Privacy policy

LotusLoveLight (“we”, “us”, or “our”) is the business name of a sole proprietorship operated by GB Creative Works. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (the “Site”) and purchase our digital products.

We are committed to protecting your privacy. Please read this policy carefully.

1. Information We Collect

Personal Information you provide

Name
Email address
Billing address
Payment information (processed securely by our third-party payment processor through Shopify’s platform — we do not store full credit card numbers)
Any information you voluntarily provide when contacting us or opting into marketing

Information collected automatically

IP address
Browser type and version
Device information
Pages visited and time spent on the Site
Referring website

Age verification
We use the ET Age Verification Popup 18+ app to restrict access to adults only. This app displays an age-gate popup and does not collect or store any personal information from visitors. By entering the site you confirm you are at least 18 years old (or the age of majority in your jurisdiction). We do not knowingly collect personal information from anyone under 18.

Email marketing
If you opt in at checkout or elsewhere, we may send you emails about new products, updates, and promotions. You can unsubscribe at any time using the link in any email.

2. How We Use Your Information

We use the information we collect to:

Process and fulfill your orders (digital downloads)
Send order confirmations and download links
Provide customer support
Improve our website and products
Send marketing emails (only if you have opted in)
Detect and prevent fraud
Comply with legal obligations
Enforce our Terms of Service and age restrictions

3. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your data under these legal bases:

Performance of a contract (fulfilling your order)
Legitimate interests (improving our services, fraud prevention, marketing to existing customers)
Consent (marketing emails and non-essential cookies)
Legal obligation

4. How We Share Your Information

We share information only with trusted third parties who help us operate the business:

Shopify Inc. – our e-commerce platform, hosting, and checkout
Our third-party payment processor – for securely processing payments
Digital Products app – for delivering your digital files
Shopify Flow and Messaging – for order automation and customer communication
Other service providers who assist with email delivery, security, or essential site functions

We do not sell your personal information.
We may disclose information if required by law or to protect our rights, safety, or property.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for:

Essential site functionality (cart, checkout, session management)
Security and fraud prevention
Basic analytics provided by Shopify
Age verification

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using parts of the Site (especially checkout).

We do not currently use Google Analytics, Facebook/Meta Pixel, or similar third-party advertising trackers.

6. Data Retention

We keep your personal information only as long as necessary to:

Fulfill your orders and provide support
Meet legal, accounting, or reporting requirements
Resolve disputes

Order and customer data is typically retained for several years to comply with tax and record-keeping laws. You may request deletion earlier (see Your Rights below).

7. Your Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you
Correct inaccurate information
Request deletion of your information
Object to or restrict certain processing
Withdraw consent (e.g., unsubscribe from emails)
Data portability
Opt out of the “sale” or “sharing” of personal information (we do not sell or share data for cross-context behavioral advertising)

To exercise any of these rights, email us at keilight@outlook.com (opens in new tab). We will respond within the time required by applicable law (usually 30 days).

California residents (CCPA/CPRA): You have additional rights including the right to know, delete, and correct. We do not sell or share personal information.

EEA/UK residents: You also have the right to lodge a complaint with your local data protection authority.

8. Security

We implement reasonable technical and organizational measures to protect your information. All payment transactions are encrypted (SSL/TLS) and processed in accordance with PCI-DSS standards by our payment processor and Shopify.
However, no method of transmission over the Internet is 100% secure.

9. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where Shopify and our service providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

10. Age Restriction

This Site and our products are intended solely for adults 18 years of age or older. We do not knowingly collect personal information from children under 18. If we learn we have collected information from a minor, we will delete it promptly.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites.

12. Changes to This Privacy Policy

We may update this policy from time to time. The updated version will be indicated by a new “Last updated” date. We encourage you to review this page periodically. Material changes will be highlighted when appropriate.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

LotusLoveLight / GB Creative Works
Email: keilight@outlook.com