Privacy Policy · LESVARIO

Effective date: 12 November 2026

Who is responsible

The controller of your personal data is WRLSH TRADING LIMITED (trading as LESVARIO), 27 Vineyard Street, Liverpool, L19 2PU, United Kingdom, support@lesvario.com. This policy explains what we collect when you use lesvario.com, why, and your rights under the UK GDPR, the Data Protection Act 2018 and, where it applies, the EU GDPR.

What we collect

Order data: name, delivery and billing address, email, phone number (optional), items ordered, amounts and currency.
Payment data: handled by our payment provider. We receive confirmation of payment and limited details (such as card type and last four digits), never your full card number.
Account data if you create an account: email, name, password (stored encrypted) and order history.
Messages: what you send us by email, through the contact form or through the withdrawal form.
Technical data: IP address (used to suggest your delivery country and currency, and for security), browser type, and the strictly necessary cookies described in our Cookie Policy.

Why we use it and our legal basis

To take, pay for, deliver and support your order, and to handle returns and withdrawals: performance of a contract.
To keep accounting and tax records: legal obligation.
To prevent fraud and keep the site secure, and to show prices in your local currency: our legitimate interests.
To answer your messages: legitimate interests or steps before a contract.

We do not sell your personal data, we do not use it for advertising, and we do not make automated decisions about you that have legal effects.

Only with service providers who need it to do their job for us: our website host (Hostinger), our payment providers (Stripe and PayPal, once connected), our email provider, and the carriers that deliver your parcel. Where required we share data with authorities, for example tax or customs authorities.

International transfers

Some providers process data outside the UK and EEA (for example in the United States). Where they do, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

Order and accounting records: 6 years after the end of the financial year, as required by UK company and tax law.
Account data: until you delete your account.
Messages and withdrawal requests: 3 years after your last contact.
Security logs: up to 90 days.

Your rights

You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interests. Email support@lesvario.com; we answer within one month.

You can complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113). If you live in the EU or EEA, you can also complain to the data protection authority in your country.

Children

Our shop is not aimed at children under 16 and we do not knowingly collect their data.

Changes

If we change this policy we will publish the new version here with a new effective date.