Security & Privacy

Our Commitment 

 

General Provisions

For the purposes of the California Consumer Privacy Act 2018 (“CCPA”) and other applicable data protection laws within the United States, Lovisa is both a “data controller” and a “data processor” of personal information that you provide to us.

This policy applies to both our online and in-store environments for customers in the United States.

What personal information do we collect?

The information we collect, and process may include but is not limited to the following:

• Your full name and title;
• Contact information such as your residential or mailing address, telephone or cell number and email address;
• Demographic information such as postcode, preferences and interests;
• Financial billing information that we require to process payment for our products;
• Information about your purchases through our online store including products and prices;
• Your interaction with Lovisa’s online communication platforms;
• Other information relevant to customer surveys and offers;
• Your legal identification document when provided to us when you obtain a piercing in store or when interacting with the personal information we have collected.

We do not collect “special categories” of personal data or data of a sensitive nature including race or ethnic origin, health information, philosophical or religious beliefs, sexual preferences or practices, or criminal convictions and records.

Any personal information that you choose to submit or post on our social media pages or other public forums may be read, collected, or used by others who visit these forums. Lovisa accepts no responsibility for the personal data that you choose to submit in these forums.

Why do we collect it?

We collect your data for several purposes, including but not limited to:

• To improve our understanding of you and your preferences to offer you the best online experience.
• To manage your queries and complaints for products and technical support matters through email, our chat function, telephone and through social media.
• To comply with legal obligations, court findings and decisions from authorities.
• For the purposes of loss prevention management, by ensuring that terms and conditions are being followed and to detect and prevent misuse of our services.
• We collect and securely store your identification when you obtain a piercing in store to ensure compliance to local age restrictions.

Cookies

Like many other websites, our website may use ‘cookies’ from time to time.

Cookies are tiny files of information that are stored on your computer when you visit a website. We may use cookies to enable you to use certain features on our website, store your preferences, recognise you when you return to our website and maintain information about your use of our website.

Your explicit permission to store cookies on your device will be requested upon first use of our website. You can choose to disable cookies on your computer by changing the preferences or options menus in your browser. If you do not accept cookies, however, you will not be able to access your account information or make purchases on our websites.

Who can access your data?

Your details may be shared within Lovisa; however, we do not sell or swap your data to third parties. Any data that is forwarded to third parties is used only to provide you with our services. Any disclosure of your personal data must be for the primary purpose of providing products or services to you in accordance with the policy, or for another specified lawful purpose.

We may share information with any successor to all our part of our business.

Protecting your information

Any personal data collected by Lovisa will be processed fairly, lawfully, and in a transparent manner. “Processing” includes, but is not limited to, collection, storage, transfer, dissemination or erasure of personal information. Lovisa takes appropriate technical and organisational measures against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

However, to the extent that the Internet is not completely secure, we cannot guarantee that any of your personal information stored or sent to us will be completely safe. We encourage you to use caution when using internet to access our web sites, apps or social media.

How we secure your data

We have an obligation to ensure that your personal information is protected from unauthorised processing, accidental disclosure, access, loss, destruction or alteration. Accordingly, we have a range of technical security measures and procedures in place to ensure that your personal information is protected appropriately. These include but are not limited to:

• Restricting access to information systems through access control measures and authentication techniques;
• Encrypting sensitive data while at rest and in transmission;
• Providing information security training to internal employees;
• Binding employees and contractors to information security policies. 

Retention

Your personal information will be kept in an anonymous form for a period no longer than is reasonably required for Lovisa to achieve the purpose of the data.

Data collected which is defined under the “what information do we collect” section will be stored:

• For three 3 years since our last contact
• For the duration of your commercial relationship with Lovisa and 10 years thereafter, if You are a client i.e. you have made a purchase of our products or services.

Your personal data will then be archived to be used in the event of a litigation or dispute for the statute of limitation term applicable to the related purpose. If a judicial action is initiated, the personal information may be stored until the end of such action, including any potential periods for appeal, and will then be deleted or archived as permitted by applicable law.

Your personal data are then anonymized or deleted.

What are your rights?

Right to access

You have the right to request information on the personal data that Lovisa holds about you. You are entitled to know what personal information we are processing, why we have processed it, and whether we have shared your personal information. You may exercise your right to request access and to obtain copies of any personal data we have collected from you, and request that your personal data be provided to you in a format that can be easily read.

You can contact our Data Protection Officer using the contact details in the contact section of this policy and we will provide you with your personal data via email.

 

Right to erasure

You have the right to erase any personal data processed by Lovisa at any time except for in the following situations:

• You have an ongoing matter with our customer service team;
• You have an open order which has not yet been shipped;
• You are suspected of misusing, or have misused, our services within the last four years;
• You are suspected of a crime, and the personal data that Lovisa holds is to be used as evidence in connection with that crime.

Right to object

You have the right to object to the processing of your personal data that is done based on Lovisa’s legitimate interests. Lovisa will not continue to process the personal data unless we can demonstrate a legitimate ground which overrides your interest and rights, or due to legal claims.

You also have the right to object to direct marketing. You can opt out from Lovisa’s direct marketing by following the instructions contained in each marketing email.

Right to restriction

In limited circumstances, you have the right to request that Lovisa restricts the processing of your personal data. These circumstances include:

• If you object to a processing based on Lovisa’s legitimate interest, in which case Lovisa shall restrict all processing the data pending the verification of the legitimate interest;
• If your personal data is incorrect, in which case Lovisa will restrict the processing of your data pending verification of the accuracy of your data;
• If the processing is unlawful, in which case you can request restriction of your personal data as opposed to deletion;
• If Lovisa no longer requires your personal data but it is required by you to defend legal claims.

Antidiscrimination

You have the right to not be discriminated against for exercising your consumer rights under data protection laws.

Lovisa may offer financial incentives such as discounts and gift cards to customers who sign up to our email newsletter.

Breach

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, Lovisa will assess the risk to your rights and freedoms and if appropriate report this breach to the relevant authorities.

Changes to our Privacy Policy

We may amend this privacy policy from time to time by posting an updated privacy policy on this website.

Mobile Terms of Service

Lovisa Pty Ltd | America

Last updated: Nov. 10, 2022

The Lovisa mobile message service (the "Service") is operated by Lovisa Pty Ltd (“Lovisa”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.

By consenting to Lovisa’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Lovisa through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialling system or other technology. Service-related messages may include updates, alerts, and information (e.g., order updates, account alerts, etc.). Promotional messages may include promotions, specials, and other marketing offers (e.g., cart reminders).

You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Lovisa. Your participation in this program is completely voluntary.

We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.

You may opt out of the Service at any time. Text the single keyword command STOP to Lovisa or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device unless initiated by you. If you have subscribed to other Lovisa mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt-out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to Lovisa or email info@lovisa.com.

We may change any shortcode or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honouring requests made in such messages.

The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.

To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.

 --

Contact

To request access, deletion or restriction of your personal data please complete our Data Subject Access Request Form and submit it via email to our Data Protection Officer at privacy@lovisa.com. If you prefer, you can mail the completed form to us at:

Attn: Data Protection Officer

Lovisa America, LLC

5 Penn Plaza, 19th Floor
PMB #19108
New York, NY 10001  

If you have any questions relating to Lovisa’s Privacy Policy, please contact our Data Protection Officer via privacy@lovisa.com or by post at the address listed above.