Privacy policy

Last updated: 7 October 2026

LIVMAÉ operates this online shop and the associated website, including all content, features, products and services (the “Services”). The shop runs on the Shopify platform. This privacy policy describes how we collect, use and share personal data when you visit our shop, order from us or communicate with us.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is the operator of this online shop. You’ll find the provider details in the legal notice (Impressum). For data protection questions, you can reach us by email at shopify.livmae@gmail.com.

What data we collect

  • Contact details: name, billing and delivery address, phone number and email address.
  • Payment details: information about the payment method and payment confirmation. Payment data is processed by the payment service providers.
  • Account details: username, password, settings.
  • Order details: items you view, add to your cart, buy, return or cancel, and previous orders.
  • Communications: the content of your messages to us, for example support requests.
  • Device data: information about your device, browser and network connection, IP address and other identifiers.
  • Usage data: information about how and when you use our Services.

Sources of data

  • Directly from you, for example when you order, create an account or write to us.
  • Automatically through your device when you use the shop, including through cookies and similar technologies.
  • From service providers we use for technical services.
  • From partners or other third parties.

How and on what legal basis we use data

  • Providing and improving the Services (Art. 6(1)(b) and (f) GDPR): processing orders, payments, shipping, returns and refunds, managing your account and improving our offering.
  • Marketing and advertising (Art. 6(1)(a) and (f) GDPR): sending marketing emails and ads where you have consented or the legal requirements are met.
  • Security and fraud prevention (Art. 6(1)(f) GDPR): protecting your account, processing payments securely, detecting and preventing misuse.
  • Communicating with you (Art. 6(1)(b) and (f) GDPR): customer service and answering your enquiries.
  • Legal obligations (Art. 6(1)(c) GDPR): for example tax retention obligations.

Sharing of data

We only share personal data where necessary or where you have consented, for example with:

  • Shopify and service providers for IT, payment processing, data analysis, customer service, storage, shipping and logistics.
  • Business and marketing partners, where you have consented to the relevant cookies and advertising. They process data in accordance with their own privacy notices.
  • Third parties when you ask us to or consent, for example the carrier.
  • Authorities or courts where we are legally required to, and to enforce our rights.

Working with Shopify

Our shop is hosted by Shopify. Shopify collects and processes personal data about your access to and use of the Services in order to provide and improve them. Information you submit is transmitted to Shopify and to third parties that may be located in countries other than your country of residence. Where Shopify processes data as an independent controller, Shopify is also responsible for responding to your requests regarding your rights. You can find out more in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Links to other websites

Our shop may contain links to third-party websites. We are not responsible for their privacy and security practices. Please read the privacy notices of these providers.

Children

Our Services are not directed at children. We do not knowingly collect personal data from minors. If you are a parent or guardian and your child has provided us with data, please contact us so that we can delete it.

Security and retention

No security measure is perfect, and we cannot guarantee absolute security. Please do not send confidential information through insecure channels. How long we keep data depends on whether we need it to perform the contract, manage your account, meet legal obligations or enforce claims.

Your rights

Under the GDPR, you have the following rights:

  • Access to the data stored about you.
  • Rectification of inaccurate data.
  • Erasure of your data, unless a retention obligation applies.
  • Restriction of processing.
  • Data portability, meaning receiving your data in a common format.
  • Objection to processing based on legitimate interests.
  • Withdrawal of consent with effect for the future. The lawfulness of processing carried out until then remains unaffected.
  • Unsubscribing from marketing emails at any time via the unsubscribe link in the email. You will continue to receive messages about your account or orders.

To exercise your rights, write to us using the contact details below. We may need to verify your identity. We will not discriminate against you for exercising your rights.

Complaints

You have the right to lodge a complaint with a data protection supervisory authority. You can find a list of supervisory authorities here. If you live in the United Kingdom, you can contact the Information Commissioner’s Office (ICO).

International data transfers

We may process personal data outside the country in which you live. For transfers from the European Economic Area to countries without a recognised adequate level of data protection, we rely on recognised mechanisms such as the European Commission’s Standard Contractual Clauses.

Changes to this policy

We may update this privacy policy, for example when our processes change or for legal reasons. We will publish the new version on this page with an updated date.

Contact

If you have questions about data protection or want to exercise your rights, you can reach us by email at shopify.livmae@gmail.com.