Legal
Privacy
Policy
Effective 16 July 2026 · lyvellashop.com
This Privacy Policy explains how LMTrade, trading as Lyvella (“we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you visit lyvellashop.com or place an order with us. LMTrade is the data controller for all personal data processed through this website. We serve customers throughout the United States, and we take our privacy obligations under applicable U.S. state privacy laws and Dutch law seriously.
As the data controller, LMTrade determines the purposes and means of processing your personal data in connection with the lyvellashop.com online store (trading as Lyvella). Shopify Inc. acts as a data processor on our behalf for platform and payment functions.
Registered entity
LMTrade (trading as Lyvella)
Trondheimstraat 10
7559JE Hengelo, Netherlands
KvK 94707278 · VAT NL005103934B84
Privacy contact
For all privacy-related requests:
info@lyvella-shop.com
+1 (800) 555-0134
lyvellashop.com
Data We Collect
We collect only the personal data that is necessary to fulfil your order, provide customer support, and operate our store lawfully. We do not collect data we do not need, and we do not retain data beyond the periods described in this Policy.
Personal Data
- Full name
- Email address
- Shipping address
- Billing address
- Phone number (if provided)
- IP address
- Browser type and version
- Device type and operating system
Order Data
- Items purchased and quantities
- Order history
- Payment method type (e.g., Visa, Mastercard — not full card number)
- Order number and transaction reference
- Shipping carrier and tracking number
| Category | Data collected | Source |
|---|---|---|
| Identity & contact | Full name, email address, phone number (if provided) | Provided by you at checkout |
| Shipping & billing | Street address, city, state, ZIP code | Provided by you at checkout |
| Order & transaction | Items ordered, quantities, prices, payment method type, order number, transaction reference | Generated at checkout; payment type from processor |
| Payment data | Card type and last 4 digits only — full card details processed exclusively by our PCI DSS-certified payment processor via Shopify Payments | Received from payment processor |
| Automatically collected | Cookies, session data, IP address, browser type, device type, pages visited, referral source, site analytics | Automatically collected via Shopify and analytics tools |
| Communications | Emails, support tickets, return enquiries, and messages sent to us | Provided by you when contacting us |
| Marketing preferences | Email marketing opt-in or opt-out status, communication preferences | Provided by you at checkout or via unsubscribe link |
What we do not collect: We do not collect sensitive personal data such as health information, racial or ethnic origin, religious beliefs, or biometric data. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a minor has provided us with personal data, please contact us at info@lyvella-shop.com and we will delete it promptly.
How We Use Your Data
We use your personal data only for the purposes listed below: to fulfil your order (order fulfilment), to prevent fraud and improve our site (business operations), to comply with legal obligations (tax and accounting compliance), and, where you have opted in, to send marketing communications (consent).
Order fulfilment
- Processing and confirming your order
- Payment processing via Shopify Payments
- Arranging shipping and providing tracking updates
- Managing returns, refunds, and exchanges
Customer service
- Responding to your enquiries and support requests
- Handling warranty and after-sales matters
- Sending order confirmations and shipping notifications
- Following up on unresolved issues
Legal & compliance
- Fraud prevention and detection
- Tax and accounting obligations
- Responding to lawful government or regulatory requests
- Site security and abuse prevention
Marketing (with consent)
- Sending promotional emails and product updates where you have opted in
- Site improvements via aggregated analytics data
- You may unsubscribe at any time via the link in any marketing email
| Data Type | Purpose | Basis for Processing |
|---|---|---|
| Name, address, contact | Order fulfilment, shipping, customer service | To fulfil your order |
| Payment method type | Payment processing, fraud prevention | To fulfil your order |
| Order history | Customer service, returns, legal compliance | To fulfil your order / Legal compliance |
| IP address, device data | Fraud prevention, security, site analytics | Business operations |
| Cookies, session data | Site functionality, traffic analysis (anonymised) | Business operations / Consent |
| Email address (marketing) | Promotional emails and product updates | Consent |
| Transaction records | Tax compliance, accounting records | Legal compliance |
Data Sharing & Third Parties
We share your personal data only with the service providers that are essential to operating our store and fulfilling your order. All third-party providers are bound by confidentiality and data processing obligations. We never sell your personal data to anyone, for any purpose, ever.
We never sell your personal data.
Lyvella does not sell, rent, trade, or otherwise transfer your personal information to any third party for their own marketing, commercial, or advertising purposes. Your data is used only to serve you.
Who we share data with
- Shopify Inc. — our e-commerce platform and payment processor. Processes order, customer, and payment data on our behalf under a data processing agreement.
- Payment processors (Shopify Payments, PayPal, Klarna) — process your payment securely under PCI DSS compliance. We share only what is required to authorise and complete your transaction.
- Shipping carriers — our contracted logistics and delivery partners. Your name and delivery address are shared to fulfil shipment and provide tracking.
- Analytics providers — anonymised, aggregated site traffic analysis. Does not receive personally identifiable information where possible.
- Email service provider (optional, marketing only) — receives your email address solely to send you communications you have consented to receive.
Who we do not share with
- Data brokers or data aggregators
- Social media platforms for advertising targeting without your consent
- Any third party for their own marketing purposes
- Any purchaser of personal data — we never sell data
- Any party outside the scope of order fulfilment and support without your explicit consent or a legal obligation requiring us to do so
Shopify processes your data on our behalf and is bound by strict data processing obligations.
Shopify Inc. provides the e-commerce platform and payment infrastructure that powers lyvellashop.com. In this role, Shopify acts as a data processor: it processes your personal data only on our instructions and subject to a Data Processing Agreement. Shopify maintains its own privacy programme and security infrastructure, including PCI DSS Level 1 compliance for payment data and SOC 2 certification for platform security.
International data transfers: Shopify may process data using infrastructure located in various countries, including the United States and the European Union. Regardless of where your data is processed, it remains protected in accordance with this Privacy Policy. Shopify's own privacy practices are described at shopify.com/legal/privacy.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies on lyvellashop.com to enable essential site functions, analyse traffic, and (where applicable) deliver personalised advertising. Consistent with applicable U.S. state privacy laws, you have the right to opt out of the use of cookies for targeted advertising and the “sale” or “sharing” of your personal information. We honour recognised opt-out preference signals, including the Global Privacy Control (GPC), where legally required. You can control cookie use through our cookie banner or your browser settings at any time.
| Cookie type | Purpose | Your control |
|---|---|---|
| Essential | Required for checkout, shopping cart, login session, security (CSRF protection), and fraud detection. The site cannot function correctly without these. | No opt-out — strictly necessary |
| Analytics | Traffic analysis and site improvement — page views, referral sources, device types. Data is anonymised and aggregated where possible. | Opt-out available |
| Marketing | Personalised advertising and retargeting. Used to show relevant Lyvella ads on third-party platforms. | Opt-out available (targeted advertising) |
How to opt out
- Cookie banner: Use our cookie consent banner to accept or decline non-essential cookies at any time.
- Browser settings: Most browsers allow you to block or delete cookies via their privacy or security settings. See your browser's help documentation for instructions.
- Global Privacy Control (GPC): We recognise the GPC browser signal as a valid opt-out of sale/sharing and targeted advertising, where required by applicable state law.
- Do Not Track: We honour browser Do Not Track (DNT) signals where technically feasible.
You may withdraw your cookie consent at any time via our cookie banner or by clearing cookies in your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. To exercise your data protection rights more broadly, email info@lyvella-shop.com.
Disabling essential cookies may prevent core site features from functioning correctly, including the shopping cart and checkout process. We recommend keeping essential cookies enabled for the best shopping experience on lyvellashop.com.
Your Privacy Rights
Depending on your state of residence, applicable state privacy laws — such as the California Consumer Privacy Act (CCPA/CPRA) and similar comprehensive privacy laws enacted in a growing number of other U.S. states — may provide you with specific rights regarding your personal information. This section describes those rights and how to exercise them.
You have meaningful rights over your personal information.
Depending on the state privacy law that applies to you, you may have rights including the right to know what personal information we collect, to access a copy of it, to correct or delete it, to opt out of its sale or sharing for targeted advertising, and to receive it in a portable format. These rights apply to personal information collected, used, or disclosed by LMTrade.
Right to Know / Access: You have the right to request confirmation of whether we process your personal data, and to obtain a copy of that data along with information about how and why it is processed.
Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
Right to Deletion: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., where retention is required to complete a transaction, comply with a legal obligation, or establish, exercise, or defend legal claims).
Right to Opt Out of Sale or Sharing: You have the right to opt out of the “sale” or “sharing” of your personal information for cross-context behavioural advertising, to the extent applicable. As stated throughout this Policy, we do not sell your personal data.
Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format, where technically feasible.
Right to Limit Use of Sensitive Information: Where applicable, you have the right to limit the use of sensitive personal information to purposes necessary to provide the goods or services you requested. As noted in Section 01, Lyvella does not collect sensitive personal information.
We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised your rights. In states that recognise a right to appeal, you may ask us to reconsider a denied request.
Email: info@lyvella-shop.com
Subject line: “Privacy Rights Request”
Include your full name, email address, and a description of your request. We may need to verify your identity before processing your request.
We will acknowledge your request within 10 business days and respond in full within 45 days of receipt. If additional time is needed due to the complexity or number of requests (up to an additional 45 days), we will notify you of the extension and the reason for it.
Authorised agents: You may designate an authorised agent to make a privacy rights request on your behalf, as permitted under applicable state law. To do so, your representative must provide written permission signed by you, and we may still require you to verify your identity directly with us to confirm the representative's authority.
Right to lodge a complaint: If you believe our handling of your personal data does not comply with applicable law, you have the right to contact the Federal Trade Commission (FTC), your state Attorney General's office, or another applicable regulator. We would, however, prefer the opportunity to resolve your concern directly first — please contact us at info@lyvella-shop.com.
We respond to all requests at no charge. We will not discriminate against you for exercising any of your privacy rights.
Data Retention & Security
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law. We implement industry-standard security measures to protect your data against unauthorised access, loss, or disclosure.
Order data: Retained for 7 years from the date of the transaction to comply with the Dutch fiscal retention obligation (fiscale bewaarplicht) enforced by the Belastingdienst (Dutch Tax Administration), as well as applicable U.S. state record-keeping requirements. After this period, data is securely deleted or anonymised.
Marketing data: Retained for as long as you remain subscribed to marketing communications. Upon unsubscribe, we retain a suppression record of your opt-out to ensure we do not contact you again. If no commercial email has been sent for 3 years, the record is reviewed and deleted unless you are also an active customer.
Account & customer data: Retained until you request deletion of your account or personal data (subject to our legal retention obligations). We will confirm deletion within 30 days of a valid request.
Analytics & cookies: Aggregated analytics data is retained in line with our analytics providers' default retention periods (typically 14–26 months). Session-level cookie data is purged at the end of each browsing session.
Your data is protected by industry-standard technical and organisational security controls.
We partner with Shopify, a leading e-commerce platform with robust security infrastructure and a dedicated security team, to store and process your personal information. Payment data is processed exclusively by PCI DSS-certified processors — we never see or store your full card details, CVV, or card expiry date.
Technical measures
- SSL/TLS encryption on all pages
- PCI DSS compliance via Shopify Payments
- Access controls and role-based authentication for internal systems
- Regular security updates and monitoring via Shopify's platform infrastructure
Organisational measures
- Access to personal data restricted to personnel who require it to fulfil orders or provide customer support
- Data processing agreements with all third-party service providers
- Incident response and breach notification procedures in place
While we implement strong security measures, no system is 100% secure and we cannot guarantee absolute security of your personal data. In the event of a data breach that creates a real risk to your rights, we will notify affected individuals and applicable state regulators as required under applicable U.S. state data breach notification laws, which generally require notification without unreasonable delay. Breach notifications will describe the nature of the breach, the data involved, likely consequences, and the steps we have taken or will take to address it.
Changes to This Policy & Contact
We review and update this Privacy Policy periodically to reflect changes in our business practices, applicable law, and the services we offer. When we make material changes, we will notify you.
Policy updates: We may update this Privacy Policy at any time. The effective date at the top of this page always reflects the current version. For material changes — those that meaningfully affect your privacy rights or how we handle your data — we will notify you by posting a prominent banner on lyvellashop.com before the changes take effect. We encourage you to review this Policy periodically.
Governing law: This Privacy Policy is governed by the laws of the Netherlands and, where applicable, U.S. federal and state law, without regard to conflict of law principles. Disputes will be submitted to the competent courts of the Netherlands, without prejudice to any mandatory consumer protection rights you may have in your own state of residence.
For all privacy-related enquiries, data access requests, correction requests, deletion requests, or complaints, please contact us using the details below. We take every privacy request seriously and will respond promptly and fairly.
Mailing address
LMTrade (trading as Lyvella)
Trondheimstraat 10
7559JE Hengelo, Netherlands
Contact details
Email: info@lyvella-shop.com
Phone: +1 (800) 555-0134
Website: lyvellashop.com
Subject line: “Privacy Request”
Response times: We aim to acknowledge your request within 10 business days and respond in full within 45 days of receipt, extendable by an additional 45 days for complex or numerous requests as permitted under applicable state privacy laws.
We take all privacy concerns seriously and will do our best to address your query promptly and fairly. While you always have the right to contact the Federal Trade Commission (FTC), your state Attorney General's office, or another applicable regulator, we ask that you contact us first at info@lyvella-shop.com so we have the opportunity to resolve your concern directly before escalation.
Privacy questions?
We respond to all privacy requests within 30–90 days depending on your request type.
LMTrade (trading as Lyvella)
Trondheimstraat 10
7559JE Hengelo, Netherlands
KvK 94707278 · VAT NL005103934B84