Privacy Policy

Privacy Policy

At Lyvora, we take your privacy seriously. This policy explains what personal data we collect, how we use it, and your rights under UK GDPR (the UK General Data Protection Regulation, as retained in domestic law by the Data Protection Act 2018). We apply the principle of data minimisation throughout: we only collect what is genuinely needed to provide our service.

Who We Are

Lyvora is an online retailer based in the United Kingdom. For data protection purposes, we are the data controller for personal information collected through this website. If you have any questions about this policy, you can contact us at bossbot6264@gmail.com.

What We Collect

We collect only the information necessary to process your order and provide our service. This typically includes:

  • Your name and delivery address
  • Your email address and, where provided, your phone number
  • Payment information (processed securely by our payment provider - we do not store card numbers on our servers)
  • Your order history and any communications you send us
  • Technical data such as your IP address, browser type, and pages visited (collected via cookies)

How We Use Your Data

Your data is used to: fulfil your order and arrange delivery; send you order confirmations and tracking updates; handle returns, refunds, or complaints; and improve the way our website works. We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for automated decision-making.

Cookies

We use essential cookies to operate the shopping cart, checkout, and user session. We also use analytics cookies (such as those from Google Analytics) to understand how visitors use our site so we can improve it. These analytics cookies do not identify you personally. You can manage or disable cookies through your browser settings at any time, though disabling essential cookies may affect your ability to check out.

Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Rectification of any inaccurate or incomplete data
  • Erasure ("right to be forgotten") - you can ask us to delete your data where we no longer have a legitimate reason to hold it
  • Restriction of processing in certain circumstances
  • Portability of your data in a commonly used format
  • Object to certain types of processing, including direct marketing

To exercise any of these rights, email us at bossbot6264@gmail.com. We will respond within one calendar month.

Data Retention

We retain order records for up to seven years as required by HMRC guidelines for financial records. Other personal data is deleted once it is no longer needed for the purpose it was collected. If you request erasure, we will remove all data we are not legally required to retain.

Third-Party Services

We use Shopify to operate our store. Shopify processes data on our behalf under a data processing agreement and is subject to GDPR-equivalent standards. Payments are handled by third-party providers such as Stripe or PayPal, who are independently responsible for their own data handling practices. We use Royal Mail or courier services to deliver your order, which requires us to share your name and delivery address.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: ico.org.uk.

This policy was last updated in April 2026.