1. Introduction

At Lolocos, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or make a purchase. By using our website, you agree to the terms outlined in this policy.

2. Who We Are

Lolocos is an online skincare and cosmetic brand that provides products for external cosmetic use only.

We act as the “data controller” for the personal information you provide to us.

3. Information We Collect

We may collect the following types of personal information:

a) Personal Details

  • Full name
  • Email address
  • Phone number (if provided)

b) Order Information

  • Billing and shipping address
  • Purchased products
  • Order history

c) Payment Information

  • Payment is processed securely through third-party providers
  • We do not store full credit/debit card details

d) Technical Data

  • IP address
  • Browser type
  • Device information
  • Cookies and usage data

4. How We Use Your Information

We use your data to:

  • Process and fulfill orders
  • Communicate order updates
  • Provide customer support
  • Improve website performance and user experience
  • Prevent fraud and ensure security
  • Comply with legal obligations

We only use your information when necessary and in accordance with GDPR principles.

5. Legal Basis for Processing

We process your personal data based on:

  • Contractual necessity (to fulfill your order)
  • Legal obligations (tax, accounting, compliance)
  • Legitimate interests (fraud prevention, service improvement)
  • Your consent (marketing emails, if opted in)

6. Cookies

Our website uses cookies to:

  • Improve website functionality
  • Remember user preferences
  • Analyze website traffic and performance

You can disable cookies in your browser settings, but some features may not function properly.

7. Data Sharing

We do not sell your personal data.

However, we may share information with trusted third parties such as:

  • Payment processors (e.g., Stripe, PayPal)
  • Shipping and courier companies
  • IT and hosting providers
  • Marketing/email service providers

These third parties are required to handle your data securely and lawfully.

8. Data Storage & Security

We take appropriate security measures to protect your data from:

  • Unauthorized access
  • Loss
  • Misuse
  • Disclosure

Your data is stored securely on protected systems and retained only as long as necessary.

9. Your Rights (GDPR)

If you are located in the UK or EU, you have the right to:

  • Access your personal data
  • Request correction of
  • inaccurate data
    Request deletion of your data (“right to be forgotten”)
  • Object to data processing
  • Request data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us using the details below.

10. Data Retention

We retain your personal data only for as long as necessary to:

  • Fulfill orders
  • Meet legal and accounting requirements
  • Resolve disputes
  • Maintain business records

After this period, data is securely deleted.

11. Third-Party Links

Our website may contain links to external websites.

We are not responsible for the privacy practices or content of third-party sites.

12. Marketing Communications

If you opt in, we may send you emails about:

  • New products
  • Offers and promotions
  • Brand updates

You can unsubscribe at any time by clicking the “unsubscribe” link in emails or contacting us directly.

13. Children’s Privacy

Our website is not intended for individuals under the age of 18.

We do not knowingly collect personal data from minors.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated revision date.