Privacy policy

1. Who we are

Lazord Beauty operates from Oslo, Norway and Dubai, United Arab Emirates. We are the data controller for personal data collected through this website. For any privacy-related enquiries, contact us at support@lazord-no.com.

2. Data we collect

We collect personal data only when you voluntarily provide it or when it is generated through your interaction with our website. This includes:

• Account & order data: name, email address, delivery address, order history, and payment method (payment card details are processed and held by Stripe — we never store card numbers).
• Contact data: messages you submit via our contact form, including your name, email, and message content.
• Newsletter data: email address if you subscribe to our newsletter.
• Usage data: pages visited, browser type, device type, referring URL, and approximate location — collected via analytics cookies where you have consented.

3. How we use your data

We use the personal data we collect to:

• Process and fulfil your orders, including communicating shipping and tracking information.
• Respond to your customer service enquiries.
• Send you newsletters and promotional emails where you have opted in (you can unsubscribe at any time).
• Improve our website and understand how customers use it (analytics).
• Comply with our legal obligations.

4. Legal basis for processing (GDPR)

For customers in the European Economic Area (EEA) and Norway, our legal bases for processing personal data are:

• Contract performance — processing necessary to complete your order.
• Legitimate interests — fraud prevention, website security, and improving our services.
• Consent — marketing emails and analytics cookies (you may withdraw consent at any time).
• Legal obligation — retaining financial records as required by Norwegian law.

5. Data sharing

We do not sell your personal data. We share it only with:

• Payment processors: Stripe (PCI-DSS compliant).
• Shipping carriers: to deliver your order and provide tracking.
• Email services: for transactional and marketing emails.
• Analytics providers: with your consent, to understand site usage (data is anonymised or pseudonymised where possible).

All third parties are contractually bound to process your data only as instructed by us and to maintain appropriate security standards.

6. Data retention

We retain your order data for 5 years as required by Norwegian bookkeeping law. Customer service records are kept for 2 years. Newsletter subscriber data is held until you unsubscribe. Analytics data is retained for 13 months then deleted.

7. Your rights

Under GDPR (and equivalent UAE legislation), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email support@lazord-no.com. We will respond within 30 days.

8. Cookies

We use cookies for essential site functions and, where consented, for analytics. See our cookie policy for full details.

9. Security

We implement technical and organisational measures to protect your data, including HTTPS encryption, access controls, and regular security reviews. No transmission over the internet is 100% secure, but we take our obligation to protect your data seriously.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. We will notify active customers of material changes by email.

11. Contact

For any privacy questions or to exercise your rights, contact us at support@lazord-no.com or via our contact form.