Privacy Policy

Important: This is an AI-generated template. Please review with a qualified legal professional before relying on it.

Privacy Policy

Last Updated: 17 October 2026

Welcome to Livvat ("we", "us", "our"). We are committed to protecting and respecting the sanctity of your personal information. This Privacy Policy elucidates how we collect, use, disclose, and safeguard your data when you visit our website, in alignment with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR).

1. Data Controller

For the purpose of the GDPR, the data controller is Livvat. Our registered address is [Your Company Address, City, Postal Code, UK]. We are responsible for your personal data.

2. Lawful Basis for Processing Your Data

We process your personal data only when we have a lawful basis to do so. These bases include:

  • Consent: We may process your data if you have given us explicit consent for specific purposes, such as receiving our exclusive marketing communications and newsletters.
  • Contractual Necessity: We process your data to fulfil our contractual obligations to you. This includes processing your order, delivering your chosen pieces, and managing payments.
  • Legitimate Interest: We process your data for our legitimate business interests, such as enhancing our services, preventing fraud, and for administrative purposes, provided that these interests do not override your fundamental rights and freedoms.

3. Your Data Subject Rights

Under the GDPR, you are endowed with a suite of rights designed to give you control over your personal data. These rights include:

  • The Right of Access: You have the right to request a copy of the personal data we hold about you.
  • The Right to Rectification: You have the right to request the correction of any inaccurate or incomplete data we hold about you.
  • The Right to Erasure (The 'Right to be Forgotten'): You can request the deletion of your personal data where there is no compelling reason for its continued processing.
  • The Right to Data Portability: You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
  • The Right to Object: You have the right to object to our processing of your personal data where we are relying on a legitimate interest.

To exercise any of these rights, please contact us at [Your Contact Email].

4. Data Retention Periods

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, order information is retained for six years for tax and legal purposes.

5. Cookies

Our website uses cookies to distinguish you from other users, providing a bespoke browsing experience. We categorise our cookies as follows:

  • Essential Cookies: Necessary for the website's core functionality, such as the shopping cart and checkout process.
  • Analytics Cookies: Allow us to recognise and count the number of visitors and see how they navigate the site, helping us to refine our user experience.
  • Marketing Cookies: Used to track visitors across websites, with the intention of displaying ads that are relevant and engaging for the individual user.

For more detailed information, please consult our dedicated Cookie Policy.

6. Third-Party Data Sharing

Livvat does not sell your personal data. We may, however, share your data with a select group of trusted third-party service providers to facilitate our business operations, such as payment processors (e.g., Shopify Payments, PayPal), shipping carriers, and marketing and analytics partners. We have stringent agreements in place to ensure these parties respect the security of your data.

7. International Data Transfers

Your data may be transferred to, and stored at, a destination outside the UK and European Economic Area (EEA). In such cases, we ensure that your data is protected by implementing appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission and the UK's Information Commissioner's Office, ensuring your data receives the same level of protection as it would within the UK/EEA.

8. Complaints to the Supervisory Authority

Should you feel that our processing of your personal data infringes on data protection laws, you have a legal right to lodge a complaint with a supervisory authority. The competent authority in the UK is the Information Commissioner's Office (ICO). You can contact them at:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: www.ico.org.uk

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.