Privacy Policy
Controller: Vendorluxury, 833 Granville St, Vancouver, BC V6B 2C9, Canada.
Publication date: . Last review: .
This notice explains how we collect, use, store, and protect personal data when you visit our website or contact us about Lorvi and related food-supplement services. It is drafted to align with the EU General Data Protection Regulation (GDPR), the UK GDPR, and comparable Canadian privacy principles including PIPEDA where applicable.
Where we operate
Vendorluxury operates from British Columbia, Canada, with logistics messaging centered on shipments prepared in the Vancouver area. The site is published in English. Readers abroad may access pages, but product law, customs rules, and return rights depend on the destination we confirm at checkout. Privacy oversight for Canadian residents may involve the Office of the Privacy Commissioner of Canada or provincial commissioners, including British Columbia’s OIPC, depending on the facts you raise.
Dietary supplements, ads, and honest representation
We market Lorvi exclusively as a food supplement. We do not use personal-data processing described here to infer health conditions for ad targeting, and we instruct partners to avoid sensitive-health categories insofar as platform tools allow. Messaging shown in paid media—including search ads on services such as Google Ads—is reviewed so that claims stay consistent with on-pack text and with this site: no suggestion that the product replaces medicine or treats an illness.
Data we collect
- Identity and contact data you submit in forms (name, email, optional phone, message text).
- Technical data such as browser type, device category, referrer URLs, and approximate location derived from IP.
- Usage data from optional analytics or marketing tags when you provide consent.
- Communication records when you email info@vendorluxury.world, contact@vendorluxury.world, support@vendorluxury.world, or help@vendorluxury.world.
Purposes and lawful bases
| Purpose | Lawful basis (GDPR) |
|---|---|
| Respond to inquiries and allocate inventory requests | Contract steps at your request; legitimate interests in customer care |
| Operate the website, security monitoring, and fraud prevention | Legitimate interests; legal obligations where applicable |
| Store cookie preferences | Consent (Article 6(1)(a)) |
| Optional analytics and marketing measurement | Consent (Article 6(1)(a)) |
| Comply with tax, consumer, or regulatory requests | Legal obligation (Article 6(1)(c)) |
Retention
| Data category | Typical retention |
|---|---|
| Form submissions and related emails | Up to 36 months after last interaction unless law requires longer |
| Technical server logs | Up to 90 rolling days unless security investigation extends need |
| Cookie preference records | 12 months or until you delete cookies, whichever is shorter |
| Accounting and invoice data | Statutory periods in Canada and the EU (often 6–10 years) |
Recipients and processors
We use infrastructure, email, and analytics providers bound by data processing agreements. Sub-processors remain within countries offering adequate protection or rely on Standard Contractual Clauses and supplementary measures.
International transfers
Data may be processed in Canada, the European Economic Area, the United Kingdom, or the United States. Where GDPR applies, we implement Chapter V transfer tools and conduct transfer impact assessments when required.
Security measures
- Transport-layer encryption for pages delivered over HTTPS.
- Role-based access internally and least-privilege credentials.
- Backups encrypted at rest and periodically tested.
- Incident response procedures including notification timelines where the law mandates disclosure.
Your rights
Depending on jurisdiction, you may request access, rectification, erasure, restriction, objection, or portability. You may withdraw consent for optional processing at any time. You may lodge a complaint with your supervisory authority; in British Columbia you may contact the Office of the Information and Privacy Commissioner.
To exercise rights, email any of: info@vendorluxury.world, contact@vendorluxury.world, support@vendorluxury.world, help@vendorluxury.world with sufficient detail for us to verify your request.
Children
Our services target adults. We do not knowingly collect data from anyone under 16 without parental authority.
Automated decision-making
We do not use purely automated decision-making that produces legal effects concerning you.
Updates
We revise this policy when our practices or laws change. Material updates will be reflected with a new review stamp in page metadata.