Depending on how you interact with our Services, we may collect the following categories of personal information:

• Contact details — name, billing and shipping address, phone number, email address
• Financial information — payment card details, transaction information, payment confirmation
• Account information — username, password, preferences and settings
• Transaction information — items viewed, added to cart, purchased, returned or cancelled
• Communications — content of messages sent to us, including support enquiries
• Device information — IP address, browser type, device identifiers, network connection
• Usage information — how you navigate and interact with our Services

We collect personal information from the following sources:

• Directly from you — when you create an account, place an order, or communicate with us
• Automatically — through cookies and similar technologies when you use our Services
• From service providers — such as Shopify, payment processors and logistics partners
• From third parties — partners or other sources as permitted by applicable law

We use your personal information for the following purposes:

• To provide our Services — processing orders, payments, shipping and account management
• To communicate with you — order confirmations, support responses, and service updates
• For security and fraud prevention — authenticating accounts and protecting against unauthorised activity
• For marketing — sending promotional communications where you have opted in
• For legal compliance — responding to legal obligations, regulatory requirements or disputes

We may share your personal information with third parties in the following circumstances:

• Shopify — our store is powered by Shopify, which processes data on our behalf. See Shopify's Privacy Policy for details.
• Service providers — payment processors, logistics partners, IT management and cloud storage providers
• Business partners — where relevant for marketing or advertising purposes, subject to their own privacy notices
• Legal requirements — where required by law, court order or regulatory authority
• Business transfers — in connection with a merger, acquisition or sale of assets

We do not sell your personal information to third parties.

Our Services are hosted by Shopify, which collects and processes personal information in order to provide and improve the Services. Information you submit may be transmitted to Shopify and to third parties in various countries.

To learn more about how Shopify handles your data and to exercise your rights in relation to Shopify's processing, visit the Shopify Privacy Portal.

Depending on where you live, you may have the following rights regarding your personal information:

• Right to access — request access to the personal information we hold about you
• Right to delete — request deletion of your personal information
• Right to correct — request correction of inaccurate information
• Right to portability — receive a copy of your data in a portable format
• Right to opt out — opt out of targeted advertising or sale of your data
• Right to restrict processing — ask us to stop or limit processing for certain purposes (EEA/UK)
• Right to withdraw consent — where processing is based on consent, withdraw it at any time (EEA/UK)

To exercise any of these rights, please contact us at info@loxoderma.com. We may need to verify your identity before processing your request.

You may also unsubscribe from marketing emails at any time using the unsubscribe link in any email we send.

Your personal information may be transferred to, stored, and processed outside the country in which you reside. Where we transfer data outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent mechanisms under applicable law.

Our Services are intended exclusively for professional business buyers and are not directed at children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with their information, please contact us and we will delete it.

We take reasonable steps to protect your personal information, but no security measure is completely impenetrable. We recommend that you do not share your account credentials with others and avoid using unsecured channels to send sensitive information.

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes and enforce our agreements.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page and update the "Last updated" date accordingly.