Privacy Policy

This Privacy Policy describes how Lysa Wellness Ltd (“we”, “us”, “our”) collects, uses and protects your personal data when you visit or make a purchase from lysawellness.com (the “Site”).

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company name: Lysa Wellness Ltd

Company number: 17160382, registered in England & Wales

ICO registration: ZC142843

Registered address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

Email: contact@lysawellness.com

For the purposes of data protection law, we are the data controller of your personal data.

When you use our Site, we may collect:

• Name
• Billing and shipping address
• Email address
• Phone number
• Payment details (processed securely by third-party payment providers)
• Account login information
• Order history
• Subscription preferences
• Customer service communications

When you visit our Site, we automatically collect:

• IP address
• Browser type and version
• Device information
• Pages viewed and interaction data
• Referral source
• Cookies and similar tracking technologies

We use your personal data to:

• Process and fulfil orders
• Manage payments and subscriptions
• Deliver products
• Communicate with you about orders or enquiries
• Provide customer support
• Improve our website and services
• Send marketing communications (where you have consented)
• Prevent fraud and ensure security
• Comply with legal obligations

We process your personal data under the following lawful bases:

• Contract – to fulfil your orders
• Consent – for marketing communications and cookies
• Legitimate interests – to operate and improve our business
• Legal obligation – to comply with applicable laws

We use cookies and similar technologies to enhance your browsing experience.

These may include:

• Essential cookies (required for site functionality)
• Performance and analytics cookies
• Marketing and advertising cookies

You can manage your cookie preferences through your browser settings or our cookie banner (where applicable).

We may share your personal data with trusted third parties, including:

• Shopify (our e-commerce platform)
• Payment processing (Shopify Payments, including Klarna where offered)
• Delivery and logistics providers
• Email and marketing platforms
• Analytics and advertising partners

All third parties are required to handle your data in compliance with applicable data protection laws.

Some of our service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK-approved Standard Contractual Clauses
• Adequacy decisions

We retain your personal data only for as long as necessary to:

• Fulfil the purposes outlined in this Policy
• Comply with legal, accounting or regulatory requirements

When data is no longer required, it is securely deleted or anonymised.

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at contact@lysawellness.com.

You will only receive marketing communications if:

• You have opted in, or
• You are an existing customer and have not opted out

You may unsubscribe at any time by clicking the “unsubscribe” link in our emails or contacting us directly.

We implement appropriate technical and organisational measures to protect your personal data from:

• Unauthorised access
• Loss
• Misuse
• Disclosure

However, no method of transmission over the internet is 100% secure.

Our Site is not intended for individuals under 18, and we do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.