Privacy Policy

1. Who is responsible for your personal data?

The owner of www.lorenacanals.com is Lorena Canals SL, with registered office at Ponce de León 4, 08960 Sant Just Desvern (Barcelona), with VAT number B-65606402.
Email: customerservice@lorenacanals.com

2. What personal data do we collect? 

Depending on how you interact with us, we may collect and process different categories of personal data, including:

  • Identification and contact details, such as your name, email address, telephone number and postal address.
  • Account information, such as your login details and information associated with your customer account.
  • Order and transaction information, including products purchased, delivery and billing details, payment-related information and information relating to returns or refunds.
  • Information you provide when contacting our Customer Service team or otherwise communicating with us.
  • Preferences and interests, such as your product preferences and areas of interest.
  • Information relating to your participation in The LC Family loyalty programme, including your membership details, points, rewards, purchase history, date of birth and preferences.
  • Information relating to your interaction with our marketing communications, such as whether you open or click on our emails.
  • Information about how you use our website, including browsing and interaction data collected through cookies and similar technologies, where applicable.
  • Any other information you voluntarily provide to us.

We only collect the personal data that is necessary for the purposes described in this Privacy Policy or for purposes communicated to you at the time of collection.

3. How do we use your personal data?

We may process your personal data for the following purposes:

  • To create and manage your customer account.
  • To process and fulfil your orders, including payment, delivery, returns and refunds.
  • To provide customer service and respond to your requests, questions or enquiries.
  • To manage your participation in The LC Family loyalty programme, including points, rewards, benefits and membership status.
  • To send you newsletters, promotional communications and other marketing content where permitted by applicable law and, where required, with your consent.
  • To personalise our communications and content based on your preferences, interests and interactions with our website and communications.
  • To manage promotions, incentives, competitions and other commercial activities.
  • To understand how customers interact with our website and communications and to improve our website, products, services and customer experience.
  • To detect, prevent and investigate fraud, abuse, security incidents and other unlawful or unauthorised activities.
  • To comply with our legal and regulatory obligations.
  • To establish, exercise or defend legal claims where necessary.
  • For any other purpose disclosed to you at the time your personal data is collected.

4. What is the legal basis for processing your personal data?

We process your personal data on the following legal bases, depending on the purpose for which it is collected:

  • Performance of a contract: where processing is necessary to manage your account, process and fulfil your orders, provide requested services or manage your participation in The LC Family loyalty programme.
  • Legal obligations: where we are required to process your personal data to comply with applicable laws and regulations, including accounting, tax, consumer protection and other legal requirements.
  • Consent: where you have given us your consent to process your personal data for a specific purpose, such as certain marketing communications or other optional services. You may withdraw your consent at any time.
  • Legitimate interests: where processing is necessary for purposes such as improving our services, ensuring the security of our website, preventing fraud, managing our business or communicating with existing customers, where permitted by applicable law and provided that our interests do not override your rights and freedoms.

Where we rely on your consent, withdrawing it will not affect the lawfulness of processing carried out before you withdrew your consent.

5. Marketing communications and personalisation

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may use your personal data to send you information about our products, collections, launches, promotions, events and other content that may be relevant to you.

Where permitted by applicable law, we may personalise our communications based on information such as your preferences, purchase history, interactions with our website and engagement with our communications.

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our emails or by contacting us at customerservice@lorenacanals.com.

Unsubscribing from marketing communications will not affect transactional or service-related communications that are necessary to manage your orders, account or relationship with us.

6. The LC Family loyalty programme

If you join The LC Family, we process the personal data necessary to manage your membership and provide the benefits associated with the programme.

This may include your name, email address, date of birth, purchase history, preferences, points, rewards, membership status and interactions with the programme.

We use this information to:

  • Manage your The LC Family membership.
  • Calculate and assign points.
  • Provide rewards and benefits.
  • Manage your membership status and applicable benefits.
  • Send communications relating to the programme.
  • Personalise communications and offers where applicable.
  • Manage your participation in activities associated with the programme.

The terms and conditions governing The LC Family loyalty programme are available in our The LC Family Terms and Conditions.

7. Who do we share your personal data with?

We may share your personal data with trusted third-party service providers where this is necessary to operate our business and provide our products and services.

These may include providers supporting:

  • E-commerce and website services.
  • Payment processing.
  • Order fulfilment, shipping and logistics.
  • Customer service.
  • Email marketing and CRM.
  • Loyalty programme management.
  • Website analytics and performance.
  • IT, hosting and technical services.
  • Fraud prevention and security.
  • Other services necessary to operate our business.

These providers may only process your personal data in accordance with our instructions and for the purposes for which it was collected, where they act as processors on our behalf.

We may also share your personal data with companies within the same corporate group as Lorena Canals SL, where there is an appropriate legal basis for doing so. This may include Oli & Carol SL. Your personal data will only be shared with Oli & Carol SL for marketing and promotional purposes where you have expressly consented to receive communications from Oli & Carol. You may withdraw your consent at any time.

We may also disclose personal data where required by law, regulation, court order or a request from a competent authority, or where necessary to protect our rights, property or legitimate interests.

8. International data transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that the transfer is carried out in accordance with applicable data protection legislation and that an appropriate transfer mechanism or safeguard is in place, where required.

These safeguards may include an adequacy decision adopted by the European Commission or appropriate contractual safeguards, such as Standard Contractual Clauses.

9. How long do we keep your personal data?

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying legal, accounting, tax or reporting requirements.

The retention period will depend on the type of personal data and the purpose for which it is processed.

For example:

  • Account information is generally retained while your customer account remains active, unless a longer retention period is required by law.
  • Order and transaction information may be retained for the periods required by applicable legal and tax obligations.
  • Customer service information is retained for as long as necessary to manage your request and any related obligations.
  • Marketing data is retained until you unsubscribe, withdraw your consent or otherwise object to the relevant processing, where applicable.
  • The LC Family information is retained for as long as necessary to manage your membership and any related legal or contractual obligations.

Once personal data is no longer required, it will be securely deleted or anonymised, where appropriate.

10. Cookies and similar technologies

We use cookies and similar technologies to ensure the proper functioning of our website, remember your preferences, analyse website performance and, where applicable, personalise content and marketing.

For more information about the cookies and similar technologies we use and how you can manage your preferences, please see our Cookie Policy.

11. Your data protection rights

Depending on the applicable legislation, you may have the following rights in relation to your personal data:

  • Right of access: to obtain confirmation as to whether we process your personal data and, where applicable, access to that data.
  • Right to rectification: to request the correction of inaccurate or incomplete personal data.
  • Right to erasure: to request the deletion of your personal data where there is no longer a legitimate reason for us to retain it.
  • Right to restriction: to request that we restrict the processing of your personal data in certain circumstances.
  • Right to object: to object to certain processing based on our legitimate interests and, in particular, to direct marketing.
  • Right to data portability: to receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if you believe that your personal data has been processed in breach of applicable data protection legislation.

12. How can you exercise your rights?

You may exercise your data protection rights by contacting us at:

Email: customerservice@lorenacanals.com

We may request additional information to verify your identity before processing your request.

We will respond to your request within the applicable legal timeframe.

13. Profiling and automated decision-making

We may use certain personal data, such as your preferences, purchase history and interactions with our website and communications, to segment our audiences and personalise our communications, content and offers.

This type of processing is used to provide more relevant content and improve your experience with Lorena Canals.

We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you, unless otherwise disclosed to you and permitted by applicable law.

14. Children's data

Our website and services are not intended for children, and we do not knowingly collect personal data directly from children.

If you believe that a child has provided us with personal data without the appropriate consent, please contact us at customerservice@lorenacanals.com so that we can take appropriate action.

15. How do we protect your personal data?

We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction.

However, no method of transmission or storage of information can be guaranteed to be completely secure.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, the way we process personal data or applicable legal requirements.

When we make significant changes, we will take appropriate steps to inform you, where required by law.

We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.

Last updated: 01/10/2026

17. Contact and complaints

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at:

Lorena Canals SL
Ponce de León 4
08960 Sant Just Desvern (Barcelona), Spain
Email: customerservice@lorenacanals.com

If you are not satisfied with how we have handled your personal data, you may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

AEPD: www.aepd.es/en