Privacy policy

Privacy Policy

Last updated: October 24, 2026

Handmade by Lony (“Handmade by Lony,” “we,” “us,” or “our”) operates the online store handmadebylony.com and provides related products and services (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase, contact us, create an account, subscribe to marketing communications, or otherwise use our Services.

Handmade by Lony is based in Slovenia, European Union, and our online store is powered by Shopify.

1. Personal Information We Collect

Depending on how you interact with our Services, we may collect the following categories of personal information:

Contact information

This may include your name, email address, telephone number, billing address, shipping address, and other contact details you provide.

Order and transaction information

This may include products purchased, order history, order notes, customization requests, shipping information, payment status, refunds, returns, and other information related to your transaction.

Payment information

Payments are processed through Shopify and supported third-party payment providers. We do not directly store complete payment card details.

Payment providers may process information necessary to authorize and complete your payment in accordance with their own privacy policies.

Account information

If you create or use a customer account, we may process account credentials, preferences, order history, and related account information.

Communications

When you contact us through email, website chat, social media, contact forms, or customer support, we may process the information contained in those communications.

Customization information

If you order customized or personalized products, including custom Mystery Jewelry Jars or jewelry, we may process preferences and information you voluntarily provide, such as preferred themes, colors, jewelry styles, materials, sizes, or other customization requests.

Please do not provide sensitive personal information that is not necessary for us to fulfill your order.

Device and usage information

When you use our website, certain technical information may be collected automatically, such as your IP address, browser type, device type, operating system, pages viewed, referring website, approximate location, and interactions with our website.

This information may be collected through cookies and similar technologies.

2. How We Use Personal Information

We may use personal information to:

• process and fulfill orders;
• receive and process payments;
• provide shipping and delivery services;
• create and manage customer accounts;
• communicate with customers regarding orders and inquiries;
• create customized or personalized products according to customer requests;
• provide customer support;
• detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity;
• maintain, improve, and analyze our website and Services;
• comply with accounting, tax, consumer protection, and other legal obligations;
• establish, exercise, or defend legal claims;
• send marketing communications where permitted by law or where you have provided consent;
• personalize advertising or website experiences where permitted by applicable law and based on your privacy choices.

3. Legal Bases for Processing

Where the General Data Protection Regulation (“GDPR”) or similar laws apply, we process personal information under one or more of the following legal bases:

Performance of a contract

We process information necessary to process your order, receive payment, provide requested products, arrange shipping, provide customer service, and otherwise fulfill our obligations to you.

Legal obligations

We may process and retain information where necessary to comply with applicable tax, accounting, consumer protection, regulatory, or other legal requirements.

Legitimate interests

We may process information where necessary for our legitimate business interests, including operating and improving our store, protecting our business and customers, preventing fraud and misuse, providing customer support, and understanding how our Services are used, provided that those interests are not overridden by your fundamental rights and freedoms.

Consent

Where required, we rely on your consent for activities such as certain marketing communications, advertising technologies, analytics technologies, or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time.

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the store, remember preferences, understand website usage, maintain security, and, where permitted, provide analytics and advertising.

Essential cookies may be required for the website and checkout to function.

Where required by applicable law, non-essential cookies and tracking technologies are used only after you have provided the required consent.

You can manage available privacy and cookie choices through the cookie or privacy controls displayed on our website and through your browser settings.

Disabling certain cookies may affect some features of the Services.

5. How We Share Personal Information

We may share personal information with third parties where necessary to operate our business and provide our Services, including:

• Shopify, which provides our ecommerce platform and related services;
• payment processors and payment service providers;
• shipping, postal, courier, and logistics providers;
• service providers supporting website hosting, security, analytics, communications, customer support, marketing, or other business operations;
• professional advisers such as accountants, legal advisers, or other professional service providers where necessary;
• government authorities, regulators, courts, or law enforcement where disclosure is required or permitted by law.

We may also disclose information when reasonably necessary to protect our rights, customers, business, or Services.

We do not sell personal information for money.

Certain privacy laws may define “sale,” “sharing,” or targeted advertising more broadly. Where such laws apply, eligible users may exercise the privacy choices provided through our website.

6. Shopify

Our store is hosted and powered by Shopify.

Shopify processes certain personal information in connection with providing the ecommerce platform, checkout, fraud prevention, payment-related functionality, analytics, and other services used by our store.

Shopify may process personal information in countries outside your country of residence in accordance with its privacy and data protection practices.

You can learn more about how Shopify processes personal information by reviewing Shopify’s own privacy documentation.

7. International Data Transfers

Because we sell internationally and use service providers that operate globally, your personal information may be transferred to, stored in, or processed in countries outside your country of residence, including countries outside the European Economic Area (“EEA”).

Where required by applicable law, international transfers of personal information are protected using appropriate legal safeguards, such as adequacy decisions, Standard Contractual Clauses, or other recognized transfer mechanisms.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period may depend on the type of information and the reason it was collected.

For example, order and transaction records may be retained for the period required by applicable accounting, tax, consumer protection, and other legal obligations.

We may also retain information where reasonably necessary to resolve disputes, enforce agreements, prevent fraud, or establish, exercise, or defend legal claims.

When personal information is no longer required, it may be deleted, anonymized, or otherwise handled in accordance with applicable law.

9. Marketing Communications

If you subscribe to our marketing communications, we may send you information about products, collections, promotions, and other Handmade by Lony news.

You can unsubscribe from marketing emails at any time by using the unsubscribe option contained in the message or by contacting us.

Withdrawing consent to marketing does not affect transactional communications that are necessary to process or manage an order.

10. Children’s Privacy

Our Services are not intended to collect personal information directly from children who are not legally able to consent to the processing of their personal information.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the situation and take appropriate action.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

12. Your Privacy Rights

Depending on where you live and applicable law, you may have rights regarding your personal information.

For individuals protected by the GDPR, these may include the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of personal information in certain circumstances;
• request restriction of processing;
• object to certain processing;
• receive certain personal information in a portable format;
• withdraw consent where processing is based on consent;
• object to direct marketing;
• lodge a complaint with a competent data protection authority.

These rights may be subject to limitations or exceptions under applicable law.

To exercise a privacy right, please contact us at:

handmadebylony@gmail.com

We may need to verify your identity before completing certain requests.

If you are located in the EEA, you also have the right to lodge a complaint with the competent supervisory authority. In Slovenia, the supervisory authority is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec).

13. Third-Party Websites and Services

Our website may contain links to websites, platforms, social networks, payment services, or other services operated by third parties.

We are not responsible for the privacy practices, security, or content of third-party services. We recommend reviewing the privacy policies of those services before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, technology, legal requirements, or other operational reasons.

When we update this Privacy Policy, we will update the “Last updated” date at the top of this page.

15. Contact Us

For questions about this Privacy Policy, our privacy practices, or requests relating to your personal information, please contact:

Handmade by Lony
Slovenia, European Union
Email: handmadebylony@gmail.com
Website: handmadebylony.com

Handmade by Lony is the controller of personal information processed for the purposes described in this Privacy Policy, except where another party acts as an independent controller under applicable law.