Privacy Policy

Who we are (data controller)

Lormi is the data controller for the personal data described in this policy.

Contact: privacy@lormi.co.uk

What personal data we collect

Depending on how you use the site, we may collect:

• Identity & contact details: name, billing address, delivery address, email address, phone number (if provided).
• Order information: items purchased, order value, order history, discount codes used, delivery method.
• Payment information: payment status and transaction references (payment card details are handled by our payment providers, not stored by us).
• Account information: if you create an account, we store login and account details.
• Customer support information: emails you send us and any information you choose to share.
• Reviews: review content and associated details (depending on review provider settings).
• Device & usage data: IP address, browser type, pages viewed, approximate location (derived from IP), and how you interact with the site.
• Marketing preferences: whether you are subscribed, and your communication preferences.

How we use your data (and our legal bases)

We only use your personal data when we have a lawful basis to do so.

To process and deliver your order

• To take payment, confirm your order, deliver items, and handle returns or issues.
• Legal basis: performance of a contract.

To provide customer support

• To respond to enquiries and resolve problems.
• Legal basis: performance of a contract or legitimate interests.

To improve our website and services

• To understand how customers use our site and improve performance, content, and user experience.
• Legal basis: legitimate interests and/or consent (where required for cookies/analytics).

Marketing communications

• To send marketing emails if you opt in (or where permitted).
• You can unsubscribe at any time using the link in any marketing email.
• Legal basis: consent (or soft opt-in where applicable).

Advertising and measurement

• To measure ad performance and help show relevant ads (for example via Meta or Google advertising tools/pixels).
• Legal basis: consent (where required for cookies/pixels) and/or legitimate interests.

Legal and compliance

• To keep records for tax/accounting, prevent fraud, and comply with legal obligations.
• Legal basis: legal obligation and legitimate interests.

Cookies, analytics, and advertising technology

We use cookies and similar technologies to run the site, remember preferences, understand usage, and support advertising.

• Essential cookies: required for the website to function (for example, cart and checkout).
• Analytics cookies: help us understand site usage (this may include Shopify analytics and/or Google Analytics, depending on what we enable).
• Advertising cookies/pixels: used to measure ad performance and help show relevant ads (for example Meta and Google tools).

You can manage cookies through your browser settings and, where available, through any cookie banner/preferences tool on our site.

Who we share your data with

We share personal data only where needed to operate the store and deliver services. This can include:

• E-commerce platform: Shopify (storefront, checkout, and order management).
• Payment providers: to process payments and prevent fraud.
• Delivery carriers: to deliver your order and provide tracking.
• Email marketing provider: to send marketing emails (only if you subscribe).
• Review provider: to collect and display product reviews.
• Advertising partners: to measure and improve advertising performance (where enabled and subject to cookie choices).
• Professional advisers: accountants, insurers, or legal advisers where necessary.

We do not sell your personal data.

International transfers

Some of our service providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place (such as UK-approved contractual protections).

How long we keep your data

We keep personal data only as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements.

For example, order and transaction records are typically retained for several years to meet tax and accounting obligations.

Your rights

Under UK data protection law, you have rights including:

• The right to access your personal data.
• The right to correct inaccurate data.
• The right to request deletion of your data (in certain circumstances).
• The right to restrict or object to processing (in certain circumstances).
• The right to data portability (in certain circumstances).
• The right to withdraw consent at any time (where we rely on consent).

To exercise your rights, contact us at privacy@lormi.co.uk.

You also have the right to complain to the UK Information Commissioner’s Office (ICO). Guidance is available at ico.org.uk.

Security

We take reasonable technical and organisational measures to protect personal data and limit access to authorised parties.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date.

Contact

If you have questions about this policy, contact privacy@lormi.co.uk.