Privacy policy
Voglana (Lavivue OÜ)
Sepapaja tn 6, Harju Maakond, Lasnamäe linnaosa, Tallinn 15551 Estonia
E-mail: info@voglana.com
Phone: +372 59 363 474
Last updated: January 2026
1. Introduction
This Privacy Policy explains how Lavivue OÜ ("we", "us", "our", or "Voglana") collects, uses, and protects your personal data when you visit our websites:
- voglana.com
- voglana.co.uk
- voglana.eu
- voglana.de
- voglana.ch
- voglana.nl
- voglana.fr
The data controller is Lavivue OÜ, registered at Sepapaja tn 6, Harju Maakond, Lasnamäe linnaosa, Tallinn 15551 Estonia.
You can contact us at info@voglana.com
Voglana is committed to protecting your privacy and complies with:
- General Data Protection Regulation (GDPR) – EU
- UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 – United Kingdom
- California Consumer Privacy Act (CCPA) – United States (California residents)
- Other applicable international privacy laws
Our aim is to provide a transparent, safe, and elegant shopping experience that respects your privacy.
2. Data We Collect
When using our websites, we may collect the following categories of personal data:
| Category | Examples |
|---|---|
| Account Information | Name, surname, email address, billing and shipping address, phone number |
| Order Details | Purchased products, prices, order history, invoice and delivery information |
| Payment Data | Processed securely via third-party providers (Shopify Payments, Stripe, Klarna, PayPal, Visa, Mastercard, Apple Pay, Google Pay). We do not store your card details. |
| Technical Data | IP address, browser type, device information, operating system, language preference, cookie data |
| Communication Data | Messages, support requests, and responses sent via our contact forms or email |
3. How We Use Your Data
Your data is used strictly for the following purposes:
- To process and fulfill your orders, invoices, and deliveries
- To create and manage your customer account
- To securely process payments and prevent fraud
- To handle returns, warranties, and customer support
- To improve website performance and user experience
- To comply with legal and accounting obligations
- To send marketing communications (only with your explicit consent)
4. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
| Legal Basis | Purpose |
|---|---|
| Contract | Processing orders, deliveries, returns, and account management |
| Legal Obligation | Tax records, fraud prevention, legal compliance |
| Legitimate Interest | Website security, analytics, customer service improvements |
| Consent | Marketing emails, non-essential cookies, personalized advertising |
You can withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
5. Data Sharing and Third-Party Services
We collaborate only with trusted service providers who comply with GDPR, UK GDPR, and applicable data protection regulations. They process data on our behalf and only for the intended purpose.
Main Service Partners
| Service | Purpose | Data Location |
|---|---|---|
| Shopify Inc. | Hosting, e-commerce infrastructure, data storage | EU, Canada |
| Stripe / Shopify Payments | Secure payment processing | EU, US |
| Klarna | Payment processing (buy now, pay later) | EU |
| PayPal | Payment processing | EU, US |
| Google LLC | Analytics, Ads, Tag Manager, Consent Mode v2 | EU, US |
| Microsoft Clarity | Behavioral and interaction analytics | EU, US |
| Advertising and retargeting | US | |
| Meta (Facebook/Instagram) | Advertising and retargeting | EU, US |
| Klaviyo and/or Shopify Email | Email marketing | EU, US |
Data may be processed in the EU, UK, US, or in countries recognized by the European Commission as providing an adequate level of protection. Where data is transferred outside the EU/UK, appropriate safeguards (such as Standard Contractual Clauses) are in place.
6. Cookies
Our websites use cookies to ensure functionality, improve performance, and analyze traffic. Some cookies are essential for the site to function, while others help us understand user preferences.
Cookie Categories
| Type | Purpose | Retention | Provider |
|---|---|---|---|
| Necessary Cookies | Enable core functions (cart, checkout, language) | Session | Shopify |
| Analytics Cookies | Collect anonymized data about website usage | 2–14 months | Google Analytics |
| Behavioral Analytics | Session recordings and heatmaps | 30 days – 13 months | Microsoft Clarity |
| Marketing Cookies | Track conversions and personalize ads | 1–12 months | Pinterest, Meta, Google Ads |
| Preference Cookies | Remember language and country settings | 12 months | Shopify |
You can manage your cookie preferences at any time through the cookie consent banner or your browser settings. Disabling cookies may affect some website features.
7. Data Retention
We keep personal data only as long as necessary for each purpose:
| Data Type | Retention Period |
|---|---|
| Orders, billing, and tax records | Up to 10 years (legal requirement) |
| Customer account data | Until account deletion requested |
| Marketing consents | Until withdrawn |
| Analytics data (Google Analytics) | 2–14 months |
| Behavioral data (Microsoft Clarity) | 30 days – 13 months |
| Marketing/advertising cookies | 1–12 months |
After expiration, data is securely deleted or anonymized.
8. Data Security
We use SSL encryption and Shopify's secure infrastructure to protect all personal data. Technical and organizational safeguards are in place to prevent unauthorized access, loss, or misuse.
Security measures include:
- SSL/TLS encryption for all data transmission
- PCI-DSS compliant payment processing
- Regular security audits
- Access controls and authentication
- Secure data storage with reputable providers
9. Your Rights Under GDPR (EU/EEA Residents)
If you are an EU/EEA resident, you have the following rights under the General Data Protection Regulation:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
To exercise your rights, contact us at info@voglana.com. Requests are processed within 30 days in accordance with GDPR.
10. Your Rights Under UK GDPR (UK Residents)
If you are a UK resident, you have equivalent rights under the UK General Data Protection Regulation and the Data Protection Act 2018:
- Right to access your personal data
- Right to rectification or erasure
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with the Information Commissioner's Office (ICO)
UK Supervisory Authority:
Information Commissioner's Office (ICO)
https://ico.org.uk
Helpline: 0303 123 1113
To exercise your rights, contact us at info@voglana.com. Requests are processed within 30 days.
11. Your Rights Under CCPA (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: You can opt out of the "sale" of your personal information. Note: Voglana does not sell personal information in the traditional sense, but some data sharing for targeted advertising may qualify as a "sale" under CCPA.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
How to Exercise Your CCPA Rights
To submit a request, contact us at:
- E-mail: info@voglana.com
- Phone: +372 59 363 474
We will verify your identity before processing your request. Requests are processed within 45 days as required by CCPA.
Categories of Personal Information Collected
In the past 12 months, we may have collected:
| Category | Examples |
|---|---|
| Identifiers | Name, email, phone number, IP address |
| Commercial Information | Purchase history, products viewed |
| Internet Activity | Browsing history, interactions with our website |
| Geolocation Data | Approximate location based on IP address |
Do Not Sell My Personal Information
Voglana does not sell your personal information for monetary consideration. However, if you wish to opt out of data sharing for targeted advertising purposes, you can:
- Adjust your cookie preferences via our cookie consent banner
- Contact us at info@voglana.com with subject line "Do Not Sell My Information"
12. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence, including:
- Estonia (EU) – Company headquarters
- Turkey – Warehouse and logistics operations
- United States – Some service providers (Google, Meta, etc.)
- Canada – Shopify data centers
For transfers outside the EU/UK, we ensure appropriate safeguards are in place, such as:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- UK International Data Transfer Agreement (IDTA)
13. Children's Privacy
Our websites and services are not intended for children under the age of 16.
We do not knowingly collect personal data from minors. If such data is inadvertently collected, it will be promptly deleted.
If you believe we have collected data from a child under 16, please contact us immediately at info@voglana.com.
14. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, or technology.
Any updates will be published on this page with the revised "Last Updated" date. We encourage you to review this policy periodically.
For significant changes, we may notify you via email or a prominent notice on our websites.
15. Contact
For privacy-related questions, you can reach us at:
Company Information
| Legal Entity | Lavivue OÜ (trading as "Voglana") |
| Address | Sepapaja tn 6, Harju Maakond, Lasnamäe linnaosa, Tallinn 15551 Estonia |
| info@voglana.com | |
| Phone | +372 59 363 474 |
Supervisory Authorities
For EU residents:
You may lodge a complaint with your national data protection authority or:
Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
https://www.aki.ee
For UK residents:
Information Commissioner's Office (ICO)
https://ico.org.uk
For California residents:
California Attorney General
https://oag.ca.gov/privacy
Note: All data processing is carried out under the responsibility of Lavivue OÜ in Estonia. Logistic operations, including warehousing and returns handling, are managed from our facility in Turkey.