Privacy Policy

Last updated: 01 May 2026

This Privacy Policy describes how Loressia ("the Company", "we", "us", or "our") collects, uses, and discloses personal information when individuals visit loressia.com, use our services, or otherwise communicate with us (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" refers to any user of the Services, whether as a customer, website visitor, or any other individual whose information has been collected in accordance with this Policy.

Customers are advised to read this Privacy Policy carefully. By accessing or using any of the Services, you consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree to the terms of this Privacy Policy, please refrain from using or accessing the Services.

Changes to This Privacy Policy

Loressia reserves the right to update this Privacy Policy at any time, including to reflect changes in our practices or to meet operational, legal, or regulatory requirements. Any revisions will be published on the Site, accompanied by an updated "Last updated" date, and any additional steps required by applicable law will be taken accordingly.

Collection and Use of Personal Information

To provide the Services, Loressia collects personal information from a variety of sources, as detailed below. The categories of information collected and the manner in which they are used vary depending on the nature of the individual's interaction with the Services.

In addition to the specific uses outlined in this Policy, collected information may be used to communicate with customers, provide the Services, fulfil applicable legal obligations, enforce applicable terms of service, and to protect or defend the Services, the Company's rights, and the rights of users or third parties.

Categories of Personal Information Collected

The personal information collected depends on the nature of the individual's interaction with the Site and Services. The term "personal information" refers to information that identifies, relates to, describes, or can be associated with a specific individual.

Information Collected Directly from the Customer

Information submitted directly through the Services may include:

Basic contact details, including name, address, telephone number, and email address.
Order information, including name, billing address, shipping address, payment confirmation, email address, and telephone number.
Account information, including username, password, and security questions.
Shopping information, including items viewed, added to cart, or added to a wishlist.
Customer support information, including the content of communications submitted through the Services.

Certain features of the Services may require the provision of specific personal information. Customers may elect not to provide such information; however, doing so may prevent access to or use of certain features.

Information Collected through Cookies

Loressia automatically collects certain information regarding interactions with the Services ("Usage Data"). This is accomplished through the use of cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information relating to how the Site and account are accessed and used, including device information, browser information, network connection details, IP address, and other information pertaining to interactions with the Services.

Information Obtained from Third Parties

Loressia may obtain information from third parties, including vendors and service providers who collect information on our behalf, such as:

Companies that support the Site and Services, including Shopify.
Payment processors, who collect payment information (such as bank account details, credit or debit card information, and billing address) for the purpose of processing transactions and fulfilling orders.
Third parties who, through online tracking technologies such as pixels, web beacons, software developer kits, and cookies, automatically collect certain information when customers visit the Site, open or interact with emails, or engage with the Services or associated advertisements.

All information obtained from third parties is treated in accordance with this Privacy Policy. Loressia accepts no responsibility for the accuracy of information provided by third parties, nor for the policies or practices of such parties.

Use of Personal Information

Provision of Products and Services

Personal information is used to provide the Services and to fulfil our contractual obligations, including processing payments, fulfilling orders, sending account-related notifications, managing customer accounts, arranging shipping, facilitating returns and exchanges, and enabling customers to submit product reviews.

Marketing and Advertising

Personal information may be used for marketing and promotional purposes, including sending communications by email, text message, or postal mail, and displaying advertisements for products or services. This may include tailoring the Services and advertising on the Site and other platforms based on individual customer information.

Security and Fraud Prevention

Personal information may be used to detect, investigate, or take action in relation to potentially fraudulent, unlawful, or malicious activity. Customers who register an account are responsible for maintaining the confidentiality of their account credentials. Customers are strongly advised not to share their username, password, or other access details with any third party. Any suspected compromise of an account should be reported to Loressia immediately.

Customer Communications

Personal information is used to provide customer support and to improve the Services, in furtherance of our legitimate interest in maintaining effective and responsive business relationships with customers.

Cookies

Loressia uses Cookies on the Site to support and improve the Services, to retain user preferences, to conduct analytics, and to better understand user interaction with the Services. Third parties and service providers may also be permitted to use Cookies on the Site for the purpose of tailoring services, products, and advertising.

Most browsers accept Cookies by default. Customers may configure their browser to remove or reject Cookies; however, doing so may adversely affect the user experience and the functionality of certain features of the Services. Please note that blocking Cookies may not entirely prevent the sharing of information with third parties, including advertising partners.

For further information regarding Cookies used in connection with Shopify, please refer to: https://www.shopify.com/legal/cookies

Disclosure of Personal Information

Loressia may disclose personal information to third parties in certain circumstances and for legitimate purposes, including:

To vendors and third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, and fulfilment and shipping.
Where a customer has directed, requested, or consented to disclosure, such as for the purposes of product delivery or through the use of social media or login integrations.
To affiliates or other entities within our corporate group, in furtherance of our legitimate business interests.
In connection with a business transaction such as a merger or insolvency proceeding, to comply with applicable legal obligations (including responses to subpoenas or search warrants), to enforce applicable terms of service, or to protect the rights of the Company, the Services, or users.

The following categories of personal information have been disclosed within the past 12 months:

Category	Categories of Recipients
Identifiers, including basic contact details and order and account information	Vendors and third-party service providers; business and marketing partners; affiliates
Commercial information, including order, shopping, and customer support information
Internet or network activity, including Usage Data

Loressia does not use or disclose sensitive personal information for the purpose of inferring characteristics about individuals.

User-Generated Content

The Services may enable customers to submit product reviews and other user-generated content. Any content submitted to a public area of the Services will be publicly accessible. Loressia does not control who may access such content and accepts no responsibility for how third parties may use or handle publicly available information.

Third-Party Websites and Links

The Site may contain links to websites or platforms operated by third parties. Customers who follow such links are advised to review the privacy and security policies of those platforms. Loressia does not guarantee and accepts no responsibility for the privacy, security, accuracy, or reliability of third-party websites. The inclusion of any third-party link does not constitute an endorsement of that platform or its operators.

Children's Data

The Services are not intended for use by children. Loressia does not knowingly collect personal information from children. Parents or guardians who believe that a child has provided personal information to Loressia are invited to contact us using the details provided below to request its deletion.

As of the effective date of this Privacy Policy, Loressia has no actual knowledge that it "shares" or "sells" (as defined under applicable law) personal information of individuals under the age of 16.

Security and Retention of Personal Information

Loressia implements reasonable security measures to protect personal information; however, no security system is entirely impenetrable, and the Company cannot guarantee absolute security. Customers are advised not to transmit sensitive or confidential information via unsecured channels.

The retention period for personal information is determined by factors including the necessity of the information for account maintenance, service provision, compliance with legal obligations, resolution of disputes, and enforcement of applicable contracts and policies.

Customer Rights and Choices

Depending on the applicable jurisdiction, customers may be entitled to exercise some or all of the following rights in relation to their personal information. These rights are not absolute, may apply only in certain circumstances, and may be subject to limitations as permitted by law:

Right to Access / Know — The right to request access to personal information held by Loressia, including details of how it is used and shared.
Right to Deletion — The right to request the deletion of personal information held by Loressia.
Right to Rectification — The right to request correction of inaccurate personal information.
Right to Portability — The right to receive a copy of personal information and, in certain circumstances, to request its transfer to a third party.
Right to Restriction of Processing — The right to request that Loressia cease or restrict the processing of personal information.
Right to Withdraw Consent — Where processing is based on consent, the right to withdraw that consent at any time.
Right of Appeal — The right to appeal any decision by Loressia to decline a request, by responding directly to the relevant communication.
Management of Communication Preferences — Customers may opt out of promotional communications at any time by using the unsubscribe link contained in any promotional email. Non-promotional communications, such as order confirmations and account notifications, will continue to be sent regardless.

These rights may be exercised through the relevant options on the Site or by contacting Loressia using the details provided below. Loressia will not discriminate against any customer for exercising their rights. Verification of identity may be required prior to processing a request. All requests will be addressed in a timely manner in accordance with applicable law.

Complaints

Customers who have concerns regarding the processing of their personal information are invited to contact Loressia using the details provided below. If a response is deemed unsatisfactory, customers may have the right to appeal the decision or to lodge a complaint with the relevant local data protection authority.

International Data Transfers

Personal information may be transferred to, stored in, and processed in countries other than the customer's country of residence, including the United States. Where personal information is transferred out of the European Economic Area or the United Kingdom, Loressia will rely on recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses or equivalent instruments issued by the relevant competent authority, unless the transfer is to a jurisdiction deemed to provide an adequate level of data protection.