Privacy Policy

The short version

We do not sell your personal data. We collect only what we need to process your order and improve your experience. You can ask us to delete your data at any time, subject to legal retention obligations.

1. What we collect

When you place an order: name, email address, billing address, shipping address, phone number, payment information (processed securely by Shopify — we never see your full card number).

When you browse: IP address, browser type, device type, pages viewed, time on site, referral source. This is collected via cookies and analytics tools.

When you contact us: the content of your message and any information you choose to share.

2. How we use it

• To process, fulfill, and ship your order
• To send order confirmations, shipping updates, and receipts
• To respond to your questions and support requests
• To send marketing emails — only if you opt in, and you can unsubscribe at any time
• To improve the website and understand how people use it
• To prevent fraud and comply with legal obligations

3. Who we share it with

We do not sell your data. We share it only with service providers who help us run the business:

• Shopify — e-commerce platform and payment processing
• ShipStation / shipping carriers — to fulfill and deliver your order
• Email service provider — to send transactional and marketing emails
• Analytics tools — to understand site usage

We select third parties that maintain appropriate data protection standards. We do not authorise them to use your data for their own purposes.

4. Cookies

We use cookies to keep your cart working, remember your preferences, and measure site traffic. A cookie consent notice is presented on your first visit. You can manage or withdraw cookie consent at any time via the consent banner or your browser settings.

5. Data retention

We keep order data for as long as required by law (typically 7 years for financial records). We keep marketing email preferences until you unsubscribe or ask us to delete your data. Some data cannot be deleted where we have a legal obligation to retain it.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Ask us to delete your data (subject to legal retention obligations)
• Object to or restrict how we use your data
• Receive your data in a portable format
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at hello@lamond.xyz. Nothing in this policy affects your statutory rights under applicable law.

7. Security

Payment data is encrypted and processed by Shopify (PCI DSS compliant). We use HTTPS across the entire site. No method of internet transmission is 100% secure, but we take reasonable measures to protect your information.

8. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new effective date. For material changes, we will attempt to notify registered customers by email.

9. Contact

Questions about this policy? Email hello@lamond.xyz.