Legal
Privacy policy
Last updated 13 October 2026. Written to be read, not to be skimmed past.
Who we are
LATTOV is a trading name of LATTOV Studio Co., Ltd., registered in Shenzhen, China (the "we", "us"). We are the data controller for personal information collected through this website. Contact us at [email protected].
We sell physical jewellery worldwide. That means we necessarily handle a delivery address and an email address — and that is close to the whole of it.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email address | Order confirmation, shipping updates, replies to your enquiries | Contract |
| Name & delivery address | Delivering your order | Contract |
| Phone number | Courier contact for express deliveries and customs | Contract |
| Order history | Warranty claims, returns, accounting records | Contract, legal obligation |
| Payment metadata | Fraud prevention and refunds. Card numbers never reach us | Legitimate interest |
| IP address & device info | Security, abuse prevention, aggregate traffic measurement | Legitimate interest |
| Messages you send us | Answering you | Legitimate interest |
We do not buy or sell personal data, we do not build advertising profiles, and we do not run third-party behavioural tracking or advertising pixels on this site.
Cookies and local storage
We do not use tracking cookies, and this site has no advertising or analytics cookies.
We do use your browser's localStorage for functions that are strictly
necessary to shop:
lattov.cart.v1— keeps your cart between page views and visits.- A currency preference, so we can show prices in the currency you chose.
- A session record of your last order, used only to render the confirmation page.
Because these are required for checkout to work at all, they are classified as strictly necessary and do not require a consent banner under the ePrivacy Directive. Clearing your browser storage removes all of them and your cart will be empty.
The payment provider sets its own cookies on its own checkout page, after you leave our domain. Those are covered by the provider's privacy policy, not ours.
Who we share it with
- Payment provider — PayPal processes your payment. It receives the amount, order reference and your billing details. It never shares your card number with us.
- Carriers — DHL, FedEx and the local postal partner receive the name, address, phone number and a description of the goods, as required for delivery and customs clearance.
- Email — order and support emails are sent through our transactional email provider.
- Hosting — our website is served by a CDN provider that processes request metadata for delivery and security.
- Legal — we will disclose information if required by law or to defend a legal claim.
We do not sell, rent or trade personal data to anyone, for any purpose, ever.
International transfers
We are based in China and ship worldwide, so your data will be transferred outside your country of residence — including to China, to the United States (where some processors host infrastructure) and to the countries your parcel passes through. We rely on standard contractual clauses or equivalent safeguards with our processors where required.
How long we keep it
- Order and payment records: 7 years, to satisfy accounting and tax obligations.
- Support messages: 2 years, so we can find the history if you come back with the same piece.
- Newsletter subscription: until you unsubscribe, which is one click in every email.
- Server logs: up to 30 days.
Your rights
Depending on where you live you have some or all of these rights: access to the personal data we hold about you, correction of inaccuracies, deletion, restriction of processing, portability, objection to processing based on legitimate interests, and withdrawal of consent where consent is the basis.
To exercise any of them, email [email protected]. We respond within 30 days. If you are in the EU or UK you also have the right to complain to your local supervisory authority. Note that we may not be able to delete records we are legally required to retain for tax purposes.
Children
This site is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us with data, contact us and we will delete it.
Changes to this policy
We will update this page and change the "last updated" date above when this policy changes materially. Continuing to use the site after that constitutes acceptance of the updated policy.