Privacy Policy

This Privacy Policy explains how Lourel collects, uses and protects your personal data when you visit our website or place an order. We are committed to handling your information responsibly and in line with the EU General Data Protection Regulation (GDPR).

1. Who we are

Lourel is the data controller responsible for your personal data. If you have any questions about this policy or your data, please use the contact form on our Contact page.

2. What we collect

We may collect: your name, contact details and delivery address; order and payment information (payment card details are processed securely by our payment providers and are not stored by us); communications you send us; and technical data such as your IP address, device and browsing activity collected through cookies.

3. How and why we use your data

We use your data to process and deliver your orders, provide customer care, manage returns and refunds, send updates you have asked for, prevent fraud, and improve our website and service. Our legal bases are the performance of our contract with you, our legitimate business interests, your consent (for example for marketing), and compliance with legal obligations.

4. Sharing your data

We share data only where necessary — for example with our e-commerce platform (Shopify), payment providers, shipping and fulfilment partners, and other service providers who help us run our business. These parties may only use your data on our instructions. We never sell your personal data.

5. International transfers

Some of our providers may process data outside the EU/EEA. Where they do, we rely on appropriate safeguards such as the European Commission's standard contractual clauses to protect your information.

6. How long we keep it

We keep your data only as long as necessary for the purposes described here or as required by law (for example, accounting and tax records).

7. Your rights

Under the GDPR you have the right to access, correct, delete or restrict the processing of your data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

8. Cookies

We use cookies and similar technologies as described in our Cookies Policy.

9. Security

We take appropriate technical and organisational measures to keep your data secure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.