When we refer to "personal information," we mean information that identifies you or can reasonably be linked to you or another person. This does not include anonymized or de-identified information from which you cannot reasonably be identified.

Depending on how you interact with our Services, your location, and as permitted or required by applicable law, we may collect or process the following categories:

We may collect personal information from the following sources:

• Directly from you — when you create an account, visit or use our Services, contact us, or provide your information in any other way.
• Automatically through the Services — from your device when you use our products or visit our website, including through cookies and similar technologies.
• From our service providers — when we engage them to enable certain technologies and they collect or process your information on our behalf.
• From our partners or other third parties.

• Processing your payments and fulfilling your orders
• Remembering your preferences and items of interest
• Sending account-related notifications
• Processing purchases, returns, and exchanges
• Creating, maintaining, and managing your account
• Arranging shipping and facilitating returns
• Enabling you to post reviews
• Creating a personalized shopping experience, such as recommending relevant products

• Sending promotional communications via email, SMS, or post
• Displaying targeted online advertising on our Services and other websites
• Using past purchases, cart activity, and other on-site behavior to inform recommendations

• Authenticating your account
• Providing a safe and secure checkout experience
• Detecting, investigating, and acting on fraudulent, unlawful, or unsafe activity
• Protecting public safety and securing our Services

• Providing customer support and responding to your inquiries
• Maintaining our business relationship with you

• Complying with applicable law or valid legal processes
• Responding to requests from law enforcement or government agencies
• Investigating or participating in legal proceedings
• Enforcing our terms or investigating potential violations

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes in accordance with this policy. These circumstances include:

• Shopify and other vendors providing services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping)
• Business and marketing partners to deliver marketing services and advertising to you — they will use your information in accordance with their own privacy notices
• At your direction or with your consent — such as shipping products to you or through social media tools and integrated sign-in
• Our affiliates or within our corporate group
• In business transactions such as a merger or insolvency, or to comply with legal obligations, enforce our terms, or protect the rights of Liora, our users, or others

Our Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit through the Services will be transferred to and shared with Shopify, as well as with third parties who may be located in countries other than your own.

To support the protection and growth of our business, we use certain enhanced Shopify features that involve data obtained from your interactions with our store, other merchants, and with Shopify. In providing these features, Shopify may use aggregated personal information about your interactions across multiple stores and with Shopify.

In these circumstances, Shopify is responsible for processing your personal information and responding to requests to exercise your rights in relation to that processing. To learn more, visit Shopify's Consumer Privacy Policy or exercise your rights via the Shopify Privacy Portal at privacy.shopify.com/en.

Our Services may contain links to third-party websites or platforms. If you follow links to sites we do not own or control, you should review their privacy and security policies as well as their terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites.

Information you share in public or semi-public spaces — including on third-party social media platforms — may also be viewable by other users of those platforms without restriction. Our inclusion of such links does not imply endorsement of the content, owners, or operators of those platforms.

Our Services are not intended for use by children. We do not knowingly collect personal information about individuals who are under the age of majority in their jurisdiction. If you are a parent or guardian of a child who has provided us with their personal information, please contact us using the details below to request its deletion.

As of the effective date of this Privacy Policy, we have no actual knowledge that we "share" or "sell" (as defined under applicable law) the personal information of individuals under 16 years of age.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Additionally, information you send to us may not be secure in transit. We recommend against using unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on various factors — such as whether we need it to maintain your account, provide our Services, comply with legal obligations, resolve disputes, or enforce applicable agreements and policies.

Depending on where you are located, you may have some or all of the rights listed below. These rights are not absolute and may apply only in certain circumstances; in some cases, we may decline your request as permitted by law.

Please note that we may transfer, store, and process your personal information outside the country in which you reside.

Where we transfer your personal information outside the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as Standard Contractual Clauses issued by the European Commission, or equivalent contracts issued by the relevant UK authority, unless the transfer is to a country already deemed to provide an adequate level of protection.

We may update this Privacy Policy from time to time — including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on this website, update the "Last updated" date, and provide notice as required by applicable law.