Privacy policy

PRIVACY POLICY

Last updated: March 2026

This Privacy Policy explains how LYC / LoveYours Collection collects, uses, stores, and protects your personal information when you visit our website, place an order, join a waitlist, sign up for marketing, or otherwise interact with us.

This website and store are operated by LOVE YOURS RECORDINGS LTD, trading as LYC / LoveYours Collection. Registered in England and Wales under company number 15728873. Registered office: 651a Mauldeth Road West, Chorlton, Manchester, England, M21 7SA.

We take your privacy seriously. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. Who we are and how to contact us

Data Controller: LOVE YOURS RECORDINGS LTD (trading as LYC / LoveYours Collection)
Email: hq@loveyoursmedia.com
Address: 651a Mauldeth Road West, Chorlton, Manchester, M21 7SA, United Kingdom

For any privacy-related queries, requests, or complaints, please contact us at the email above with the subject line: "Privacy Request".


2. What personal information we collect

Information you provide directly

  • Name and contact details (email address, phone number, delivery and billing address)
  • Account login details (if you create an account)
  • Order and payment information (processed securely via Shopify Payments and third-party payment processors — we do not store full card details)
  • Communications you send us (customer service enquiries, returns requests)
  • Marketing preferences (when you subscribe to email or SMS updates)
  • Waitlist registrations

Information collected automatically

  • IP address, browser type, device type, and operating system
  • Pages visited, time spent, referring website, and click behaviour
  • Cookie and tracking data (see Section 7 below)
  • Location data (approximate, based on IP address)

3. How we use your information

Purpose Legal Basis
Processing and fulfilling your orders (including shipping, invoicing, and returns) Contract performance
Managing your account and customer profile Contract performance
Sending order confirmations, dispatch notifications, and service updates Contract performance
Responding to your customer service enquiries Legitimate interests
Sending marketing emails, SMS, or push notifications (where you have opted in) Consent
Managing waitlists and product launch notifications (where you have signed up) Consent
Improving our website, products, and customer experience Legitimate interests
Preventing fraud and ensuring website security Legitimate interests / Legal obligation
Complying with legal and regulatory obligations (e.g., tax records) Legal obligation
Personalising advertising and measuring campaign performance (e.g., Meta/Instagram ads) Consent (via cookie preferences)

We will never sell your personal data to third parties.


4. Who we share your data with

We share personal data only where necessary and with appropriate safeguards in place:

  • Shopify Inc. — our ecommerce platform (processes orders, payments, and account data)
  • Payment processors — including Shopify Payments, Klarna, PayPal, Apple Pay, Google Pay (for secure payment processing)
  • Delivery partners — including DPD UK (to fulfil and track your deliveries)
  • Email and marketing platforms — including Klaviyo (for email communications, where you have opted in)
  • Advertising platforms — including Meta (Facebook/Instagram) and Google (for retargeting and campaign measurement, subject to your cookie consent)
  • Professional advisers — including accountants and legal advisers, where required
  • HMRC and other regulatory bodies — where legally required

All third-party processors are required to handle your data in compliance with UK GDPR and are bound by data processing agreements.


5. International data transfers

Some of our service providers are based outside the UK (including in the United States). Where your data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or adequacy decisions.


6. How long we keep your data

Data type Retention period
Order and transaction records 7 years from the end of the relevant financial year (HMRC requirement)
Customer account data Duration of account, plus 2 years after last activity
Marketing contact data Until you unsubscribe, or 3 years of inactivity — whichever is sooner
Customer service communications 2 years from resolution
Website usage / analytics data Up to 26 months (as per analytics platform settings)

7. Cookies and tracking technologies

We use cookies and similar tracking technologies on our website. Cookies are small data files stored on your device.

Cookie categories

Category Purpose Required?
Strictly necessary Essential for the website to function (shopping cart, checkout, security) Always on
Functional Remember your preferences (language, currency, login status) Optional
Analytics Understand how visitors use our site (Google Analytics, Shopify Analytics) Consent required
Marketing Deliver relevant ads and measure campaign performance (Meta Pixel, Google Ads) Consent required

You can manage your cookie preferences via the cookie banner displayed on your first visit, or at any time through your browser settings. Withdrawing consent will not affect the lawfulness of any processing carried out before withdrawal.


8. Your rights under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — Request a copy of the personal data we hold about you (Subject Access Request)
  • Right to rectification — Ask us to correct inaccurate or incomplete data
  • Right to erasure — Ask us to delete your data, where we are not legally required to retain it ("right to be forgotten")
  • Right to restriction — Ask us to limit how we use your data in certain circumstances
  • Right to data portability — Receive your data in a structured, machine-readable format
  • Right to object — Object to processing based on legitimate interests, or to direct marketing at any time
  • Rights related to automated decision-making — We do not make solely automated decisions that have significant legal effects on you

To exercise any of these rights, email us at hq@loveyoursmedia.com with the subject line "Privacy Request". We will respond within 30 days. We may need to verify your identity before fulfilling your request.


9. Marketing and opting out

We will only send you marketing communications where you have consented, or where we have a legitimate interest as an existing customer (soft opt-in under PECR).

You can opt out at any time by:

  • Clicking the Unsubscribe link in any marketing email
  • Replying STOP to any marketing SMS
  • Emailing us at hq@loveyoursmedia.com

Opting out of marketing will not affect transactional communications related to your orders.


10. Children's privacy

Our website and products are intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately so we can delete it.


11. Data security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse. All payment transactions are encrypted using SSL technology and processed by PCI-DSS compliant payment processors. We do not store full payment card details on our systems.

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the ICO within the required timeframes under UK GDPR (72 hours to the ICO).


12. Changes to this policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page, with the "Last updated" date revised accordingly. Where changes are material, we will notify you by email or via a prominent notice on our website.


13. How to complain

If you are unhappy with how we have handled your personal data, please contact us first at hq@loveyoursmedia.com and we will do our best to resolve it.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority:

  • Website: ico.org.uk/make-a-complaint
  • Helpline: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF