Last updated: January 2026

This Privacy Policy describes how Lola (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or make a purchase from https://lola-bags.com (the “Site”).

We are committed to respecting your privacy and protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable European data protection laws.

1. WHO WE ARE

This website is operated by: Lola

Number of registration of the company: HE464878

Email: contact@lola-bags.com

For any questions regarding this Privacy Policy or your personal data, you can contact us at the email address above.

2. WHAT PERSONAL DATA WE COLLECT

Depending on how you interact with our Site, we may collect the following information:

a) Information you provide directly

• Full name
  
• Email address
  
• Phone number (optional)
  
• Billing and shipping address
  
• Order details and purchase history
  
• Account information (if applicable)
  
• Messages sent via customer support or contact forms
  

Providing this information is necessary to process your orders and provide our services.

b) Information collected automatically

When you browse our Site, we may automatically collect:

• IP address
  
• Browser and device information
  
• Pages visited and interaction data
  
• Cookies and similar tracking technologies
  

This data helps us improve the performance, security, and user experience of our website.

c) Payment information

Payments are processed securely by Shopify Payments and authorized payment providers.

We never store or access your full payment details (card number, CVV, etc.).

Your payment is therefore 100% safe throughout your whole purchase.

3. HOW WE USE YOUR PERSONAL DATA

We use your personal data only when legally permitted, for the following purposes:

• To process and deliver your orders
  
• To manage payments, returns, and customer support
  
• To communicate with you regarding your purchases or account
  
• To improve our website, products, and services
  
• To send marketing emails only if you have given your consent
  
• To comply with legal and accounting obligations
  
• To prevent fraud and ensure website security
  
  
  

4. LEGAL BASIS FOR PROCESSING (GDPR)

We process your personal data based on:

• Performance of a contract (processing your order)
  
• Your consent (marketing communications, cookies)
  
• Legal obligations (accounting, tax, compliance)
  
• Legitimate interests (website security, service improvement), always respecting your rights
  
  
  

5. COOKIES

We use cookies to ensure the proper functioning of the Site, improve navigation, and analyze traffic.

You can manage or disable cookies at any time through your browser settings.

Please note that disabling cookies may affect certain features of the Site.

For more information, you can consult Shopify’s cookie policy:

https://www.shopify.com/legal/cookies

6. SHARING YOUR DATA

We do not sell or share your personal data.

We are only allowed to share limited personal data only with trusted third parties when necessary, such as:

• Shopify (e-commerce platform)
  
• Payment service providers
  
• Shipping and fulfillment partners
  
• IT, analytics, and customer support providers
  

These partners process your data only on our instructions and in compliance with GDPR.

7. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process data outside the European Union.

In such cases, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data.

8. DATA RETENTION

We retain your personal data only for as long as necessary to:

• fulfill the purposes outlined in this policy
  
• comply with legal and accounting obligations
  

When no longer required, your data is securely deleted or anonymized.

9. YOUR RIGHTS (GDPR)

As an EU resident, you have the right to:

• Access your personal data
  
• Request correction of inaccurate data
  
• Request deletion of your data
  
• Restrict or object to processing
  
• Request data portability
  
• Withdraw your consent at any time
  
• Lodge a complaint with a data protection authority
  

To exercise any of these rights, contact us at contact@lola-bags.com.

10. MARKETING COMMUNICATIONS

You will only receive marketing emails if you have opted in.

You can unsubscribe at any time by clicking the link at the bottom of our emails.

11. CHILDREN’S PRIVACY

Our Site is not intended for children under the age of 16.

We do not knowingly collect personal data from minors.

12. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

All transactions are processed through secure, encrypted systems.

13. THIRD-PARTY LINKS

Our Site may contain links to third-party websites.

We are not responsible for the privacy practices or content of these websites.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

The latest version will always be available on this page, with the updated date indicated above.

15. CONTACT

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

contact@lola-bags.com