We're the only store that take your privacy seriously.
Privacy whitepaper & how we protect your data
Strong In-Transit Data Encryption
What we do
- All data is protected using TLS 1.3 encryption
- Secure HTTPS connection on every page
- Forward secrecy to prevent future decryption
- Protection against man-in-the-middle attacks
What this means for you
No one can intercept or read your information while it travels between your device and our servers.
Secure Data Storage Encryption
What we do
- AES-256 encryption for stored data
- Encrypted databases, backups stored on separate offshore servers, and server no-log policy
- Separate encryption keys per environment
- Automatic key rotation
What this means for you
Even if someone accessed our storage systems, your personal data — including billing and shipping details, transaction records, order information, and account data (name, email, password, etc.) — would remain unreadable.
Crypto & Bank Payment Privacy
What we do
- We do not store your name, transaction data, or transaction IDs on our system
- We don't store any of your payment details or transaction history directly on store servers
- Crypto funds move through operational wallets before internal allocation
What this means for you
While bank transactions may appear in your banking history, we do not store transaction details on our servers.
Internal Security & Key Management
What we do
- Encryption keys stored in Hardware Security Modules (HSM)
- Strict access control policies
- Regular automated key rotation
- Immediate key revocation if required
What this means for you
The digital "keys" that lock your data are protected in specialized secure physical hardware.
Confidential Server Infrastructure
What we do
- Secure offshore cloud infrastructure
- Hardware-based memory protection
- Isolated microservices architecture
- Continuous vulnerability monitoring
- We do not log IP addresses of customers
What this means for you
Your data is processed in protected offshore environments designed to prevent leaks — even from insiders — while ensuring maximum privacy and anonymity throughout the process.
Our Commitment to You
We believe privacy is a fundamental right — and not all competitors prioritize it equally.
We are committed to being transparent and discreet about:
- How we manage your data
- How we protect your privacy
- How we continuously improve our security systems
- Customers can request account deletion, which is processed within 14 days
As part of Herbee, we are heavily investing in advanced technologies that maximize your privacy even further.
Unlike many competitors, we do not rely on third-party platforms such as WordPress. Our systems are developed and maintained in-house by our dedicated development team to ensure full control over security and privacy standards.
Your trust matters.
Your data stays protected.