GDPR & Cookies
1. GDPR / Data Protection Notice
Data Protection Notice
At Lust Not Lost, we respect your privacy and are committed to handling your personal data lawfully, fairly, and transparently.
We collect and process personal data only where we have a valid legal basis to do so, including:
- to perform a contract with you, such as processing and fulfilling your order;
- to respond to your inquiries and provide customer support;
- to comply with legal and regulatory obligations;
- where necessary for our legitimate business interests, provided these do not override your rights and freedoms;
- where required, based on your consent, including for marketing communications and certain cookies or tracking technologies.
The types of personal data we may process include:
- your name;
- billing and shipping address;
- email address;
- phone number;
- payment-related information provided through secure third-party payment processors;
- order history;
- correspondence you send to us;
- technical information such as IP address, browser type, device information, and website usage data.
We use your data for purposes including:
- order processing and delivery;
- fraud prevention and transaction security;
- customer service;
- record-keeping and accounting;
- improving our website, services, and user experience;
- sending updates, newsletters, or promotional messages where you have agreed to receive them.
We do not sell your personal data.
We may share your data with trusted third parties only where necessary, such as:
- payment processors;
- shipping and logistics partners;
- website hosting, email, and technology service providers;
- legal, tax, or regulatory authorities where required by law.
Where personal data is transferred outside your country or outside the European Economic Area, we take reasonable steps to ensure an appropriate level of protection, including contractual safeguards where applicable.
You may have rights under applicable data protection law, including the right to:
- access your personal data;
- correct inaccurate data;
- request deletion of your data;
- restrict certain processing;
- object to certain processing;
- withdraw consent where processing is based on consent;
- request data portability, where applicable;
- lodge a complaint with a competent supervisory authority.
To exercise any of these rights, please contact us at:
[[email protected]]
We retain personal data only for as long as reasonably necessary for the purposes set out above, including to comply with legal, tax, accounting, fraud-prevention, and dispute-resolution obligations.
If you believe your personal data has been handled unlawfully or unfairly, you may contact us first so we can try to resolve the issue, and you may also contact the relevant supervisory authority in your jurisdiction.