Privacy Policy

Last updated: September 16, 2026

Loftavelle (“Loftavelle,” “we,” “us,” or “our”) operates https://loftavelle.com and the related online store, content, features, purchasing functions, and services (collectively, the “Services”).

Our ecommerce store is hosted by Shopify, which provides the ecommerce platform that enables us to offer the Services.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use the Services, place an order, create an account, subscribe to communications, contact us, or otherwise interact with Loftavelle.

It also explains the privacy rights and choices that may be available to you under applicable data-protection law.

1. Who Is Responsible for Your Personal Information

Where Loftavelle determines why and how personal information is processed, Loftavelle acts as the applicable data controller.

Our contact details are:

Loftavelle
Website: https://loftavelle.com
Email: nosebennetts6366@hotmail.com
Phone: +44 7860 337605
Business Address:
2 Park View
Hadley Road
Telford
TF2 6AJ
United Kingdom

2. Personal Information We Collect

Depending on how you interact with the Services, we may collect the following categories of personal information.

Contact Information

This may include:

• Your name;

• Email address;

• Telephone number;

• Billing address; and

• Shipping address.

Order and Transaction Information

This may include:

• Products viewed or purchased;

• Shopping-cart activity;

• Order history;

• Purchase amounts;

• Discounts or promotions used;

• Returns;

• Refunds;

• Delivery information;

• Order status; and

• Communications relating to an order.

Payment-Related Information

Payments are processed through Shopify and authorised third-party payment providers.

Loftavelle does not ordinarily receive or store complete payment-card numbers.

We may receive limited payment or transaction information necessary to:

• Confirm transactions;

• Prevent fraud;

• Process refunds;

• Resolve payment issues; and

• Maintain legally required transaction records.

Account Information

If customer-account functionality is available, we may collect information such as:

• Account or login information;

• Saved addresses;

• Saved preferences;

• Order history; and

• Account activity.

Device and Usage Information

When you use the Services, we and our service providers may automatically collect information such as:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Device identifiers;

• Cookie identifiers;

• Network information;

• General location derived from an IP address;

• Referring websites or pages;

• Pages viewed;

• Products viewed;

• Links clicked;

• Shopping-cart activity;

• Session information; and

• Other interactions with the Services.

Marketing and Preference Information

This may include:

• Newsletter subscriptions;

• Marketing preferences;

• Advertising preferences;

• Cookie choices;

• Privacy choices;

• Responses to promotions; and

• Interactions with marketing communications.

Communications and Customer-Service Information

We may collect information you voluntarily provide when communicating with us, including:

• Emails;

• Customer-service enquiries;

• Return or refund requests;

• Product reviews;

• Feedback;

• Photographs;

• Videos; and

• Other information you choose to provide.

3. How We Collect Personal Information

We may collect personal information in the following ways.

Directly From You

For example, when you:

• Place an order;

• Create an account;

• Enter billing or shipping information;

• Complete a form;

• Subscribe to communications;

• Request a return or refund;

• Submit a review; or

• Contact customer support.

Automatically

We and our service providers may collect information automatically through technologies such as:

• Cookies;

• Pixels;

• Tags;

• Log files;

• Scripts;

• Local storage;

• Device identifiers; and

• Similar storage or access technologies.

From Service Providers and Partners

We may receive information from third parties that assist us in operating the Services, including:

• Shopify;

• Payment processors;

• Fraud-prevention providers;

• Analytics providers;

• Advertising and marketing providers;

• Fulfilment providers;

• Warehouses;

• Delivery carriers;

• Returns providers; and

• Customer-service or technology providers.

4. How We Use Personal Information

We may use personal information to:

• Provide and operate the Services;

• Process payments;

• Confirm and manage orders;

• Fulfil purchases;

• Arrange shipping and delivery;

• Provide tracking information;

• Process returns, replacements, and refunds;

• Provide customer support;

• Create and maintain customer accounts;

• Save customer preferences;

• Send transactional and service-related communications;

• Send order, delivery, security, account, and policy updates;

• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;

• Protect customers, our website, systems, and business;

• Analyse how customers use the Services;

• Maintain and improve our website, products, Services, and customer experience;

• Personalise content or product recommendations where permitted;

• Measure marketing and advertising performance;

• Provide or evaluate advertising where permitted by applicable law;

• Send promotional communications in accordance with applicable law and your choices;

• Maintain business, accounting, tax, and transaction records;

• Comply with legal, regulatory, contractual, and law-enforcement obligations;

• Establish, exercise, or defend legal claims; and

• Enforce our Terms of Service and other policies.

We seek to process only personal information that is reasonably necessary and appropriate for the applicable purpose.

5. Lawful Bases for Processing

Where the UK General Data Protection Regulation (“UK GDPR”) requires a lawful basis for processing, the lawful basis we rely upon depends on the purpose and circumstances of the processing.

We may rely on one or more of the following.

Performance of a Contract

We may process personal information where necessary to enter into or perform a contract with you, including to:

• Process an order;

• Accept payment;

• Fulfil a purchase;

• Arrange delivery;

• Provide customer support;

• Process a return; or

• Issue a refund.

Legal Obligation

We may process personal information where necessary to comply with applicable legal obligations, including obligations relating to:

• Tax;

• Accounting;

• Consumer protection;

• Regulatory compliance;

• Fraud prevention; or

• Valid legal or governmental requests.

Legitimate Interests

Where permitted by law, we may process personal information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

These interests may include:

• Operating and improving our business;

• Providing effective customer service;

• Protecting our website and systems;

• Preventing and detecting fraud;

• Understanding website performance;

• Maintaining appropriate business records;

• Protecting our legal rights; and

• Establishing, exercising, or defending legal claims.

Recognised Legitimate Interests

Where applicable UK law permits processing under a recognised legitimate-interest basis for a specified purpose, we may rely on that basis where the relevant legal requirements are met.

This lawful basis is limited to specified purposes recognised by UK law and is not a general basis for ordinary commercial processing.

It may apply in qualifying circumstances involving matters such as:

• Crime prevention or investigation;

• Safeguarding;

• Emergencies;

• Public security or defence; or

• Certain disclosures supporting public tasks or official functions.

Consent

Where required by law, we may rely on your consent for activities including:

• Certain marketing communications;

• Non-essential cookies;

• Certain analytics technologies;

• Advertising technologies; and

• Other processing activities requiring consent.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

6. Cookies and Similar Technologies

Loftavelle, Shopify, and other service providers may use cookies, pixels, tags, scripts, local storage, and similar technologies to:

• Operate the website;

• Maintain shopping-cart and checkout functionality;

• Authenticate users;

• Remember preferences;

• Protect against fraud;

• Understand website usage;

• Measure website performance;

• Analyse customer interactions;

• Measure marketing effectiveness;

• Personalise content where permitted; and

• Provide or evaluate advertising.

Some technologies may be strictly necessary to provide Services requested by the user or to enable essential website functionality.

Other technologies, including certain analytics, personalisation, and advertising technologies, may require consent under applicable UK privacy and electronic communications rules.

Where consent is required, we will seek appropriate consent before using the relevant non-essential technologies.

You may manage available choices using the cookie or privacy controls presented on https://loftavelle.com.

You may also manage certain technologies through your browser or device settings.

Blocking or disabling certain technologies may affect functionality including:

• Account access;

• Shopping carts;

• Saved preferences;

• Personalisation; or

• Checkout.

7. Marketing Communications

We may send promotional communications only where permitted by applicable law.

Where consent is required for electronic marketing, we will seek appropriate consent.

Where another lawful permission or exception applies, marketing may be sent in accordance with applicable legal requirements.

If you receive promotional emails from us, you may unsubscribe at any time by using the unsubscribe option included in the message.

You may also contact us to object to the use of your personal information for direct marketing.

Opting out of marketing does not prevent us from sending necessary non-promotional communications relating to:

• Orders;

• Payments;

• Shipping;

• Returns;

• Refunds;

• Accounts;

• Security; or

• Customer-service matters.

8. Advertising and Privacy Choices

We may work with advertising, analytics, and marketing providers to:

• Understand customer interactions;

• Measure advertising performance;

• Attribute conversions;

• Personalise marketing where permitted; and

• Provide or evaluate advertising.

These activities may involve information such as:

• Cookies;

• Pixels;

• Device identifiers;

• IP addresses;

• Browsing activity;

• Product-viewing activity;

• Cart activity; and

• Purchase interactions.

Loftavelle does not exchange personal information for money.

However, privacy laws in certain jurisdictions outside the United Kingdom may classify some advertising-related disclosures as a “sale,” “sharing,” or use for targeted advertising even where no money is exchanged.

Where such laws apply to Loftavelle and provide an opt-out right, eligible individuals may exercise that right using applicable privacy controls made available on our website or by contacting:

nosebennetts6366@hotmail.com

Where applicable law requires us to recognise a qualifying browser-based privacy preference signal, we will process that signal as required.

9. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to the following categories of recipients.

Shopify

Shopify hosts and supports our ecommerce store and processes personal information in connection with providing ecommerce and related services.

Payment and Financial-Service Providers

We may disclose necessary information to:

• Payment processors;

• Banks;

• Financial-service providers; and

• Fraud-prevention providers

for purposes including payment authorisation, transaction processing, refunds, verification, and fraud prevention.

Fulfilment and Delivery Providers

We may disclose necessary customer and order information to:

• Fulfilment providers;

• Warehouses;

• Logistics providers;

• Delivery carriers; and

• Returns providers.

Technology and Business-Service Providers

We may use service providers supporting:

• Website functionality;

• Information technology;

• Cloud infrastructure;

• Data storage;

• Customer support;

• Email delivery;

• Analytics;

• Security; and

• Fraud prevention.

Advertising and Marketing Providers

Subject to applicable law and your privacy choices, we may disclose certain information to advertising, analytics, or marketing providers for:

• Measurement;

• Attribution;

• Personalisation; or

• Advertising.

Professional Advisers

We may disclose information where reasonably necessary to:

• Lawyers;

• Accountants;

• Auditors;

• Insurers; and

• Other professional advisers.

Government and Legal Authorities

We may disclose information to courts, regulators, government authorities, law-enforcement agencies, or other authorised parties where:

• Required by applicable law;

• Required by valid legal process;

• Necessary to investigate fraud or unlawful activity;

• Necessary to establish or protect legal rights; or

• Necessary to protect the rights or safety of customers or others.

Business Transactions

If Loftavelle is involved in a merger, acquisition, financing, restructuring, sale of assets, transfer of business, or similar transaction, relevant personal information may be disclosed to prospective or actual purchasers, advisers, or successors, subject to applicable safeguards.

10. Shopify

Our ecommerce store is powered by Shopify.

Shopify processes personal information in connection with providing ecommerce technology and related services to Loftavelle.

Depending on the Shopify service involved, Shopify may process information on behalf of Loftavelle and may also process certain information for purposes described in Shopify's own privacy notices.

Customers who use Shopify consumer services such as Shop or Shop Pay may also have a direct relationship with Shopify and may have separate privacy rights and choices concerning information processed directly by Shopify.

We encourage customers to review Shopify's applicable privacy notices for further information about Shopify's processing practices.

11. International Transfers of Personal Information

Loftavelle is based in the United Kingdom.

Shopify and other service providers may process, store, or access personal information in countries outside the United Kingdom.

Where this constitutes a restricted international transfer under applicable UK data-protection law, we will use or rely upon an appropriate lawful transfer mechanism.

Depending on the circumstances, this may include:

• UK adequacy regulations;

• The UK International Data Transfer Agreement (“IDTA”);

• The UK Addendum to approved EU Standard Contractual Clauses;

• Binding corporate rules where applicable;

• Another appropriate safeguard permitted by applicable UK law; or

• A lawful exception where applicable.

Where required, relevant transfer assessments or additional safeguards may also be used to help ensure that personal information receives the level of protection required under applicable UK data-protection law.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.

Retention periods may depend on:

• The type of personal information;

• The purpose of processing;

• The duration of our customer relationship;

• Whether an account remains active;

• Tax and accounting obligations;

• Transaction-record requirements;

• Return and warranty periods;

• Fraud-prevention requirements;

• Legal and regulatory obligations;

• Dispute resolution; and

• The need to establish, exercise, or defend legal claims.

When information is no longer reasonably required, we may delete, anonymise, aggregate, or securely dispose of it, subject to applicable legal obligations.

13. Security

We use reasonable administrative, organisational, and technical safeguards designed to protect personal information against:

• Unauthorised access;

• Unauthorised disclosure;

• Loss;

• Misuse;

• Alteration; and

• Destruction.

However, no internet transmission, website, network, database, or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their passwords, account credentials, and authentication information.

If you believe your account or personal information has been compromised in connection with Loftavelle, please contact us promptly.

Where a personal-data breach occurs, we will take the steps required by applicable law, which may include notifying the relevant supervisory authority or affected individuals where legally required.

14. Your UK Data Protection Rights

Depending on the circumstances and applicable law, you may have rights concerning your personal information.

Right to Be Informed

You have the right to receive information about how and why your personal information is processed.

Right of Access

You may request confirmation of whether we process your personal information and request access to relevant personal information.

Right to Rectification

You may request correction of inaccurate personal information or completion of incomplete information.

Right to Erasure

In certain circumstances, you may request deletion of your personal information.

The right to erasure is not absolute and may be subject to applicable legal exceptions.

Right to Restrict Processing

In certain circumstances, you may request restriction of the processing of your personal information.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used, machine-readable format.

Where legally and technically applicable, you may also request that qualifying information be transferred to another organisation.

Right to Object

You may have the right to object to certain processing based on legitimate interests or recognised legitimate interests where applicable.

You have the right to object to the use of your personal information for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Rights Relating to Automated Decisions

Where applicable, you may have rights concerning certain decisions based solely on automated processing that produce legal or similarly significant effects.

These rights are subject to applicable legal conditions, limitations, and exemptions.

15. How to Exercise Your Privacy Rights

To exercise an applicable privacy right, please contact:

Email: nosebennetts6366@hotmail.com

Where possible, use the subject line:

Privacy Request

Please describe your request and provide enough information for us to identify the relevant records.

We may request additional information where reasonably necessary to verify your identity and protect personal information against unauthorised access or disclosure.

We will respond within the period required by applicable law.

For requests covered by UK data-protection law, we will generally respond without undue delay and within one calendar month, subject to any extension permitted by law.

Where applicable law permits additional time for a complex request or multiple requests, we may extend the response period and provide any notice required by law.

Applicable privacy rights are generally available without charge, although applicable law may permit a reasonable fee or refusal in limited circumstances, such as where a request is manifestly unfounded or excessive.

Where permitted by law, an authorised representative may submit a request on your behalf, although we may request appropriate evidence of authorisation and identity verification.

16. Privacy Rights Outside the United Kingdom

Customers located outside the United Kingdom may have additional privacy rights under laws applicable in their jurisdiction.

Depending on applicable law, these may include rights to:

• Access personal information;

• Correct inaccurate information;

• Request deletion;

• Obtain a portable copy of certain information;

• Opt out of direct marketing;

• Opt out of targeted advertising;

• Opt out of processing treated as a sale or sharing;

• Limit certain uses of sensitive information;

• Appeal certain privacy-request decisions; or

• Exercise applicable privacy rights without unlawful discrimination.

These rights apply only where the relevant law applies to Loftavelle and the particular processing activity.

17. Children's Privacy

The Services are intended for a general shopping audience and are not specifically directed towards children.

We do not knowingly collect or process children's personal information in circumstances prohibited by applicable law.

Where parental authorisation, age verification, or another legal requirement applies to the processing of a child's personal information, we will comply with applicable requirements.

If you believe a child has provided personal information to us unlawfully or inappropriately, please contact us so that we can review the matter and take appropriate action.

18. Third-Party Websites and Services

The Services may contain links to websites, applications, platforms, or services operated by independent third parties.

Their privacy and security practices are governed by their own policies.

Loftavelle does not control and is not responsible for the privacy practices of independent third parties.

We encourage you to review the applicable privacy notice before providing personal information directly to an independent third party.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our operations;

• The Services;

• Technology;

• Service providers;

• Privacy practices;

• Advertising practices; or

• Legal and regulatory requirements.

When this Policy is updated, we will publish the revised version on https://loftavelle.com and update the “Last updated” date.

Where applicable law requires additional notice or consent for a material change, we will provide such notice or obtain consent as required.

20. Complaints

If you have a question or concern about how Loftavelle handles personal information, please contact us so that we can review the matter.

You may also have the right to lodge a complaint with the United Kingdom's data-protection supervisory authority:

Information Commissioner's Office (ICO)

Contacting Loftavelle first does not prevent you from exercising your right to contact the ICO or another competent supervisory authority where applicable.

21. Contact Us

For privacy questions, requests, or complaints, please contact:

Privacy Contact — Loftavelle

Website: https://loftavelle.com
Email: nosebennetts6366@hotmail.com
Phone: +44 7860 337605
Business Address:
2 Park View
Hadley Road
Telford
TF2 6AJ
United Kingdom