Privacy Policy

1. Who We Are

LIORA HOUSE (“we”, “us”, “our”) operates an online and offline platform for handcrafted press-on nails and organic nail treatment services, based in Chiang Mai, Thailand. This Privacy Policy explains how we collect, use, share, and protect your personal information when you interact with our website, online store, in-store services, and related systems.

By using our services, you acknowledge that you have read and understood this policy. If you have questions, please contact us using the details in Section 11 below.

2. Information We Collect

We collect information depending on how you interact with us:

3. How We Use Your Information

We process your information for the following purposes:

• Fulfil orders: process and ship your press-on nail orders, confirm payment, send order updates.
• Manage bookings: schedule nail treatment appointments, send confirmations and reminders.
• Operate your account: maintain your profile, membership tier, wallet balance, and loyalty points.
• Provide customer support: respond to inquiries via live chat, email, or phone.
• Process payments: securely process transactions through our payment provider (Stripe).
• Display reviews: publish product and service reviews you submit, alongside your first name.
• Send transactional communications: order confirmations, booking reminders, wallet/point notifications, and account security alerts.
• Send marketing communications: promotional emails, new collection announcements, and seasonal offers (only with your consent).
• Improve our platform: analyse usage patterns, fix bugs, optimise performance, and develop new features.
• Prevent fraud: detect and prevent fraudulent transactions, duplicate accounts, and coupon abuse.
• Legal compliance: meet tax, accounting, and regulatory obligations under Thai law.

4. Sharing Your Information

We do not sell your personal data. We share your information only in the following circumstances:

• Payment processor (Stripe): to process card payments securely. Stripe's own privacy policy governs their handling of payment data.
• Shipping & logistics partners: your name and shipping address are shared with delivery services to fulfil product orders.
• Email service providers: your email address is shared with our email delivery platform to send transactional and marketing messages you have consented to receive.
• Analytics providers: anonymised usage data may be shared with analytics services (subject to your cookie consent).
• Legal requirements: we may disclose information when required by law, court order, or to protect our legal rights.

We require all third-party service providers to process your data only on our behalf and in accordance with our instructions, and to maintain appropriate security measures.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described above:

• Account data: retained while your account is active. You may request account deletion at any time.
• Order & booking records: retained for a minimum period required by applicable tax and commercial laws (typically 5 years in Thailand).
• Wallet & points transactions: retained as long as your account is active plus the statutory retention period.
• Marketing consent records: retained for audit purposes for 3 years after consent is withdrawn.
• Cookie consent records: retained for 3 years from the date of consent.
• Chat messages: retained for 12 months for quality assurance, then anonymised or deleted.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS / TLS) across our entire platform.
• Passwords are hashed using cryptographic one-way functions; we cannot view your password.
• Payment card data is handled exclusively by Stripe (PCI DSS Level 1 certified) and never stored on our servers.
• Access to personal data is restricted to authorised staff on a need-to-know basis.
• Regular security reviews of our systems and third-party integrations.

No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data, subject to legal retention requirements.
• Restriction: request that we restrict the processing of your data in certain circumstances.
• Data portability: request a machine-readable copy of your data.
• Withdraw consent: withdraw consent for marketing communications or non-essential cookies at any time.
• Object: object to processing based on legitimate interests.

To exercise any of these rights, please contact us at the details provided in Section 11. We will respond within 30 days.

8. Children's Privacy

Our platform is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us so we can promptly delete it.

9. International Data Transfers

Our servers and some of our service providers may be located outside of Thailand. When your data is transferred internationally, we ensure appropriate safeguards are in place, including contractual protections with our service providers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on our website with a revised “Last updated” date. For significant changes, we may also notify you via email or a prominent notice on our platform.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: privacy@liorahouse.net
• Address: LIORA HOUSE, 61 Chang Phueak Soi 7, Wiang Bua, Chang Phueak, Mueang Chiang Mai, Chiang Mai 50300, Thailand
• Phone: +66 93 729 6353