Privacy policy

Last updated: July 14, 2026

This policy explains what personal information we collect when you visit lionlaurel.com, contact us, or buy from us — what we do with it, who we share it with, and the rights you have over it.

The short version: we collect what we need to make and deliver your order, answer your questions, and run the shop. We don't sell your data. Analytics and advertising cookies only run if you agree to them. You can ask us to show you, correct, or delete your data at any time, and we'll do it.

1. Who we are

LionLaurel is the data controller responsible for your personal information.

LionLaurel (Davit Davoyan)
Karakhanyan 1 48
Yerevan 0092, Armenia

Email: contact@lionlaurel.com
Phone: +374 41 777 882 · +374 33 777 882

We handle personal data in line with the Law of the Republic of Armenia "On Protection of Personal Data" and — where they apply to you — the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA).

2. What we collect

Information you give us
Your name, email address, phone number, and shipping and billing address. What you ordered and what you paid. Any engraving text you ask for. Your account details and saved preferences, if you create an account. The messages, reviews, and support requests you send us. Your email address and consent, if you subscribe to our newsletter.

Information we collect automatically
Your IP address, browser and device type, operating system, the pages you viewed, what you clicked, and where you arrived from. See section 4 for how cookies work on this site.

Payment information
Card payments are handled directly by Stripe. We never receive or store your full card number. We only see the billing details and the fact that a payment succeeded.

3. What we use it for, and why we're allowed to

What we use it for	Legal basis	How long we keep it
Making, packing, and delivering your order	Performance of a contract	As long as tax and accounting law requires
Taking payment and handling refunds	Performance of a contract	As long as tax and accounting law requires
Answering your questions and supporting you	Contract / legitimate interest	2 years after our last contact
Running your account	Performance of a contract	Until you delete your account
Newsletters and marketing emails	Consent	Until you unsubscribe
Analytics — understanding how the site is used	Consent	Up to 14 months
Advertising and measuring our campaigns	Consent	Up to 13 months
Preventing fraud and keeping the site secure	Legitimate interest	Up to 2 years
Meeting our tax, accounting and legal duties	Legal obligation	As the law requires

Where we rely on consent, you can withdraw it at any time — it won't affect anything we did before you withdrew it.

4. Cookies and tracking

When you first arrive, we ask you which cookies you're happy with. Analytics and advertising cookies do not run until you agree to them. You can change your choice at any time through the cookie settings on our site.

Type	What it does	Needs your consent?
Strictly necessary	Your cart, checkout, security, language and region	No — the shop can't work without them
Functional	Remembering your preferences	Yes
Analytics	How many people visit, which pages they read, where they came from	Yes
Advertising	Measuring our ads and showing you relevant ones	Yes

You can also block or delete cookies in your browser settings, though some parts of the shop may stop working properly if you block the necessary ones.

5. Who we share it with

We do not sell your personal information, and we do not share it for money. We share it only with the companies we need in order to run the shop:

Who	What for
Shopify	Our shop platform and hosting
Stripe	Processing your payment securely
DHL Express, FedEx and postal partners	Delivering your order and handling customs
Loox	Collecting and showing product reviews and review photos
Shopify Email	Sending our newsletter, if you've subscribed
Google (Analytics, Ads)	Understanding site usage and measuring ads — with your consent
Meta (Facebook & Instagram)	Measuring and showing ads — with your consent

We may also disclose information where the law requires it, to protect our rights or someone's safety, or as part of a sale or reorganisation of the business — in which case this policy continues to apply.

6. Where your data goes

We're based in Armenia, and our providers are based in other countries, including the United States and the European Union. That means your personal data may be processed outside the country you live in.

Armenia is not covered by an EU "adequacy decision". Where personal data of people in the EU, EEA, or UK reaches us or our providers outside those regions, we rely on appropriate safeguards — principally the Standard Contractual Clauses built into the data processing agreements we have with Shopify, Stripe, and our other providers — together with the technical and organisational measures described in section 8.

If you'd like details of the safeguards that apply to you, email contact@lionlaurel.com and we'll send them.

7. How long we keep it

The table in section 3 sets out how long we keep each kind of data. In short: order and payment records are kept for as long as tax and accounting law requires; marketing data is kept until you unsubscribe; everything else is deleted or anonymised once we no longer need it.

8. Security

We use appropriate technical and organisational measures to protect your data, including the security infrastructure of Shopify and PCI-DSS-compliant payment processing through Stripe. No system is completely secure, so we can't promise absolute security — but if a breach ever affects your data, we'll tell you and the relevant authority as the law requires.

9. Your rights

Everyone. Wherever you live, you can ask us to show you the data we hold about you, correct it, delete it, or send you a copy. Email contact@lionlaurel.com. We'll respond within the time the law allows, and we may need to check who you are first. It's free.

🇪🇺 🇬🇧 European Union, EEA and United Kingdom. You have the right to access your data, have it corrected or erased, restrict or object to how we process it, receive it in a portable format, and withdraw your consent at any time. You can also complain to your national data protection authority if you're unhappy with how we've handled your data.

🇺🇸 California. You have the right to know what we collect and why, to have it deleted or corrected, to opt out of the "sale" or "sharing" of your personal information, to limit the use of sensitive information, and not to be treated differently for exercising any of these rights. Advertising cookies may count as "sharing" under the CCPA — you can opt out through our cookie settings, through the Do Not Sell or Share My Personal Information link on our site, or by emailing us. An authorised agent may make a request for you.

🇦🇲 Armenia. Under the Law "On Protection of Personal Data" you may ask about the processing of your data and request its correction, blocking, or destruction, and you may complain to the Personal Data Protection Agency of the Republic of Armenia.

Opt-out signals. Where required, we honour recognised browser opt-out signals such as Global Privacy Control (GPC).

Marketing. Every marketing email has an unsubscribe link, and you can email us instead if you prefer.

10. Children

This shop isn't aimed at children under 16, and we don't knowingly collect their data. If you think a child has given us personal information, email us and we'll delete it.

11. Changes to this policy

If we change this policy, the revised version appears here with a new "Last updated" date. If a change is significant, we'll tell you on the site or by email.