Privacy Policy

Privacy Policy

Last updated 28 August 2026.

This policy explains what personal data Lavishens collects when you visit or buy from lavishens.co, why we hold it, and what rights you have over it. We are the data controller for that information.

What we collect

When you place an order: your name, billing and delivery address, email address, telephone number where you give one, and the items you bought. We receive confirmation of payment and the last four digits of your card, but never the full card number.

When you browse: your IP address, browser and device type, referring page, and the pages you view on our site. This arrives through cookies and similar technologies.

When you contact us: the content of your message and any details you choose to include in it.

When you subscribe: your email address, and your name if you give it.

Why we hold it, and our lawful basis

  • To fulfil your order — taking payment, dispatching goods, sending dispatch and tracking emails, handling returns. Lawful basis: performance of a contract.
  • To provide customer service — answering your questions and resolving problems. Lawful basis: performance of a contract, and our legitimate interest in running the shop well.
  • To meet legal obligations — keeping tax and transaction records. Lawful basis: legal obligation.
  • To protect against fraud — screening orders for fraudulent activity. Lawful basis: legitimate interest.
  • To improve the site — understanding which pages and products people use. Lawful basis: consent, given through our cookie banner.
  • To send marketing emails — only where you have opted in. Lawful basis: consent, which you can withdraw at any time.

Who we share it with

We do not sell your personal data, and we never have. We share it only with the parties needed to run the shop:

  • Shopify — hosts this store and processes orders. See Shopify's own privacy policy at shopify.com/legal/privacy.
  • Payment processors — Shopify Payments and PayPal, to take payment securely.
  • Our suppliers and carriers — your name, delivery address and telephone number, purely so that your parcel can be made up and delivered. They may not use it for any other purpose.
  • Email and analytics providers — to send order and, where you have opted in, marketing emails, and to understand site usage.
  • Legal and regulatory bodies — where we are required by law to disclose information.

International transfers

Some of our suppliers and service providers are based outside the United Kingdom, including in the European Economic Area, the United States and Asia. Where your data is transferred outside the UK, we rely on adequacy regulations or on standard contractual clauses to ensure it remains protected to UK standards.

How long we keep it

Order and transaction records are kept for 7 years, as UK tax law requires. Customer service correspondence is kept for 3 years. Marketing subscriptions are kept until you unsubscribe, plus a short suppression record so that we do not email you again by mistake. Analytics data is retained for 26 months.

Cookies

We use cookies that are strictly necessary for the site to work — remembering your basket, keeping you signed in, securing checkout. These cannot be switched off.

We also use analytics and, where you consent, marketing cookies to understand how the site is used and to measure advertising. You can accept or decline these through the cookie banner, and change your mind later through your browser settings. Declining them does not affect your ability to shop.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data erased, where we have no overriding legal reason to keep it
  • Restrict or object to how we process it
  • Receive your data in a portable format
  • Withdraw consent at any time, where consent is our basis for processing

To exercise any of these, email sales@lavishens.com. We will respond within one month. There is no charge.

Marketing emails

We only send marketing email to people who have asked for it. Every one of those emails carries an unsubscribe link that works immediately. Order confirmations, dispatch notices and replies to your questions are not marketing and will continue regardless, as they are necessary to your order.

Children

This site is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe we hold data about a child, contact us and we will delete it.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We will update this page when our practices change, and the date at the top will tell you when it last happened. Material changes affecting how we use your data will be notified by email where we hold your address.

Contact

Lavishens
Coleford, Gloucestershire, United Kingdom
sales@lavishens.com