Privacy policy

1. Introduction

This Privacy Policy explains how lurevynx.shop collects, uses, stores and shares personal information when a person:

• Visits our website;

• Creates an account;

• Places or attempts to place an order;

• Contacts customer service;

• Requests a return or refund;

• Subscribes to marketing;

• Submits a review;

• Participates in a promotion; or

• Otherwise interacts with lurevynx.shop.

For the purposes of applicable UK data protection law, lurevynx.shop is the controller of the personal information described in this policy, except where another organisation acts as an independent controller.

Privacy questions and requests may be sent to info@lurevynx.shop.

2. Information We Collect

Depending on the customer’s interaction with the store, we may collect the following information.

Identity and Contact Information

This may include:

• Name;

• Billing address;

• Delivery address;

• Email address;

• Telephone number; and

• Customer account information.

Order and Transaction Information

This may include:

• Products viewed or purchased;

• Basket contents;

• Order number;

• Order date and value;

• Delivery method;

• Discount codes;

• Returns and refunds;

• Payment disputes;

• Customer-service correspondence; and

• Order preferences or instructions.

Payment Information

Payments may be processed through Shopify Payments or another authorised payment provider.

We may receive limited payment information, including:

• Payment status;

• Payment method type;

• Billing address;

• Transaction reference;

• Card brand; and

• Limited card information, such as the final digits.

Complete payment-card details are normally processed by the payment provider and are not directly stored by lurevynx.shop.

Device and Technical Information

This may include:

• Internet Protocol address;

• Browser type and version;

• Device type;

• Operating system;

• Approximate location;

• Time zone;

• Cookie identifiers;

• Pages viewed;

• Links selected;

• Referral source;

• Session information; and

• Security or diagnostic information.

Marketing and Preference Information

This may include:

• Marketing subscription status;

• Communication preferences;

• Cookie choices;

• Product interests;

• Promotion participation; and

• Interaction with marketing communications.

Customer Communications

We may collect information contained in:

• Customer-service emails;

• Reviews;

• Return requests;

• Complaints;

• Survey responses;

• Fraud or payment disputes; and

• Other communications.

Customers should not send sensitive personal information unless it is genuinely necessary to handle the request.

3. Sources of Information

We collect personal information:

• Directly from customers;

• Automatically through cookies, server logs and similar technologies;

• From Shopify;

• From payment providers;

• From delivery and fulfilment providers;

• From fraud-prevention providers;

• From analytics or advertising providers where permitted; and

• From authorities or other organisations where legally authorised.

4. How We Use Personal Information

We may use personal information to:

• Operate the website;

• Display products;

• Remember basket contents;

• Process orders;

• Verify and receive payment;

• Arrange fulfilment and delivery;

• Provide order and tracking updates;

• Process cancellations, returns and refunds;

• Respond to enquiries and complaints;

• Maintain customer accounts;

• Detect fraud and misuse;

• Protect website security;

• Enforce our Terms of Service;

• Maintain tax and accounting records;

• Improve products and customer experience;

• Measure store performance;

• Send permitted marketing;

• Comply with legal obligations; and

• Establish, exercise or defend legal claims.

5. Lawful Bases

Contract

We process information where necessary to:

• Take requested steps before a purchase;

• Accept and fulfil an order;

• Process payment;

• Deliver products;

• Send order updates;

• Handle returns and refunds; and

• Provide purchase-related customer service.

If required order information is not provided, we may be unable to process or deliver the order.

Legal Obligation

We may process information to comply with:

• Tax and accounting requirements;

• Consumer-protection law;

• Product-safety requirements;

• Court orders;

• Lawful authority requests; and

• Other regulatory duties.

Legitimate Interests

We may process information where necessary for legitimate interests that are not overridden by individual rights.

These interests may include:

• Fraud prevention;

• Website security;

• Customer-service management;

• Improving store performance;

• Maintaining business records;

• Managing legal claims; and

• Permitted marketing to eligible existing customers.

Consent

We rely on consent where required, including for:

• Optional analytics cookies;

• Advertising cookies;

• Personalisation technologies;

• Marketing communications where consent is required; and

• Other activities for which consent is requested.

Consent may be withdrawn at any time.

6. Shopify

Our store is hosted and supported by Shopify.

Shopify may process information required to provide:

• Website hosting;

• Checkout;

• Order management;

• Payment integrations;

• Security; and

• Customer account functionality.

Shopify may process certain information under its own privacy terms. Shopify’s consumer privacy information is available at:

https://www.shopify.com/legal/privacy/consumers

7. Sharing Personal Information

We may share information with:

Shopify

Shopify provides the ecommerce technology used to operate the store.

Payment Providers

Payment providers process transactions, refunds, security checks and payment disputes.

Fulfilment and Delivery Providers

Warehouses, fulfilment partners, postal operators and carriers receive information required to prepare and deliver orders.

Technology and Security Providers

Hosting, customer-support, fraud-prevention, storage, cybersecurity and technical providers may process information on our behalf.

Analytics and Advertising Providers

Where legally permitted and consistent with cookie choices, these providers may receive device and browsing information.

Professional Advisers

Accountants, insurers, auditors and legal advisers may receive information where reasonably necessary.

Authorities

Information may be disclosed where required by law or reasonably necessary to:

• Comply with legal process;

• Respond to a lawful authority;

• Investigate fraud;

• Protect legal rights; or

• Protect the safety of individuals.

Business Transfers

Relevant information may be disclosed if the business or its assets are reorganised, sold, merged or transferred, subject to appropriate safeguards.

8. Cookies

We use cookies and similar technologies to:

• Operate essential store functions;

• Remember basket contents;

• Enable checkout;

• Maintain security;

• Remember preferences;

• Measure performance;

• Analyse customer interactions; and

• Support permitted marketing.

Strictly necessary cookies may be used without consent where legally permitted.

Optional analytics, advertising and personalisation technologies will be subject to consent where required.

Customers may change their choices through the store’s cookie controls. Browser settings may also allow cookies to be deleted or blocked.

Blocking essential cookies may prevent parts of the store or checkout from functioning correctly.

9. Marketing Communications

We may send marketing emails where:

• The recipient has provided valid consent; or

• Applicable law allows the existing-customer soft opt-in for our own similar products.

Where the soft opt-in applies, we will:

• Have obtained the contact details directly;

• Use them in connection with a sale or genuine negotiation for a sale;

• Market only our similar products;

• Provide an opt-out when details are collected; and

• Include an unsubscribe method in every marketing message.

Customers may unsubscribe by selecting the link in a marketing email or contacting info@lurevynx.shop.

Marketing opt-out does not prevent necessary order, delivery, security or refund communications.

10. International Transfers

Shopify and other service providers may process personal information outside the United Kingdom.

Where required, international transfers will rely on an appropriate mechanism, such as:

• A UK adequacy regulation;

• The UK International Data Transfer Agreement;

• The UK Addendum to approved standard contractual clauses;

• Appropriate contractual and technical safeguards; or

• Another legally recognised mechanism.

Further information may be requested from info@lurevynx.shop.

11. Retention

We retain personal information only for as long as reasonably necessary.

Retention periods depend on:

• The nature of the information;

• The purpose of collection;

• The customer relationship;

• Tax and accounting requirements;

• Consumer-protection law;

• Fraud-prevention needs;

• Legal limitation periods; and

• The need to resolve complaints.

When information is no longer required, it will be deleted, anonymised or securely isolated, subject to legal and technical limitations.

12. Security

We use reasonable measures designed to protect information from:

• Unauthorised access;

• Accidental loss;

• Improper disclosure;

• Alteration;

• Destruction; and

• Misuse.

No online system is completely secure. Customers should use unique passwords, protect account credentials and report suspected unauthorised activity.

13. Automated Fraud Checks

Orders may be assessed by automated tools designed to detect fraud, payment risk or security threats.

These tools may consider:

• Transaction history;

• Device information;

• Delivery details;

• Payment signals; and

• Unusual ordering activity.

Where a solely automated decision produces a legal or similarly significant effect, we will provide any rights and safeguards required by law.

14. Individual Rights

Depending on the circumstances, individuals may have the right to:

• Access personal information;

• Correct inaccurate information;

• Request deletion;

• Request processing restrictions;

• Object to legitimate-interest processing;

• Object to direct marketing;

• Request eligible information in a portable format;

• Withdraw consent;

• Request information about transfer safeguards;

• Challenge certain automated decisions; and

• Complain to the Information Commissioner’s Office.

These rights are not absolute.

Requests should be sent to info@lurevynx.shop. We may request information reasonably necessary to verify identity.

We normally respond within one month, although the response period may be extended where legally permitted.

15. Complaints

Customers may contact us first so that we can investigate a privacy concern.

Individuals also have the right to complain to the UK Information Commissioner’s Office:

https://ico.org.uk/make-a-complaint/

16. Children

The store is not intended for independent use by children under 16.

We do not knowingly collect information from a child under 16 without appropriate authorisation.

17. External Websites

The store may link to independent third-party websites.

Their privacy practices are governed by their own notices. lurevynx.shop is not responsible for how an independent third party processes information.

18. Policy Changes

We may update this Privacy Policy to reflect changes in law, technology, store operations or service providers.

The current version will be published on lurevynx.shop with an updated revision date.

19. Contact

For privacy enquiries, requests or complaints, contact:

lurevynx.shop
Email: info@lurevynx.shop