Lor Ukraine – EU E-commerce Policy Package

Brand: Lor Ukraine
Legal entity: [LEGAL COMPANY NAME]
Registered address: [REGISTERED ADDRESS, ESTONIA]
Registry code: [REGISTRATION NUMBER]
VAT number: [VAT NUMBER, IF APPLICABLE]
Email: [CUSTOMER SERVICE EMAIL]
Website: [WEBSITE URL]

Last updated: 12 August 2026

Privacy Policy

Last updated: 12 August 2026

This Privacy Policy explains how [LEGAL COMPANY NAME], trading under the brand Lor Ukraine, collects, uses, stores, and discloses personal data when you visit [WEBSITE URL], place an order, contact us, or otherwise interact with our services.

We process personal data in accordance with applicable data protection law, including the General Data Protection Regulation (GDPR).

1. Data Controller

The controller responsible for your personal data is:

[LEGAL COMPANY NAME]
Brand: Lor Ukraine
Address: [REGISTERED ADDRESS, ESTONIA]
Registry code: [REGISTRATION NUMBER]
VAT number: [VAT NUMBER, IF APPLICABLE]
Email: [PRIVACY EMAIL]

2. Personal Data We Collect

Depending on how you interact with our store, we may collect:

Information you provide directly

• name and surname;
• billing address;
• shipping address;
• email address;
• telephone number;
• order details;
• information you provide when contacting customer service;
• information required to process returns, refunds, complaints, or warranty claims.

Payment information

Payments may be processed by third-party payment service providers. We may receive payment-related information such as payment status, transaction identifiers, or limited payment details.

Unless expressly stated otherwise, we do not require or intentionally store your full payment card number in our own systems.

Information collected automatically

When you visit our website, we may collect technical information such as:

• IP address;
• browser type and version;
• device information;
• operating system;
• pages viewed;
• approximate location derived from technical information;
• timestamps and interaction information; and
• information collected through cookies and similar technologies.

The use of non-essential cookies and similar technologies is subject to our applicable cookie consent mechanism and Cookie Policy.

3. How We Use Personal Data

We may process your personal data for the following purposes:

Order processing

To receive, process, fulfil, and deliver your order.

Payments

To facilitate and verify payment transactions.

Customer service

To respond to questions, complaints, return requests, and other customer communications.

Returns and refunds

To manage returns, withdrawals, refunds, exchanges, and legal guarantee claims.

Legal and accounting obligations

To comply with tax, accounting, consumer protection, fraud-prevention, and other legal obligations.

Security and fraud prevention

To protect our website, customers, business, and payment systems and to detect or prevent fraudulent or unlawful activity.

Marketing

Where permitted by law and, where required, based on your consent, we may use your information to send marketing communications.

You may unsubscribe from marketing communications at any time.

4. Legal Bases for Processing

Depending on the circumstances, we may rely on one or more of the following legal bases under the GDPR:

• performance of a contract;
• compliance with a legal obligation;
• our legitimate interests, where those interests are not overridden by your rights and freedoms; and
• your consent, where consent is required.

5. Sharing Personal Data

We may share personal data with service providers who help us operate our business, including:

• e-commerce and website providers;
• payment service providers;
• shipping and logistics providers;
• customer-service providers;
• IT, hosting, security, and analytics providers;
• accounting, legal, and professional advisers; and
• public authorities where required by law.

We only provide service providers with the information reasonably necessary for the relevant purpose and require appropriate contractual and security safeguards where required by law.

6. Shopify and Other Service Providers

Our online store may be operated using Shopify or other technology providers selected by us.

Where third-party services are used, personal data may be processed by those providers in accordance with their own privacy documentation and applicable data-processing arrangements.

The final list of processors and third-party providers will depend on the services actually enabled on [WEBSITE URL].

7. International Transfers

Where personal data is transferred outside the European Economic Area, we will use an appropriate legal mechanism under applicable data protection law, such as an adequacy decision or appropriate contractual safeguards, where required.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal, accounting, tax, dispute-resolution, and security requirements.

Different categories of information may therefore be retained for different periods.

Order and transaction records may need to be retained for periods required by applicable accounting and tax laws, even where you request deletion of other personal information.

9. Your Rights

Depending on the circumstances, you may have the right to:

• access your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact:

[PRIVACY EMAIL]

We may need to verify your identity before responding to certain requests.

10. Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority.

Once the company is registered, our specific supervisory authority information will be added here:

[SUPERVISORY AUTHORITY NAME]
[SUPERVISORY AUTHORITY WEBSITE]

11. Children's Data

Our services are intended for general consumers and are not knowingly directed at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, legal obligations, or data-processing activities change.

The latest version will always be published on [WEBSITE URL].

13. Contact

For privacy-related questions or requests, contact:

[LEGAL COMPANY NAME]
[REGISTERED ADDRESS, ESTONIA]
[PRIVACY EMAIL]