Privacy policy

This policy explains what personal information Lightandloft collects when you visit or buy from this store, why we collect it, and what rights you have over it. It applies to this website and to any communication you have with us.

What we collect

We collect only what is needed to run the store and fulfil your order:

• Contact details — your name, email address, phone number, and shipping and billing addresses.
• Order information — what you bought, what you returned, and the value of the order.
• Payment information — handled by our payment provider. We receive only the last four digits of your card and the card brand. Your full card number never reaches our servers.
• Device and usage information — your IP address, browser, and the pages you viewed, collected through cookies and similar technologies.
• Communications — anything you write to us by email or through the contact form.

How we use it

• To process and ship your order, and to handle returns and refunds
• To send order confirmations, shipping notifications and tracking updates
• To answer your questions and provide support
• To detect and prevent fraud and abuse
• To improve the store, and — only if you have opted in — to send marketing email

We do not sell your personal information.

Who we share it with

We share information only with the parties needed to complete your order and run the store:

• Shopify, which hosts this store and processes orders
• Payment providers, to take payment and issue refunds
• Shipping carriers and fulfilment partners, to deliver your order
• Email and analytics providers, to send order notifications and understand how the store is used
• Law enforcement or regulators, where we are legally required to

Cookies

Cookies keep your cart working between pages, remember your preferences, and help us understand which pages are useful. You can block or delete cookies in your browser settings, but parts of the store — the cart and checkout in particular — may stop working correctly if you do.

How long we keep it

Order records are kept for as long as we are required to for tax and accounting purposes. Marketing contact details are kept until you unsubscribe. Support emails are kept while they are useful for handling your query and then deleted.

Your rights

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you, and get a copy of it
• Ask us to correct information that is wrong
• Ask us to delete your information, where we are not required to keep it
• Opt out of marketing email at any time — every marketing email has an unsubscribe link
• Ask us not to sell or share your information for targeted advertising

To exercise any of these, email us using the address below. We will reply within 30 days, and we may need to verify your identity first.

Children

This store is not intended for children, and we do not knowingly collect personal information from anyone under the age of majority in their state. If you believe a child has given us their information, contact us and we will delete it.

Security

Checkout is encrypted and runs on Shopify's PCI DSS compliant platform. No system is perfectly secure, so please do not send sensitive information such as full card numbers by email.

Changes to this policy

We may update this policy to reflect changes in how we operate or in the law. The revised version is posted on this page, so the date on it is always the version in force.