Last updated: October 1, 2024

This Privacy Policy describes how Lapinmurre (hereinafter referred to as the “Site”, “we” or “our”) collects, uses and discloses your personal information when you visit our Site, use our services or make purchases at lapinmurre.myshopify.com (the “Site”) or otherwise communicate with us regarding the Site; these are collectively referred to as the “Services”.

In this Privacy Policy, “you” and “your” refer to you as a user of the Services, whether you are a customer, a website visitor, or any other individual whose information we have collected in accordance with this Privacy Policy.

Please read this Privacy Policy carefully.

Privacy Policy Changes

We may update this Privacy Policy from time to time, including to reflect changes in our practices and for other operational, legal or regulatory reasons. We will post the updated Privacy Policy on the Site, update the “Last Updated” date, and take other steps as required by applicable law.

How we collect and use your personal information

To provide the Services, we collect personal information about you from a variety of sources in the ways described below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses described below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable terms of use, and protect or defend the Services, our rights, the rights of our users, or others.

What personal data do we collect?

The types of personal information we collect about you depend on how you interact with our Site and use our Services. When we use the term “personal information,” we mean information that can identify you or that relates to, describes, or can be linked to you. The following sections describe the categories and specific types of personal information we collect.

Information we collect directly from you

Information that you send to us directly through our Services may include the following:

Contact information such as your name, address, telephone number and email address.

Order information such as your name, billing address, shipping address, payment confirmation, email address, and phone number.

Account information such as your username, password, security questions, and other information used for account security purposes.

Customer support information , such as information you choose to include in your communications with us, for example when you send a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may choose not to provide this information, but doing so may prevent you from using those features.

Information we collect about your use

We may also automatically collect certain information about your interactions with the Services (“ Usage Data ”). We may use cookies, pixels and similar technologies (“ Cookies ”) to do this. Usage Data may include information about how you use our Site and your account, and may include information about your device, browser information, information about your network connection, your IP address and other information about your interactions with the Services.

Information we receive from third parties

We may also receive information about you from third parties, such as vendors and service providers, who may collect information on our behalf; these may include:

companies that support our Site and Services, such as Shopify.

Our payment processors, who collect payment information (e.g. bank account, credit or debit card details, billing address) in order to process your payment and fulfill your order, as well as to provide you with the products or services you have requested, in order to perform our contract with you.

When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.

Any information we receive from third parties will be processed in accordance with this Privacy Policy. Please also see the section Third Party Websites and Links below.

How we use your personal information

Providing products and services. We use your personal information to provide you with the Services so that we can fulfill our contract with you; this includes processing your payments, fulfilling your orders, sending you notifications related to your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise managing your account, arranging for delivery, facilitating returns, and other features and functionality related to your account. We may also enhance your shopping experience by allowing Shopify to connect your account with other Shopify services that you may choose to use. In this case, Shopify will process your information in accordance with its own Privacy Policy and Consumer Privacy Policy.

Marketing and advertising. We may use your personal information for marketing and promotional purposes, such as sending you marketing, advertising and promotional communications by email, text message or post, and displaying advertisements for our products or services. This may include using your personal information to better tailor the Services and the advertising that appears on our Site and other websites. If you are a resident of the European Economic Area, the legal basis for these processing activities is our legitimate interest in selling our products in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Security and fraud prevention. We use your personal information to detect, investigate, or take action regarding any fraudulent, illegal, or harmful activity. If you choose to use the Services and register for an account, you are responsible for keeping your account credentials secure. We recommend that you do not share your username, password, or other access information with anyone else. If you believe that your account has been compromised, please contact us immediately. If you are a resident of the European Economic Area, the legal basis for these data processing activities is our legitimate interest in securing the operation of our website for you and our other customers in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Communicating with you and improving our service. We use your personal data to provide you with customer support and to improve our Services. This is in our legitimate interests to respond to you, provide you with efficient services and maintain our business relationship with you in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Cookies

Like many websites, we use Cookies on our Site. For more information about the Cookies we use in connection with our store using Shopify, please visit https://www.shopify.com/legal/cookies . We use Cookies to operate and improve our Site and Services (including remembering your actions and preferences), to perform analytics, and to better understand user interactions (to manage, improve, and optimize the Services in accordance with our legitimate interests). We may also allow third parties and service providers to use Cookies on our Site to better personalize the services, products, and advertisements on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can set your browser to delete or reject Cookies. Please note that deleting or blocking Cookies may negatively impact your user experience and may cause some Services, such as certain features and general functionality, to not function properly or to no longer be available. In addition, blocking Cookies may not completely prevent how we share information with third parties, such as advertising partners.

How we disclose personal data

In certain circumstances, we may disclose your personal data to third parties for the performance of a contract, legal purposes and other reasons in accordance with this Privacy Policy. Such circumstances may include, for example, the following and may involve the following parties:

Vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment and delivery).

Business and marketing partners who provide services and advertise. Our business and marketing partners use your information in accordance with their own privacy policies.

When you direct or request us to disclose certain information to third parties or otherwise consent to its disclosure, such as to deliver products to you or by using social media widgets or login integrations with your consent.

To our partners and otherwise within our group in accordance with our legitimate interests to support our business.

In connection with business transactions, such as a merger or bankruptcy, to comply with our legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce applicable terms of use, and to protect or defend the Services, our rights, the rights of our users, or the rights of others.

We disclose personal information and sensitive personal information about users in the following categories for the purposes specified above in the sections "How We Collect and Use Your Personal Information" and "How We Share Personal Information" :

ClassRecipient categories

Identifiers, such as basic contact information and certain subscription and account information

Commercial information, such as order information, purchase information, and customer support information

Online activity related to the Internet or other network, such as Usage Data

Geolocation information, such as locations determined by IP address or other technical measures

Vendors and third parties who perform services on our behalf (such as internet service providers, payment processors, distribution partners, customer support partners, and data analytics partners)

Business and marketing partners

Partners

We do not use or disclose sensitive personal information without your consent or to infer your characteristics.

With your consent, we will share personal information for advertising and marketing purposes as described below.

Third-party websites and links

Our Site may contain links to websites or other online platforms operated by third parties. If you follow links to sites that are not operated by us or that we do not control, you should review the applicable privacy and security policies and other terms and conditions. We do not guarantee the privacy or security of such sites, nor are we responsible for the accuracy, completeness or reliability of the information on such sites. Information that you disclose through public or semi-public channels, including information you share on third-party social media platforms, may also be visible to other users of the Services and/or users of such third-party platforms, without limitation as to their use by us or the third party. Our inclusion of such links does not, in itself, imply endorsement by us of the content on such platforms or their owners or operators, except as otherwise stated in the Services.

Children's information

The Services are not intended for use by children, and we do not knowingly collect personal information from children. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact information below and request deletion of the information.

As of the Effective Date of this Privacy Policy, we are not aware of any “sharing” or “selling” (as those terms are defined in applicable law) personal information of anyone under the age of 16.

Security and storage of your data

Please note that no security measures are perfect or impenetrable, and we cannot guarantee “complete security.” In addition, any information you send to us may not be secure in transit. We recommend that you do not use unsecured channels to transmit sensitive or confidential information to us.

The retention period for your personal information depends on various factors, such as whether the information is necessary to maintain your account, ensure the provision of the Services, comply with legal obligations, resolve disputes, and enforce other applicable agreements and policies.

Your rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may only apply in certain circumstances, and in certain cases we may refuse your request where permitted by law.

Right to access/information : You may have the right to request access to the personal information we hold about you, including information about the ways in which we use and share your information.

Right to erasure : You may have the right to request that we erase personal information we hold about you.

Right to rectification : You may have the right to request that we correct inaccurate personal data we hold about you.

Right to portability : You may have the right to obtain a copy of the personal data we hold about you and, in certain cases and with certain exceptions, request that we transfer it to a third party.

Right to Opt Out of Selling, Sharing or Targeted Advertising : You may have the right to ask us not to “sell” and “share” your personal information and to object to the processing of your personal information for “targeted advertising”, as defined in applicable data protection law. Please note that if you visit our Site while you have the Global Privacy Control opt-out enabled, depending on your location, we will automatically treat this as a request to opt out of the “selling” and “sharing” of your information for the device and browser you use to visit the Site.

Restriction of processing : You may have the right to ask us to stop or restrict the processing of your personal data.

Withdrawing consent : Where we rely on your consent to process your personal information, you may have the right to withdraw that consent.

Appeal : You may have the right to appeal our decision if we refuse to process your request. You can do this by responding directly to our refusal.

Managing your communication preferences : We may send you promotional emails, and you can opt out of receiving these at any time by using the unsubscribe option at the bottom of any email we send you. If you opt out, we may still send you non-promotional emails, such as messages related to your account and subscriptions.

You can exercise these rights in the sections of the Site where this is stated or by contacting us using the contact details below.

We will not discriminate against you based on your exercise of these rights. We may need to collect information about you to verify your identity, such as your email address or account information, before we can provide a meaningful response to your request. Subject to applicable law, you may appoint an authorized representative to make requests or exercise your rights on your behalf. Before we will accept such a request from a representative, we will require the representative to demonstrate that they have been authorized by you to act on your behalf, and we may need to verify your identity directly. We will respond to your request in a timely manner as required by applicable law.

Complaints

If you wish to complain about the way we process your personal data, please contact us using the contact details below. If you are not satisfied with our response to your complaint, depending on your place of residence, you may have the right to appeal our decision by contacting us using the contact details below or by lodging a complaint with your local data protection authority. A list of data protection authorities in the European Economic Area can be found here.

International users

Please note that we may transfer, store and process your personal data outside of your country of residence. Employees located in these countries, as well as third-party service providers and partners, also process your personal data.

If we transfer your personal data outside of Europe, we will rely on the transfer methods recognised herein, such as the European Commission's Standard Contractual Clauses or, where applicable, equivalent contracts notified by the competent authority in the United Kingdom, unless the data is transferred to a country considered to provide an adequate level of protection.

Contact

If you have any questions about our data protection practices or this Privacy Policy, or if you would like to exercise any of your rights, please call us, email us at info@lapinmurre.com.

Within the scope of applicable data protection legislation and unless otherwise specifically stated, we are the controller of your personal data.