We take the protection and security of your personal information seriously. This Privacy Policy explains what data we collect, why it is collected, how it is used, and the rights you have over your personal information.

Data Controller
Lavirel is owned and operated by Effelin Commerce LLC, which acts as the data controller responsible for personal data processing.

Personal Data We Collect
We collect only data necessary for service operation, including order information, account details, website usage data collected with consent, and marketing data where explicit consent has been provided.

Purposes and Legal Bases for Processing
Personal data is processed for order fulfilment, legal compliance, customer support, fraud prevention, and analytics or marketing activities based on applicable legal grounds under United States federal and state privacy laws.

Data Sharing and Shopify Platform
Personal data may be shared with payment providers, logistics partners, and IT service providers where required. Our store operates on the Shopify platform.

• Shopify Terms of Service
• Shopify Privacy Policy

Payments and Security
Payment transactions are processed in compliance with PCI-DSS standards and retained only as long as legally required.

Cookies and Analytics
Essential cookies are used for website functionality. Analytical and marketing cookies are applied only with user consent. Google Analytics is used with anonymized IP addresses.

You can manage cookie preferences via the cookie banner. More information is available in the Shopify Cookie Policy.

Data Security and Retention
All personal data is protected using encryption and secure storage. Data is retained only for as long as necessary and is securely deleted or anonymized thereafter.

Scope and Acceptance
This Privacy Policy applies to your access to and use of our Website, including browsing, account registration, and purchases made through the Website.

This Privacy Policy should be read together with our Terms of Service, which govern the general use of the Website.

By accessing or continuing to use the Website, you acknowledge that you have read and understood this Privacy Policy.

Your Data Protection Rights
You have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Requests can be submitted to info@lavirel.com.

International Customers – UK & EU/EEA (GDPR)
If you are located in the United Kingdom or the European Union/EEA, your personal data is processed in accordance with the UK GDPR and the EU General Data Protection Regulation (GDPR). Effelin Commerce LLC is the data controller. We process your data to fulfil your order (contract), for our legitimate business interests, to comply with legal obligations, and with your consent where required (for example, marketing). You have the right to access, rectify, erase, restrict, or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time. You may also lodge a complaint with your local data protection authority — in the United Kingdom, the Information Commissioner’s Office (ICO); in Spain, the Agencia Española de Protección de Datos (AEPD). Where your data is transferred outside the UK or EEA (including to the United States), we rely on appropriate safeguards such as Standard Contractual Clauses. To exercise any of these rights, contact info@lavirel.com.

International Transfers
Where data is transferred outside the United States, appropriate safeguards such as contractual protections are applied.

Policy Updates
This Privacy Policy may be updated periodically. The most recent version will always be available on the Website.