Privacy Policy
Privacy Policy
Last updated: 8 October 2026
Who is responsible The operator of luvvlo.com and controller of personal information for our retail activities is [LEGAL_ENTITY], [BUSINESS_ADDRESS]. Contact service@luvvlo.com about privacy. Any required regional representative or additional privacy contact is listed in [REGIONAL_PRIVACY_DISCLOSURES].
Information involved When you order or contact us, we process the information needed for that interaction: name, contact details, delivery and billing addresses, items and variants purchased, order status, transaction references and correspondence. If you create an account, we also process the account information you provide. Return enquiries may include photos you choose to send.
Website operation can involve IP addresses, browser and device details, server logs and identifiers needed for a cart or session. Additional analytics or advertising data depends on the tools actually enabled and your choices, as identified below. Do not send full payment-card details, passwords or unrelated sensitive information in support messages.
Payment details are handled by the payment methods available at checkout. The provider may process card or wallet information under its own notice. Luvvlo receives the order/payment information needed to administer the transaction. Provider-specific details are listed in the service-provider section below.
Purposes and legal bases We use order and contact information to fulfil purchases, arrange delivery, answer enquiries and handle returns. Where GDPR-type rules apply, the relevant basis is normally performance of a contract or steps requested before entering one. Required tax, accounting and regulatory records are handled to meet legal obligations.
Security, fraud prevention and proportionate operational improvements may rely on legitimate interests where permitted and after considering your rights. We rely on consent for optional tracking or marketing where required. We do not make an order conditional on agreeing to unrelated advertising. Where consent is the basis, you may withdraw it without affecting earlier lawful processing.
Providers and recipients Our storefront uses SHOPLINE. Necessary information may also be provided to the payment, fulfilment, delivery, support and professional service providers used for your transaction. They receive information relevant to their role. We may disclose information when legally required or to establish or defend legal claims. If a business transfer involves customer records, any transfer remains subject to applicable safeguards and notice requirements.
[PROVIDER_AND_TRANSFER_DETAILS: identify actual payment/fulfilment/support/analytics/advertising providers, their roles and privacy links, processing locations, and the transfer safeguards used where required.]
Information may be processed outside your country, including in China and in countries where our service providers operate. Where a restricted international transfer occurs, we use a legally available mechanism and provide details about it on request. This statement does not replace the provider and transfer information above.
Cookies, analytics and advertising Essential technologies support functions such as a shopping session or security. Optional measurement and advertising technologies, if enabled, are described here: [TRACKING_DETAILS: names/providers, purposes, data categories and lifetimes of enabled technologies; explicitly state if none are enabled].
Manage the choices offered for your location at [PRIVACY_CHOICES_URL]. Where prior consent is required, optional tracking is not activated until that consent is given, and it can be withdrawn. Browser controls may block cookies, but some essential store functions may then be unavailable. The actual preference control must support the choices described here.
[SALE_SHARING_AND_TARGETED_ADVERTISING_DISCLOSURE: based on actual data flows, state whether any processing is legally a sale, sharing or targeted advertising; provide required opt-out methods and describe recognition of applicable opt-out signals. Do not state “we never sell data” without checking advertising integrations.]
Retention and security Retention is limited to the period reasonably needed for the purpose of the information. In deciding that period, we consider fulfilment and customer support needs, business and tax records, fraud prevention, disputes and applicable legal duties. The criteria differ by information type and legal requirements; information is deleted or de-identified when it is no longer needed, where appropriate.
We use organisational and technical measures intended to protect information. No online system is entirely risk-free; tell us promptly if you suspect unauthorised access involving your account.
Your choices and rights Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction or objection, and withdrawal of consent. You may also have rights to opt out of certain advertising uses or to appeal a refusal. Email service@luvvlo.com; we will verify identity proportionately and respond within the applicable time limit. Exercising a protected right will not lead to unlawful discrimination.
Marketing emails, if you have subscribed, include an unsubscribe method. Necessary order messages may still be sent. You may complain to the competent privacy regulator, including the regulator in your place of residence where applicable. Additional region-specific rights and request/appeal routes are set out in [REGIONAL_PRIVACY_DISCLOSURES].