Privacy policy

Last updated: 22 July 2026

This policy explains how we collect, use, and protect your personal information when you shop at HerpesTest.co.uk, in line with the UK GDPR and the Data Protection Act 2018.

Who we are

The data controller responsible for your information is Nordic Wave LLC (6001 Menaul Blvd NE, Albuquerque, NM 87110, USA). As we are based outside the UK and offer goods to customers in the UK, we handle your personal data in accordance with the UK GDPR. For any privacy question or request, email hello@herpestest.co.uk.

What we collect

  • Contact and order details — your name, email, delivery address, and order history.
  • Payment information, processed securely by our payment providers. We do not store your full card details.
  • Technical and usage data — device information and how you use the site, collected via cookies.

We do not ask you to enter your test result anywhere on this website. Your result stays with you.

How we use your data, and our lawful bases

  • To process your order — taking payment, arranging delivery, and providing support (performance of a contract).
  • To meet legal obligations — such as tax and record-keeping (legal obligation).
  • To improve and secure the site, and for any analytics or marketing — only where you have given consent, which you can withdraw at any time (consent).

Who we share it with

We share personal data only with the service providers we need to run the store, including our ecommerce platform (Shopify), our payment providers, and the fulfilment and delivery partners who pack and ship your order. We never sell your personal data.

International transfers

Because we operate internationally, your data may be processed outside the UK, including in the United States and the EU/EEA. Where that happens, we rely on appropriate safeguards, such as the relevant UK transfer mechanisms, to protect it.

How long we keep it

We keep personal data only as long as necessary for the purposes above, or as required by law. For example, order and tax records are typically kept for several years.

Your rights

You have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability. To exercise any of these, contact us using the details above. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

We use cookies as described in our Cookie Policy, where you can manage your preferences.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date above.