Privacy policy

Last updated: October 9, 2026

Elori Lane operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).

Elori Lane is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose, and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, use, processing, and disclosure of personal information.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you.

Personal information does not include information that has been anonymised or de-identified so that it can no longer reasonably be linked to an identifiable person.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

  • Contact details, including your name, billing address, shipping address, phone number, and email address.
  • Payment and financial information, including payment method information, transaction details, payment confirmation, and other payment-related information. Payment card information may be processed directly by Shopify or our payment providers.
  • Account information, including account credentials, preferences, and settings where account functionality is available.
  • Transaction information, including products you view, place in your cart, purchase, return, exchange, or cancel, and your transaction history.
  • Communications with us, including information you provide when contacting customer support or making an enquiry.
  • Device information, including information about your browser, device, network connection, IP address, and similar identifiers.
  • Usage information, including information about how and when you interact with or navigate the Services.
  • Marketing and advertising information, including information relating to your marketing preferences and interactions with advertising, where permitted by law.

2. Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you, including when you make a purchase, contact us, create an account, subscribe to marketing communications, or otherwise provide information to us.
  • Automatically through the Services, including through your device, browser, cookies, pixels, and similar technologies.
  • From Shopify and our service providers, including payment processors, fulfilment providers, shipping providers, analytics providers, customer support services, and other companies that help us operate the Services.
  • From advertising, marketing, or other business partners, where permitted by applicable law.

3. How We Use Your Personal Information

Depending on how you interact with us and the Services, we may use personal information for the following purposes:

Providing and Fulfilling the Services

We may use personal information to:

  • Process and fulfil orders
  • Process payments
  • Arrange shipping and delivery
  • Provide order confirmations and tracking information
  • Process returns, refunds, and replacements
  • Manage customer accounts
  • Respond to enquiries and provide customer support
  • Maintain and improve the shopping experience

Marketing and Advertising

Where permitted by law, we may use personal information to:

  • Send marketing and promotional communications
  • Measure the effectiveness of advertising
  • Show relevant advertisements
  • Understand how visitors interact with our store
  • Improve our marketing campaigns and customer experience

You may unsubscribe from marketing emails at any time using the unsubscribe link included in the email.

Security and Fraud Prevention

We may use personal information to:

  • Detect and prevent fraudulent or suspicious activity
  • Protect our customers and Services
  • Maintain account and payment security
  • Investigate misuse of the Services

Legal and Compliance Purposes

We may process personal information where necessary to:

  • Comply with applicable laws and regulations
  • Maintain legally required business or transaction records
  • Respond to lawful requests from courts, regulators, government agencies, or law enforcement
  • Establish, exercise, or defend legal claims
  • Enforce our Terms of Service and other policies

4. Lawful Bases for Processing

Where the UK GDPR or other applicable data protection law requires us to identify a lawful basis for processing your personal information, we may rely on one or more of the following bases depending on the purpose of the processing:

Performance of a Contract

We process certain personal information where it is necessary to perform our contract with you or take steps at your request before entering into a contract.

For example, this may include processing information to:

  • Process your order
  • Receive payment
  • Arrange fulfilment and delivery
  • Provide tracking information
  • Process returns, refunds, and replacements
  • Provide customer service relating to your purchase

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

These interests may include:

  • Operating and improving our store
  • Providing effective customer service
  • Preventing fraud and misuse
  • Maintaining the security of the Services
  • Understanding how customers use our store
  • Improving our products, services, and business operations

Where required, we assess whether our legitimate interests are balanced against your rights and interests before relying on this basis.

Consent

We may rely on your consent where required, including for certain:

  • Marketing communications
  • Advertising technologies
  • Analytics technologies
  • Non-essential cookies or similar tracking technologies

Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Legal Obligation

We may process personal information where necessary to comply with applicable legal obligations, including accounting, taxation, regulatory, fraud-prevention, and consumer-protection requirements.

5. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, and similar technologies to operate the Services, remember preferences, analyse website usage, maintain security, and support advertising and marketing activities.

Some cookies are strictly necessary for the website to function, such as cookies used for shopping-cart functionality, checkout, security, and authentication.

Other cookies or technologies, including certain analytics and advertising technologies, may not be strictly necessary.

Where required by applicable law, including UK rules, we will request your consent before placing or accessing non-essential cookies or similar technologies on your device.

You may manage your cookie preferences through the cookie or privacy controls made available on our website, where applicable.

You may also be able to control cookies using your browser settings.

6. How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate the Services or for legitimate purposes described in this Privacy Policy.

This may include:

  • Shopify, which hosts and supports our online store.
  • Payment processors that process payments and transactions.
  • Fulfilment and shipping providers that prepare and deliver orders.
  • Customer service and technology providers that support the operation of our store.
  • Analytics and advertising providers, where permitted by law and subject to any required consent.
  • Professional advisers, such as accountants, lawyers, insurers, or consultants where reasonably necessary.
  • Government authorities, regulators, courts, or law enforcement, where disclosure is legally required.
  • Business successors or counterparties in connection with a merger, sale, restructuring, financing, or other business transaction.

We may also disclose information where you direct us to do so or provide consent.

7. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes certain personal information about your access to and use of the Services in order to provide and improve Shopify’s services.

Information submitted through the Services may be transmitted to Shopify and to service providers located in countries other than the country where you reside.

Shopify may also process certain information independently for purposes described in its own privacy documentation.

To learn more about how Shopify processes personal information, you can review the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

Depending on where you live, you may also be able to exercise certain privacy rights through the Shopify Privacy Portal:

https://privacy.shopify.com/en

8. Third-Party Websites and Links

The Services may contain links to websites or online services operated by third parties.

If you follow a link to a third-party website, that third party’s privacy policy and practices will apply.

We are not responsible for the privacy, security, accuracy, or practices of third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party websites before providing personal information to them.

9. Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the applicable age of digital consent or majority in their jurisdiction.

If you are a parent or guardian and believe that a child has provided personal information to us, please contact us using the details below so we can review and, where appropriate, delete the information.

10. Security of Your Information

We take reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

We recommend that you avoid sending sensitive or confidential information through unsecured communication channels.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

  • Fulfil and administer orders
  • Provide customer support
  • Maintain transaction and business records
  • Resolve disputes
  • Prevent fraud
  • Enforce our agreements
  • Comply with tax, accounting, consumer protection, and other legal obligations

The exact retention period may vary depending on the type of information and the reason we hold it.

When determining how long to retain personal information, we consider factors including:

  • The nature and sensitivity of the information
  • The purpose for which it was collected
  • Whether we have an ongoing relationship with you
  • Applicable legal, tax, accounting, or regulatory requirements
  • The need to resolve disputes or establish, exercise, or defend legal claims

When personal information is no longer reasonably required, we will delete, anonymise, or otherwise securely dispose of it where appropriate.

12. Your Rights and Choices

Depending on where you live and subject to applicable law, you may have some or all of the following rights in relation to your personal information:

  • Right of Access — to request access to personal information we hold about you.
  • Right to Correction — to request correction of inaccurate or incomplete personal information.
  • Right to Deletion — to request deletion of personal information in certain circumstances.
  • Right to Data Portability — to request a copy of certain personal information in a portable format.
  • Right to Restrict Processing — to request that we limit certain processing activities.
  • Right to Object — to object to certain processing, including processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time.
  • Right to Manage Marketing Preferences — you may unsubscribe from promotional emails using the unsubscribe option included in those communications.

These rights are not absolute and may be subject to exceptions under applicable law.

We may need to verify your identity before processing certain requests.

We will respond to valid requests within the timeframe required by applicable law.

13. United Kingdom Privacy Rights

If you reside in the United Kingdom, applicable data protection law may provide additional rights concerning how your personal information is used.

This may include rights to:

  • Object to certain processing
  • Restrict certain processing
  • Withdraw consent
  • Request access, correction, deletion, or portability
  • Lodge a complaint with the Information Commissioner’s Office, or another relevant data protection authority

Where we rely on consent, withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.

Where we rely on legitimate interests, you may have the right to object to that processing in certain circumstances.

14. United States Privacy Rights

If you reside in the United States, you may have certain privacy rights depending on the state in which you live and the laws that apply.

These rights may include the right to:

  • Request access to personal information we hold about you
  • Request correction of inaccurate personal information
  • Request deletion of personal information in certain circumstances
  • Request a copy of certain personal information
  • Opt out of certain uses of personal information for targeted advertising, sale, or sharing, where applicable
  • Withdraw consent where applicable
  • Appeal a decision we make about a privacy request, where required by applicable law

We do not sell personal information for money.

However, where we use advertising or analytics technologies, certain disclosures or uses of information may be considered “sale”, “sharing”, or “targeted advertising” under some United States state privacy laws.

Where applicable, you may contact us to exercise any privacy rights available to you under applicable law.

We may need to verify your identity before processing your request.

15. Complaints

If you have questions or concerns about how we process your personal information, please contact us first using the details provided below.

Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.

For customers in the United Kingdom, information about data protection rights and complaints is available from the Information Commissioner’s Office.

You can find further information about your rights and how to make a complaint at ico.org.uk.

For customers in the United States, privacy rights and complaint options may vary depending on the state in which you live.

16. International Transfers

We, Shopify, and our service providers may transfer, store, or process personal information in countries other than the country where you live.

Where personal information is transferred outside the United Kingdom, we will rely on appropriate safeguards where required by applicable law.

These safeguards may include:

  • Adequacy regulations or decisions
  • Standard Contractual Clauses
  • The UK International Data Transfer Agreement
  • The UK Addendum to approved Standard Contractual Clauses
  • Other legally recognised transfer mechanisms

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our business practices
  • The Services
  • Technology
  • Legal or regulatory requirements

When we make changes, we will update the “Last updated” date at the top of this page and provide any additional notice required by applicable law.

18. Contact

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise any applicable privacy rights, please contact us at:

Email: elorilane1@gmail.com

Business Address:

Elori Lane
61 Bridge Street
Kington
HR5 3DJ
United Kingdom

This address is for business correspondence and privacy-related communications only. It is not a returns address.

For returns, please contact us through our Contact Us page for the correct return instructions and return address.

For the purposes of applicable data protection law, Elori Lane is the data controller of your personal information, except where another party, such as Shopify, acts as an independent controller for its own processing activities.