Privacy Notice

Last updated: May 3, 2026

1. Who We Are

S. H. Soaps ("we", "us", "our"), trading as NaturalFinds & Joy, is the data controller responsible for your personal data collected through this website and service.

2. Data We Collect

  • Account information — name, email address, login credentials.
  • Vendor profile data — business name, description, address, images, contact details.
  • Support messages — communications you send to us.
  • Usage data — pages visited, features used, device type, browser, IP address.

3. How We Use Your Data

  • Provide the service — account creation, vendor listings, map features, event management (legal basis: contract performance).
  • Customer support — responding to inquiries (legal basis: contract performance / legitimate interest).
  • Security & fraud prevention — protecting accounts and detecting abuse (legal basis: legitimate interest).
  • Product improvement — analysing usage patterns to improve the experience (legal basis: legitimate interest).
  • Marketing — sending updates about new features, only with your consent (legal basis: consent). You can opt out at any time.

4. Who We Share Data With

  • Paddle — our Merchant of Record, for processing payments, managing subscriptions, tax compliance, and invoicing.
  • Service providers — hosting, analytics, and support tools that process data on our behalf under strict agreements.
  • Professional advisers — legal and accounting professionals, where necessary.
  • Law enforcement — where required by applicable law.

5. Data Retention

We retain your personal data only as long as needed to provide the service and fulfil the purposes described above. When your account is closed, we delete or anonymise your data within 90 days unless retention is required by law.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data.
  • Restrict or object to certain processing.
  • Request portability of your data.
  • Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at sweetherbaliscy@gmail.com. We will respond within 30 days.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security reviews.

8. Cookies

We use essential cookies to keep you logged in and maintain session state. We may also use analytics cookies to understand how visitors interact with the site. You can manage cookie preferences through your browser settings.

9. Changes to This Notice

We may update this privacy notice from time to time. We will notify registered users of material changes via email.

10. Contact

Questions or concerns? Contact us at sweetherbaliscy@gmail.com.