You can turn this off at any time by rejecting advertising cookies in our cookie banner or by sending a Global Privacy Control signal.
Cookies
- Strictly necessary: always on. Includes the essential cart cookie so your basket survives page loads. These cannot be switched off.
- Analytics: Google Analytics cookies that measure how the store is used, with your IP address anonymized.
- Advertising: Google Ads and Meta pixel cookies that measure our advertising and can be used to show you more relevant ads elsewhere, plus the
_hco_clickcookie that stores the ad click ID for 90 days when you arrive from one of our ads, so we can attribute an order to that ad.
In the EU/EEA, analytics and advertising cookies are off until you opt in. In the United States they run on an opt-out basis and you can reject them at any time. You can change your choices whenever you like using the "Manage preferences" option in the banner or on Your Privacy Choices. If your browser sends a Global Privacy Control or "Do Not Track" signal, we switch off personalized advertising and the Meta pixel automatically and treat the signal as an opt-out of "sale" and "sharing"; measurement of our own ads continues unless you switch it off. Our fonts are self-hosted, so loading the site does not send your data to font CDNs.
How long we keep it
Your privacy rights
California (CCPA/CPRA): you have the right to know, delete, and correct your information, and to opt out of its "sale" or "sharing". Hörner does not sell your personal information. If you allow advertising cookies, we do "share" limited information with Google and Meta for cross-context behavioral advertising, and you can opt out at any time by rejecting advertising cookies in our cookie banner or by sending a Global Privacy Control signal. You may also contact us to exercise any right, and we will not discriminate against you for exercising your rights.
Other US states (including Virginia, Colorado, Connecticut, Texas and others): you have comparable rights, which you can exercise the same way.
To make a request, email [email protected] with "Privacy request" in the subject. We may need to verify your identity before acting. You can also authorize an agent to act for you.
Do Not Track & Global Privacy Control: we honor GPC and "Do Not Track" browser signals. When we detect one, we treat it as an opt-out of the "sale" or "sharing" of your personal information and of targeted advertising: the Meta pixel does not load, no personalized advertising signals are sent, and you are not added to advertising or remarketing audiences. Measuring whether one of our own ads led to a purchase continues, using the order number, the ad click ID and the order value, and Google processes this under restricted data processing. Because that measurement comes from our own order records rather than from your browser, switching off advertising does not remove it; what it does remove is your email address, which we then never share with Google in any form. You can manage analytics and advertising, and reach us to exercise any right, on Your Privacy Choices.
Children
Where your data is processed
Security
Changes to this policy
Last updated: July 2026. Hörner GmbH, Dresden, Germany.