Privacy Policy

Privacy Policy

This policy explains what personal data we collect, why, and what rights you have. It is written to meet the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

Who we are

The data controller is Lurivea, Sliema, Malta. For any privacy question or request, email luriveasupport@gmail.com.

What we collect

  • Order data: name, delivery address, email, phone, order contents and payment confirmation.
  • Marketing data: your email address if you subscribe to our list.
  • Technical data: IP address, device and browser type, pages viewed and referring site, collected via cookies and similar technologies.

We do not see or store your full card details. Payments are processed by our payment providers.

Why we use it, and our legal basis

  • To fulfil your order (process payment, ship, handle returns and support) — performance of a contract.
  • To meet accounting and tax obligations — legal obligation.
  • To send marketing emails — your consent, withdrawable at any time.
  • To measure and improve our store and advertising — your consent for non-essential cookies, otherwise our legitimate interest in running the shop.

Who we share it with

We share only what is necessary, with:

  • Shopify — our e-commerce platform and hosting.
  • Payment providers — to take payment securely.
  • MaltaPost — to deliver your parcel.
  • Meta (Facebook/Instagram) — advertising measurement, where you have consented to marketing cookies.

Some providers process data outside the EEA. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Cookies

Essential cookies keep the site and your cart working and cannot be switched off. Analytics and advertising cookies (including the Meta Pixel) are only set where you consent. You can change or withdraw your choice at any time via the cookie settings on our site or in your browser.

How long we keep it

Order records are kept for as long as required by Maltese tax and accounting law. Marketing data is kept until you unsubscribe. Analytics data is kept for a limited retention period set in each tool.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time. Email luriveasupport@gmail.com and we will respond within one month.

If you are unhappy with how we handled your data you may complain to the Office of the Information and Data Protection Commissioner (IDPC), Malta — idpc.org.mt

Changes

If we update this policy we will post the revised version on this page.

Lurivea, Sliema, Malta — luriveasupport@gmail.com