Privacy policy

Last updated: 23 Feb 2026

On behalf of LUCKY TO HAVE®, Luckytosh GmbH operates this shop and website, including all related information, content, features, tools, products, and services, in order to provide you as a customer with a personalized shopping experience (the “Services”). LUCKY TO HAVE® Original · Official Shop is powered by Shopify, which enables us to provide you with these Services. This Privacy Policy describes how we collect, use and disclose personal data when you visit, use or make a purchase or other transaction using the Services, or otherwise communicate with us. In the event of a conflict between our General Terms and Conditions and this Privacy Policy, this Privacy Policy shall prevail with regard to the collection, processing and disclosure of personal data.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you confirm that you have read and understood this Privacy Policy and agree to the collection, use and disclosure of your information as described herein.

What personal data do we collect or process?

When we use the term “personal data”, we mean information that identifies you or can reasonably be linked to you. Personal data does not include information that has been anonymized or aggregated so that it cannot reasonably be used to identify you.

Depending on how you interact with the Services, where you live and what is permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences drawn from such data:

Contact information, including name, postal address, billing address, shipping address, phone number and email address
Financial information, including credit or debit card details, payment method, transaction details, payment confirmation and other payment-related information
Account information, including username, password, security questions, preferences and settings
Transaction information, including products viewed, added to cart, wishlisted, purchased, returned, exchanged or cancelled, as well as past transactions
Communications with us, including information you provide when contacting customer support
Device information, including device type, browser, network connection, IP address and other unique identifiers
Usage information, including how and when you interact with or browse the Services

Sources of personal data

We may collect personal data from the following sources:

Directly from you, for example when you create an account, use the Services or contact us
Automatically via the Services, including through cookies and similar technologies
From our service providers, when they collect or process data on our behalf
From partners and other third parties

How do we use your personal data?

We may use personal data for the following purposes:

Providing, customizing and improving the Services, including order processing, payment handling, shipping, returns, account management and personalized recommendations
Marketing and advertising, including sending marketing communications and displaying targeted ads based on your interactions with the Services
Security and fraud prevention, including authentication, detecting and preventing fraudulent or illegal activity and protecting the safety of the Services
Communication with you, including customer support and maintaining our business relationship
Legal compliance, including responding to lawful requests, enforcing our terms and protecting our legal rights

How do we share personal data?

We may share personal data with third parties for legitimate purposes, including:

Service providers, such as IT services, payment processors, analytics providers, fulfillment and shipping partners
Business and marketing partners, including for personalized advertising (subject to your rights under applicable law)
Third parties at your direction or with your consent, for example for delivery or social media integrations
Affiliates or entities within our corporate group
Legal or business transactions, such as mergers, insolvency proceedings or legal obligations

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal data related to your access to and use of the Services in order to provide and improve them. Data submitted to the Services may be transferred to Shopify and third parties in other countries.

Shopify may also use personal data from your interactions with our shop, other merchants and Shopify to provide enhanced features. In these cases, Shopify acts as the data controller. More information is available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-party websites and links

The Services may contain links to third-party websites or platforms not controlled by us. We are not responsible for the privacy or security practices of such third parties. Accessing these sites is at your own risk.

Children’s data

The Services are not intended for children. We do not knowingly collect personal data from individuals under the age of majority in their jurisdiction. If you believe a child has provided us with personal data, please contact us to request deletion.

Data security and retention

No security measures are perfect. We cannot guarantee absolute security of your data. Retention periods depend on factors such as legal obligations, account maintenance and dispute resolution.

Your rights and choices

Depending on your location, you may have the right to:

Access your personal data
Request deletion
Request correction
Request data portability
Manage marketing communications

If you are located in the UK or EEA, you may also have rights to object to or restrict processing and to withdraw consent.

Requests can be made via the contact details below. Identity verification may be required.

Complaints

If you have concerns about how we process personal data, please contact us. You may also have the right to lodge a complaint with your local data protection authority.

International transfers

Your data may be transferred, stored and processed outside your country of residence. Transfers outside the EEA or UK are protected using recognized safeguards such as EU Standard Contractual Clauses.