Your details, kept private.

Lorvani is a clothing brand made to order in Beirut. We run this website, lorvanilb.com, and we are responsible for the personal data you share with us here. This policy follows Lebanon's Law No. 81 of 2018 on Electronic Transactions and Personal Data.

Seller

Lorvani

Address

Pasteur, Beirut, Lebanon. Administrative address only, not open to visitors.

Email

support@lorvanilb.com

Phone and WhatsApp

+961 81 296 014

Website

lorvanilb.com

When you place an order

• Your first and last name.
• Your phone number in Lebanon, only if you choose to give it.
• Your delivery address: region, town, street and building, and any floor or landmark you add.
• Your email. It is required, so we can send your order details.
• A note for the courier, only if you write one.
• What you ordered, the total, and the time you accepted our terms.
• Where you came from, such as Instagram, Google or a link we shared, and the first page you opened. Your browser keeps this for the visit only, and we add it to your order so we know which of our links bring customers. It is not collected from people who only browse.

When you use Apex and the Studio (invite only)

• Lorvani invites you by adding a code to your customer record in our Shopify store. That record holds the name and contact details you already gave us.
• When you request a piece, we keep the piece, colour, size and quantity you chose, and the idea you write, with your order. Please do not write anything private in your idea.
• Apex members get a discount on their orders: 20% off the first 3 orders, then 10% off every order after. To count them, we tag each of your member orders in Shopify with your customer number. Nothing else is added.
• Your Apex card number is a cipher we make from your customer number with a secret key. We do not store it, and it is not a payment card.
• If you log out of Apex and ask to get back in, we use the email you type only to find your customer record and show you a new code on screen. We do not keep a list of those requests.
• You choose an Apex PIN. We never see or store the PIN itself, only a scrambled copy that cannot be turned back into it, kept on your customer record in Shopify with a count of wrong tries.
• A sign-in cookie keeps you signed in for 30 days. See our cookie policy.

When you sign in to your account

• You sign in on Shopify's own page with a one-time code sent to your e-mail. We never see a password. Shopify gives our site a sign-in pass, which we keep locked in a secure cookie for up to 30 days (it renews itself every hour while you use the site), and use only to show you your name, e-mail, phone, addresses and orders.
• We do not store any of that on our own servers. It is read from Shopify each time you open the page.

When you sign up for 10% off

• An email, a phone number, or both. One is needed and the other is optional.
• The time you signed up. With an email you also get our news about new pieces, and you can stop any time. With only a phone number we use it just for your discount and your order, never for marketing.
• The window that offers the discount remembers on your device (in browser storage) that you closed it or signed up, so it does not keep appearing.

When you join our email list

• Your email, and the time you asked to join.

When you message us

• What you write to us on WhatsApp or by email, and your number or address there. Our contact and review forms only prepare a message in your own WhatsApp or email app. Nothing is sent to us until you press send there.

When you visit the site

• Like every website, our host receives technical details with each visit, such as your IP address, browser and the page you asked for. They are used to deliver the page and to protect the site from abuse.
• We count visits with Vercel Web Analytics. It records which page was opened, the country, the kind of device and browser, and the site you came from, such as Instagram. It sets no cookies, does not follow you from one visit to the next, and does not count the checkout or visitors whose browser asks not to be tracked. We use these counts only to see which pages and links work.
• Your browser keeps the ID of your bag, so your bag is still there when you come back. For the length of one visit it also keeps where you came from (see above). See our cookie policy.

We do not collect card or bank details, ID numbers, or anything about your health, religion or beliefs.

• To deliver your order. We contact you to confirm it (by phone if you gave a number, otherwise by email), make your piece and hand your name, address and phone number (if you gave one) to our courier. This is needed to carry out the sale you asked for.
• To send a copy of your order to your email, if you gave one.
• To help with exchanges and problems after delivery.
• To send news about new pieces, only if you asked for it by joining the list or ticking the box at checkout. You can stop any time.
• To learn which links bring customers, using where you came from, which we add to your order.
• To keep the shop safe. We count orders per phone number and per device for a short time to stop fake orders.
• To keep business records that Lebanese law asks merchants to keep.

At checkout, your name, email and address are required. Without them we cannot confirm or deliver your order, so the order cannot be placed. Your phone number, the floor or landmark line and the note for the courier are optional, but without a phone number the courier cannot call you. Leaving them empty changes nothing about your order.

Joining our email list is always optional. Not joining changes nothing about what you buy or what you pay.

We never sell or rent your personal data. We share it only with the people and services we need to run the shop:

• Shopify, the platform that stores our products, orders and customer records and sends our order and news emails.
• Vercel, the company that hosts this website and counts visits without cookies.
• Our delivery partner, who receives your name, address and phone number (if you gave one) to bring your order.
• Google, only if you tap "Send me the survey" after an order. Google then receives your email, order number and expected delivery date to send you one short survey (Google Customer Reviews) and decides what you get under its own privacy policy. If you do not tap, nothing is sent.
• WhatsApp (Meta) and our email provider, only when you choose to write to us there.
• Authorities, only when Lebanese law requires it.

Each of these services handles data under its own security and privacy rules and uses it only to provide its service to us.

Shopify and Vercel run their systems outside Lebanon, for example in the European Union, the United States and Canada. Your details travel there over encrypted connections and stay protected by these companies' security. By placing an order, you understand your details are stored there.

• Orders: as long as Lebanese law asks merchants to keep business records, up to 10 years. After that we delete them or keep them without anything that identifies you.
• Email list: until you unsubscribe or ask us to remove you.
• Messages: as long as needed to help you, then no longer than 2 years.
• Technical logs from our host: a short time, set by the host, for security only.
• Your bag in your browser: until you place your order, your bag expires, or you clear your browser data.

Under Lebanese law you have the right to:

• Ask whether we hold data about you, and get a copy of it.
• Correct, complete or update anything that is wrong or out of date.
• Ask us to delete your data, unless the law asks us to keep an order record.
• Object to how we use your data, and stop marketing at any time.
• Withdraw a consent you gave, such as joining the email list.

To use any of these rights, write to support@lorvanilb.com or WhatsApp +961 81 296 014. We may ask one question to check it is really you. We answer within 30 days, and it is free.

If you are not happy with our answer, you can contact the Ministry of Economy and Trade in Lebanon or go to the competent court. If you live in the European Union or the United Kingdom, you have the same rights under the GDPR, and you can also contact your local data protection authority.

We send a copy of your order to your email if you give one. We send news about new pieces only to people who asked for it. Every news email has a link to unsubscribe in one tap, free of charge. You can also reply "stop" or write to us.

We call or WhatsApp you only about your own orders, unless you ask us for more.

• The whole site runs on HTTPS, so what you send is encrypted.
• Your order goes from our server straight to Shopify. The keys to our Shopify account stay on the server and never reach your browser.
• Our server checks every order for fake or automated requests before it reaches Shopify.
• We keep no customer details in our server logs.
• Access to orders is limited to the people who run Lorvani.

We keep only a few small notes in your browser, such as your bag and where you came from for this visit. We set no advertising or tracking cookies. The only cookies are sign-in cookies, for members Lorvani invites to Apex and the Studio and for customers who sign in to their account. The full list is in our cookie policy.

Our shop is meant for adults. If you are under 18, please order with a parent or guardian. We do not knowingly collect data from children without that permission.

If we change this policy, we update the date at the top and post the new text here. If a change affects how we use the details you already gave us, we tell you before it applies.