Privacy policy
This policy explains what personal data LavylitesUSA LLC ("LavylitesUSA", "we") collects on lavylitesusa.com, why, who we share it with and the choices you have. We are the controller of the data described here. Contact: support@lavylitesusa.com; 11166 Fairfax Blvd Suite 500 #1100, Fairfax, VA 22030.
1. What we collect and why
Orders: name, shipping and billing address, email address, telephone number, the products ordered and the order total, so that we can process, ship and support your order, send order and shipping emails, handle returns and keep the records the law requires. Payment card details are entered directly with our payment processor and never reach our servers; we receive only a payment reference and the last four digits of the card.
Order lookup: the order number and email address you enter, to show you the status of that order.
Contact form, email, telephone and chat: whatever you send us, including your name and contact details, so that we can reply. If you describe a reaction to a product, we keep the report for product-safety records.
Site operation and security: IP address, browser and device information, pages requested and timestamps, held in server logs and by Cloudflare, which protects the Site from abuse. We do not run advertising trackers or sell data.
Newsletter: if you subscribe, your email address and the date and confirmation of your consent, so that we can send you the emails you asked for; you can unsubscribe from any email or by writing to us. Reviews: if you write a product review, the review, your first name and last initial, your order number and the date, so that we can check the review against your order and publish it; the review is shown with your first name and last initial only.
Analytics: if we use a privacy-respecting analytics tool, it is described in the Cookies notice; we do not use it to identify you.
We do not knowingly collect data from children under 13, and the Site is not directed at them.
2. Legal bases and choices
We process order data to perform our contract with you and to meet legal obligations (tax, consumer and product-safety law). We process security and log data for our legitimate interest in running a safe site. Where consent is required (for example for optional cookies or embedded video), we ask for it and you may withdraw it at any time.
3. Who receives data
Service providers acting on our instructions: our web host, Cloudflare (security, performance and DNS), our payment processors (card and wallet payments through Stripe, and PayPal if you choose it), shipping carriers (UPS, USPS or others, to deliver your package), our email delivery service (order emails), MailPoet (newsletter and review request emails), ChatBot Builder (if you use the chat widget), Google (Search Console and, where enabled, Analytics), and professional advisers. Each receives only the data needed for its task. Authorities or courts, where the law requires. A buyer of our business, if we ever sell it, under the same protections. We do not sell personal data, and we do not share it for cross-context behavioural advertising.
4. Retention
Order and invoice records: as long as tax and accounting law requires (generally seven years). Contact messages: up to two years after the last exchange. Newsletter subscription: until you unsubscribe. Reviews: for as long as the product is listed, or until you ask us to remove yours. Product-reaction reports: as long as product-safety obligations require. Server and security logs: up to 90 days. Order-lookup queries are not stored beyond the session.
5. Your rights
Depending on where you live (including under the Virginia Consumer Data Protection Act and the California Consumer Privacy Act), you may have the right to know what personal data we hold about you, to obtain a copy, to correct or delete it, to opt out of targeted advertising, sale or profiling (we do none of these), and not to be discriminated against for exercising your rights. To make a request, email support@lavylitesusa.com with the subject "Privacy request" from the address you used with us, or write to the postal address above. We verify requests by matching them against the order or contact records we hold and respond within 45 days (extendable once by 45 days where the law allows). If we refuse a request, you may appeal by replying to our decision; Virginia residents may also contact the Virginia Attorney General, and California residents the California Privacy Protection Agency. An authorised agent may act for you with written permission we can verify.
6. Security
We use HTTPS on every page, Cloudflare's protections, restricted admin access with two-factor authentication, and payment processing that keeps card data off our systems. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.
7. Cookies and similar technologies
See our Cookies notice for the short list of cookies the Site sets and how to control them.
8. Do Not Track and Global Privacy Control
Because we do not sell data or use cross-site tracking, there is nothing further to opt out of; we honour Global Privacy Control signals as an opt-out of any sale or sharing, which we do not perform.
9. Changes
We will post any change here with a new date. Material changes will be flagged on the Site for 30 days.
10. Contact
LavylitesUSA LLC, 11166 Fairfax Blvd Suite 500 #1100, Fairfax, VA 22030 (business address, not a store); support@lavylitesusa.com; 1-888-889-LAVY (5289).
Last updated October 2026