Privacy Policy

Last updated: September 17, 2026

LaCélie operates this online store and website, including the related content, features, products and services (together, the “Services”). The Services are powered by Shopify.

This Privacy Policy explains how LaCélie collects, uses, shares and protects personal information when you visit or use the Services, make a purchase, create an account, subscribe to communications, complete a quiz, submit a review or otherwise contact us.

1. Personal information we collect

Depending on how you interact with the Services, we may collect or process:

• Contact information, such as your name, email address, telephone number, billing address and shipping address.

• Order and transaction information, such as products viewed, added to your cart or purchased, order history, returns, refunds, discounts and delivery information.

• Payment information. Payments are processed by Shopify and other payment providers. LaCélie does not generally receive complete payment-card details.

• Account information, such as login details, account preferences and subscription information.

• Communications, including customer-support enquiries and other messages you send to us.

• Review, quiz and feedback information, including ratings, written reviews, quiz answers, product preferences and information you choose to submit.

• Device and usage information, including IP address, browser and device type, operating system, referring page, pages viewed, interactions with the Services and approximate location derived from your IP address.

• Marketing and attribution information, including advertising click identifiers and campaign parameters such as GCLID and UTM values.

• Preference and personalisation information, such as country, currency, cookie choices, recently viewed products and on-site experience or test variations.

We ask that you do not submit sensitive personal information through reviews, quizzes, support messages or other free-text fields unless it is necessary for us to provide a service you requested.

2. How we collect personal information

We may collect personal information:

• directly from you, including when you place an order, create an account, contact us, submit a review, complete a quiz or subscribe to marketing;

• automatically when you use the Services, through cookies, pixels, tags, local storage and similar technologies;

• from Shopify and service providers that support our store;

• from advertising, analytics, marketing and business partners, where permitted by law.

3. How we use personal information

We may use personal information to:

• provide, operate and improve the Services;

• process payments, orders, deliveries, returns and refunds;

• create and manage customer accounts and subscriptions;

• provide customer service and respond to enquiries;

• display reviews, product recommendations and personalised store features;

• administer quizzes, promotions, gifts and on-site experiments;

• send service messages and, where permitted, marketing communications;

• measure store performance and understand how visitors use the Services;

• measure advertising performance and attribute visits or orders to campaigns;

• detect fraud, abuse, security incidents and other harmful activity;

• comply with legal obligations and enforce our terms and policies.

Where the GDPR or UK GDPR applies, we process personal information on one or more of the following legal bases: performance of a contract, compliance with a legal obligation, our legitimate interests, your consent, or another basis permitted by law. Where we rely on consent, you may withdraw it at any time.

4. Cookies and similar technologies

We and our service providers use cookies and similar technologies, including pixels, tags, local storage and session storage.

These technologies may fall into the following categories:

• Strictly necessary: required for essential store functions such as security, checkout, shopping-cart operation, account access, fraud prevention and remembering your privacy choices.

• Functional: remember preferences and enable optional functions, such as country, currency, layout choices, subscriptions, reviews, quizzes and promotional features.

• Analytics: help us understand store usage and performance, including page visits, customer journeys, technical issues and on-site testing.

• Personalisation: remember products viewed or tailor content, recommendations and store experiences.

• Marketing and advertising: measure campaigns, attribute visits and orders to advertising, and support relevant advertising on other websites or services.

Where applicable law requires prior consent, we use non-essential analytics, personalisation and marketing technologies only after consent has been provided. You can accept, reject or manage non-essential technologies through our cookie banner. You can later change or withdraw your choice using the Cookie preferences link available through the store’s privacy controls.

You may also block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Services, including the cart or checkout, from working correctly.

Some technologies used by our service providers may transfer information to countries outside your place of residence. Further information is provided under International transfers below.

5. Service providers and other recipients

We may disclose personal information to service providers and other recipients where necessary to operate the Services, fulfil your requests or pursue the purposes described in this Privacy Policy. These recipients may include:

• Shopify, which hosts and operates the ecommerce platform, checkout and related services;

• payment, fraud-prevention, fulfilment, shipping and customer-support providers;

• marketing and communications providers, including email and messaging platforms;

• analytics and experience-measurement providers, including Google services and Contentsquare;

• advertising and attribution providers, which may receive campaign identifiers and information about store interactions;

• review, quiz and customer-feedback providers, including Okendo, RevenueHunt and Google services used to process submitted feedback;

• subscription and customer-account providers, including Skio;

• promotion and gifting providers, including EasyGift;

• landing-page, personalisation and experimentation providers, which may include Replo, Intelligems and similar services;

• professional advisers, regulators, courts, law-enforcement authorities or other parties where disclosure is required or permitted by law;

• parties involved in a merger, sale, restructuring or other business transaction.

Service providers process information under their own terms and privacy notices and, where applicable, agreements with LaCélie.

6. Shopify

The Services are powered by Shopify. Information submitted through or collected when using the Services is shared with Shopify so that Shopify can provide and improve its services, support checkout and payments, prevent fraud and provide relevant store features.

Certain Shopify features may use information about your interactions with LaCélie, Shopify and other Shopify merchants. For more information, please review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

7. Marketing communications

If you subscribe to marketing, we may send you promotional emails or other communications. You can unsubscribe using the link included in each marketing email. Opting out of marketing does not prevent us from sending non-promotional messages relating to your account, orders, subscriptions or customer-service requests.

8. Targeted advertising and data-sharing choices

Depending on where you live, you may have the right to opt out of the sale or sharing of personal information or its use for targeted advertising, as those terms are defined by applicable law.

You can submit an applicable opt-out request through our data-sharing opt-out page. Where required, we also respond to recognised Global Privacy Control signals.

9. International transfers

LaCélie and its service providers may process personal information in countries other than the country where you live, including the United States. Where required, we rely on recognised safeguards such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining accounts, completing transactions, complying with tax and legal obligations, resolving disputes, preventing fraud and enforcing agreements.

Retention periods vary depending on the type of information, the purpose of processing and applicable legal requirements. Marketing identifiers and browser-storage items may remain for the duration specified by the relevant technology or until you clear them, withdraw consent or the information is deleted in accordance with our retention practices.

11. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information. However, no security measure or transmission method is completely secure, and we cannot guarantee absolute security.

12. Your privacy rights

Depending on where you live, you may have rights relating to your personal information, including the right to:

• request access to the personal information we hold about you;

• request correction or deletion;

• receive a portable copy of certain information;

• object to or restrict certain processing;

• withdraw consent where processing is based on consent;

• opt out of targeted advertising or certain data sharing;

• lodge a complaint with the relevant data-protection authority;

• appeal a decision concerning your privacy request, where applicable.

These rights are not absolute and may be subject to legal exceptions. We may need to verify your identity before completing a request. You may exercise applicable rights by contacting us at support@lacelie.com or by using the privacy controls available through the Services.

Residents of the European Economic Area or United Kingdom may also contact their local data-protection authority. A list of EEA authorities is available from the European Data Protection Board.

13. Children’s privacy

The Services are not intended for children, and we do not knowingly collect personal information from children below the age at which they may legally provide consent in their jurisdiction. If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

14. Third-party websites

The Services may contain links to websites or platforms operated by third parties. We are not responsible for their privacy or security practices. We recommend reviewing their policies before providing personal information.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Services, our practices or applicable law. We will publish the revised version and update the date at the top of this page. We will provide additional notice where required by law.

16. Contact us

For questions, privacy requests or complaints, contact:

LaCélie
Email: support@lacelie.com

For purposes of applicable data-protection law, the legally responsible data controller must be the entity that actually operates LaCélie and determines how customer personal information is used. The correct legal entity name and any legally required business address or representative details must be confirmed before this policy is published.