Privacy Policy

Lorvelle Co — United Kingdom

Your privacy matters to us. This policy explains how Lorvelle Co collects, uses and protects your personal information when you shop with us or interact with our website at lorvelleco.com.

1. Who We Are

Lorvelle Co ("we", "us", "our") is an online jewellery retailer operating at lorvelleco.com, serving customers across the United Kingdom. For the purposes of UK data protection law, Lorvelle Co is the data controller responsible for your personal information.

If you have any questions about how we handle your data, you can Contact Us:

Website: lorvelleco.com/pages/contact-us

2. Information We Collect

We collect personal information that you provide directly to us, and some information that is collected automatically when you use our website.

Information you provide to us:

Name, email address, postal address and phone number (when placing an order or creating an account)
Payment details — processed securely by our payment providers; we do not store full card numbers
Your order history and wishlist
Communications you send us via email or our contact form
Marketing preferences, if you subscribe to our newsletter

Information collected automatically:

IP address and browser type
Pages visited, time spent on site and referring URLs
Device and operating system information
Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information

We use your personal information for the following purposes, each supported by a lawful basis under the UK GDPR:

Purpose	Lawful Basis
Processing and fulfilling your orders, including delivery and returns	Contract performance
Sending order confirmations, shipping updates and receipts	Contract performance
Managing your account and preferences	Contract performance
Responding to your enquiries and providing customer support	Legitimate interests
Sending you marketing emails and promotions (only with your consent)	Consent
Preventing fraud and ensuring the security of our website	Legitimate interests / Legal obligation
Improving our website, products and services through analytics	Legitimate interests
Complying with legal and regulatory obligations	Legal obligation

4. Sharing Your Information

We do not sell or rent your personal information. We may share it with trusted third parties only where necessary to operate our business:

Payment processors — to securely handle transactions (e.g. Stripe, PayPal)
Delivery and logistics providers — to ship your orders
Email marketing platforms — to send communications you have opted into (e.g. Klaviyo, Mailchimp)
Analytics providers — to understand how our website is used (e.g. Google Analytics)
Our e-commerce platform — our store is hosted on Shopify Inc., which processes data in accordance with its own privacy policy
Legal authorities — where required by law, court order or to protect the rights and safety of Lorvelle Co or others

All third parties are required to handle your data securely and in accordance with applicable data protection law.

5. International Data Transfers

Some of our service providers are based outside the United Kingdom. Where we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms, to protect your information to the same standard as required under UK law.

6. How Long We Keep Your Data

We retain your personal information only for as long as necessary for the purposes set out in this policy, or as required by law. As a general guide:

Order records — retained for up to 7 years to comply with UK tax and accounting obligations
Customer accounts — retained for as long as your account remains active
Marketing data — retained until you withdraw consent or unsubscribe
Enquiry and support records — typically retained for up to 2 years

7. Your Rights

Under UK data protection law, you have the following rights regarding your personal information:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to ask us to correct inaccurate or incomplete data
Right to erasure — to request that we delete your data ("right to be forgotten"), subject to legal obligations
Right to restrict processing — to ask us to limit how we use your data in certain circumstances
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, please Contact Us. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.

8. Cookies

We use cookies and similar technologies to improve your experience on our website. Cookies are small text files stored on your device. We use them to:

Keep your shopping cart and account session active
Remember your preferences and settings
Understand how visitors use our site (analytics)
Deliver relevant advertising and measure its effectiveness

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. For more information, visit ico.org.uk/for-the-public/online/cookies.

9. Marketing Communications

We will only send you marketing emails and promotional messages if you have opted in to receive them. Each communication includes a clear and easy option to unsubscribe at any time. You may also update your preferences at any time by reaching out via our Contact Us page.

10. Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, disclosure or destruction. Our website uses SSL/TLS encryption. Payment transactions are processed by PCI-DSS compliant providers.

While we take every reasonable precaution, no method of transmission over the internet is entirely secure. We therefore cannot guarantee absolute security.

11. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, please Contact Us immediately.

12. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any websites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the date at the bottom of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.