Privacy Policy

Last updated: October 8, 2026

Lottie & Grace (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our online store, make a purchase or contact us (the “Services”). We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act respecting the protection of personal information in the private sector and other provincial privacy laws.

Personal information we collect

Contact details: name, email address, phone number, billing and shipping address.
Order information: products purchased, order history, returns, exchanges and cancellations.
Payment information: payments are processed by secure third-party payment providers. We do not store your full card number.
Account information: if you create an account, your login details and preferences.
Communications: messages you send to our customer service team.
Device and usage information: IP address, browser and device type, pages viewed and how you interact with the Services, collected through cookies and similar technologies.
Marketing preferences: whether you have subscribed to our emails or text messages.

How we collect it

We collect personal information directly from you (for example at checkout or when you contact us), automatically through cookies and similar technologies, and from service providers acting on our behalf.

Cookies

We use strictly necessary cookies to run the store (for example, your cart and checkout). We only use analytics and advertising cookies with your consent, which you can give or withdraw at any time through the cookie banner or your browser settings. Refusing non-essential cookies does not prevent you from shopping with us.

Why we use your information

To process and deliver your orders, payments, returns and refunds.
To provide customer service and communicate with you about your orders.
To send marketing emails or text messages, only if you have consented.
To show relevant advertising and measure its performance, only with your consent to the relevant cookies.
To prevent fraud and keep our store secure.
To improve our store, products and services.
To comply with legal, tax and accounting obligations.

We only collect the information we need for these purposes and will ask for your consent before using your information for any new purpose.

Consent

By placing an order, you consent to the use of your information to fulfil it. For other purposes, such as marketing, we ask for your express consent. You can withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us. Withdrawing consent may affect our ability to provide certain services.

Email and text marketing

In line with Canada's Anti-Spam Legislation (CASL), we only send commercial messages to people who have consented to receive them. Every message includes a working unsubscribe link, and we process unsubscribe requests within 10 business days. You will still receive messages related to your orders.

Who we share it with

We do not sell your personal information. We share it only with:

Shopify, which hosts our store and processes data to provide its platform;
Payment providers, to process your payment securely;
Fulfilment and shipping partners, to prepare and deliver your order;
Marketing, analytics and email service providers, where you have consented;
Authorities or other parties, where required or permitted by law, or in connection with a sale or restructuring of our business.

Our service providers may only use your information to provide services to us and are required to protect it.

Storage and transfer outside Canada and Quebec

Your personal information may be stored and processed outside your province and outside Canada, including in the United States, the European Union and other countries where our service providers and fulfilment partners operate. While outside Canada, your information is subject to the laws of those countries and may be accessible to their courts, law enforcement and national security authorities. We use contractual and other measures to protect your information wherever it is processed.

How long we keep it

We keep personal information only as long as necessary for the purposes described above, including to meet tax, accounting and legal requirements. Order records are generally kept for the period required by tax law. After that, we securely delete or anonymize the information.

How we protect it

We use reasonable physical, organizational and technical safeguards, including encrypted (SSL) connections and access restrictions. No method of transmission or storage is completely secure. If a privacy breach creates a real risk of significant harm, we will notify you and the relevant privacy regulator as required by law.

Your rights

Subject to applicable law, you have the right to:

access the personal information we hold about you and learn how it has been used and shared;
request correction of inaccurate or incomplete information;
withdraw your consent;
request deletion of your information, where we no longer need it;
if you live in Quebec, request that your information be provided in a structured, commonly used technological format, and ask us to stop disseminating your information or to de-index any link to your name, where the law allows.

We do not make decisions about you based exclusively on automated processing. To make a request, email us. We will respond within 30 days and may need to verify your identity first.

Children

Our store is not directed at children. We do not knowingly collect personal information from anyone under 14. If you believe a child has provided us with personal information, please contact us and we will delete it.

Person in charge of privacy

Our Privacy Officer is responsible for protecting personal information and for compliance with this policy. You can contact the Privacy Officer at info@lottiegrace.com (subject line: “Privacy”).

Complaints

If you have a concern about how we handle your personal information, please contact our Privacy Officer first so we can try to resolve it. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, if you live in Quebec, with the Commission d'accès à l'information du Québec, or with the privacy commissioner of your province.

Shopify

Our store is hosted by Shopify. Shopify may also process personal information about your interactions with our store, together with other merchants, to provide and improve its services; in that case Shopify is responsible for that processing. Learn more in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with a new “Last updated” date. Where changes are significant, we will notify you as required by law.

Contact

Questions about this policy? Email info@lottiegrace.com.