Privacy Policy

1. Scope & Data Controller Identification

This Privacy Policy explains how Mylaurus ("Company", "we", "us", or "our") collects, processes, and protects personal data obtained through our online store and associated customer care channels. This policy governs personal information processed across our online shopping platform and related customer support services.

2. Categories of Personal Data Collected

We process personal data necessary for commercial operations, order fulfillment, and account management, including:

• Customer identification details (name, billing address, delivery address, email, and contact telephone number).
• Transaction records, purchased items, invoices, payment status, and customer service correspondence.
• Payment transaction tokens, payment method type, and fraud risk indicators supplied by certified payment gateways.
• Technical connection details (IP address, operating system, browser type, and cookie consent preferences).

Information used to process an order can include your contact and delivery details, the items purchased, payment status and customer-service communications. Technical information necessary for site operation can include device, session and security data. Please contact us for information about data associated with your purchase.

3. Sources of Personal Data

We obtain personal information directly from you when you browse our site, register an account, make a purchase, or contact customer care. Technical data is collected automatically via standard server logs and cookies. Limited transaction confirmation details are provided by our payment and shipping partners.

4. Purposes & Legal Bases for Processing

Personal data is processed under recognized legal bases:

• Contractual Performance: Processing and delivering customer orders, handling payments, issuing invoices, and managing returns.
• Legal Compliance: Satisfying mandatory accounting, commercial, tax, and consumer warranty recordkeeping obligations.
• Legitimate Interests: Protecting website security, preventing fraudulent transactions, and managing customer service.
• Consent: Administering voluntary marketing communications and non-essential analytical cookies.

5. Disclosures to Service Providers & Processors

Personal information may be shared where necessary to operate the Shopify storefront, process payment, arrange delivery, provide support or meet legal obligations. Relevant recipients depend on the services used for your transaction. Contact support for information about recipients involved in your order; we do not identify unverified providers here.

6. Cookies & Tracking Choices

Shopping-cart, checkout and security functions may require cookies or similar storage. Optional analytics or advertising technologies depend on the services enabled on the storefront. Use available site privacy controls and browser settings, or contact us to request information about the technologies applied to your visit. Consent and opt-out requirements apply where required by law.

7. International Data Transfers

Service providers may process information in another jurisdiction. Any international transfer must comply with applicable data-protection requirements. Contact us for information about relevant processing locations and safeguards; this policy does not represent that an unverified specific transfer mechanism is in place.

8. Data Retention Criteria & Schedules

Information is retained as needed for the purposes for which it was collected, including order fulfilment, support, accounting, legal obligations and dispute resolution. Applicable requirements and the nature of the record affect retention. Contact us to request deletion or details of retention relevant to your information.

9. Consumer & Data Subject Rights

Depending on your state of residence (including California, Colorado, Virginia, Connecticut, Utah, and other applicable states), you may possess rights to access, correct, delete, port your personal data, and opt out of the sale, sharing, or targeted advertising use of personal information. To submit a verifiable data request, use our online privacy portal at https://www.mylaurus.com/pages/003-contact or contact our privacy team. Opt-out controls are available at https://www.mylaurus.com/pages/003-contact.

10. Identity Verification & Authorized Agents

To protect personal information, we may take reasonable steps to verify your identity before fulfilling a privacy request. In jurisdictions permitting authorized agents to submit requests, verifiable written proof of authorization will be required.

11. Protection of Children's Privacy

This store is intended for customers who can lawfully enter a purchase contract and is not directed to young children. If you believe a child has provided personal information without appropriate authorization, contact us so that the matter can be reviewed and appropriate action taken.

12. Data Security Measures & Incident Protocols

We maintain technical, administrative, and physical safeguards designed to secure personal data against accidental loss, unauthorized disclosure, or illicit access. In the event of a confirmed data security breach affecting personal information, required statutory notifications will be issued.

13. Privacy Contact & Supervisory Authorities

For questions or requests concerning our privacy practices, please contact our dedicated privacy team:

Consumers may contact relevant state regulatory authorities regarding unresolved privacy complaints.