Privacy Policy
Last updated: July 18, 2026
At LIORÉ, we respect your privacy and are committed to handling personal data lawfully, fairly, transparently, and securely.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you:
- Visit or interact with the LIORÉ website
- Create or manage a customer account
- Place or manage an order
- Subscribe to marketing communications
- Contact customer support
- Submit a return, refund, or privacy request
- Otherwise interact with LIORÉ, our products, or our services
This Privacy Policy should be read together with our Cookie Policy, Terms & Conditions, and Legal Notice.
Data Controller
For the purposes of the General Data Protection Regulation, also known as the GDPR, and other applicable data-protection laws, LIORÉ HAJI is the data controller responsible for personal data processed through the LIORÉ website, unless another party is identified as an independent data controller.
Legal business name: LIORÉ HAJI
Brand name: LIORÉ
Business type: Sole proprietorship
Organisation number: 935 459 060
Registered address: Greåkerveien 142A, 1718 Greåker, Norway
Email: support@lioreglow.com
Personal Data We Collect
Depending on how you use our website and services, we may collect the following categories of personal data:
- Identity information, such as your full name
- Contact information, such as your email address, telephone number, and delivery address
- Billing and transaction information
- Payment status and payment-method information
- Order details and purchase history
- Shipping and tracking information
- Return, refund, replacement, and complaint information
- Customer-account and login information, where accounts are available
- Customer-service messages and inquiries
- Information that you voluntarily provide to us
- Marketing preferences and communication history
-
Technical and usage information, including:
- IP address
- Browser type
- Device type
- Operating system
- Pages viewed
- Website interactions
- Shopping-cart and checkout activity
- Referral source
- Approximate location based on technical information
- Advertising and campaign-interaction information where legally permitted
Please do not provide sensitive personal data unless it is genuinely necessary for us to assist you.
How We Collect Personal Data
We may collect personal data in the following ways:
Directly From You
We collect information directly from you when you:
- Place or manage an order
- Create or manage a customer account
- Subscribe to marketing communications
- Complete a form
- Contact customer support
- Submit a return or refund request
- Exercise a privacy right
- Otherwise communicate with LIORÉ
Automatically
Certain technical and usage information may be collected automatically through:
- Essential website technologies
- Server logs
- Cookies
- Pixels
- Local storage
- Analytics tools
- Similar tracking technologies
Optional analytics, advertising, and marketing technologies are used only where legally permitted and, where required, after valid consent has been provided.
From Third Parties
We may receive limited personal data from trusted third parties that help us operate our business, including:
- Shopify and other e-commerce providers
- Payment providers
- Fulfilment and warehouse partners
- Shipping and logistics providers
- Fraud-prevention and security providers
- Analytics providers
- Advertising and social media platforms
- Email and marketing providers
- Customer-service technology providers
The information received depends on the service provided and how you interact with that service.
How and Why We Use Personal Data
We may use personal data to:
- Process payments and transactions
- Confirm, process, and fulfil orders
- Arrange shipping and delivery
- Provide tracking and delivery updates
- Manage returns, refunds, replacements, and complaints
- Provide customer support
- Respond to questions and requests
- Create and manage customer accounts
- Send essential order, payment, security, and delivery messages
- Prevent fraud, misuse, and unauthorised transactions
- Operate, secure, troubleshoot, and improve the website
- Understand how the website and services are used
- Analyse website, business, and marketing performance
- Personalise the customer experience where legally permitted
- Send marketing communications where a valid legal basis applies
- Maintain accounting, tax, transaction, and legal records
- Establish, exercise, or defend legal claims
- Comply with legal and regulatory obligations
We only process personal data for specified, explicit, and legitimate purposes.
Legal Bases for Processing
We process personal data only where we have a valid legal basis.
Depending on the processing activity, we may rely on one or more of the following legal bases.
Performance of a Contract
We may process personal data where it is necessary to:
- Take steps at your request before entering into a purchase agreement
- Complete a purchase
- Receive and process payment
- Fulfil and deliver an order
- Provide order and delivery updates
- Manage returns, refunds, and replacements
- Provide requested customer support
Legal Obligation
We may process and retain personal data where necessary to comply with:
- Accounting requirements
- Tax requirements
- Consumer-protection laws
- Product-safety obligations
- Regulatory requirements
- Fraud-prevention obligations
- Other applicable legal requirements
Consent
We may process personal data based on your consent, including for:
- Optional analytics cookies
- Advertising and marketing cookies
- Certain marketing communications
- Other processing activities where consent is legally required
You may withdraw your consent at any time.
Withdrawing consent does not affect processing that was lawful before consent was withdrawn.
Legitimate Interests
We may process personal data where reasonably necessary to:
- Operate and improve our business
- Protect and secure the website
- Prevent fraud and misuse
- Communicate with customers
- Understand business and website performance
- Protect our customers and legal rights
- Establish, exercise, or defend legal claims
We will only rely on legitimate interests where those interests are not overridden by your rights and freedoms.
Information Required to Complete an Order
We require certain personal data to process payment, fulfil the purchase agreement, and deliver your order.
This information may include:
- Your full name
- Email address
- Telephone number where required
- Delivery address
- Billing information
- Payment-related information
- Order details
If you do not provide the required information, we may be unable to complete your purchase, deliver your order, or provide the requested service.
Payment Information
Payments are processed by trusted third-party payment providers.
LIORÉ does not normally receive or store your complete payment-card details.
We may receive limited payment and transaction information, including:
- Payment status
- Payment method
- Transaction reference
- Billing information
- Information required to process a refund
- Information required to investigate a payment issue
Payment providers may perform:
- Payment-authorisation checks
- Identity-verification checks
- Security checks
- Fraud-prevention checks
These activities are carried out according to the payment provider’s own terms, privacy practices, and legal obligations.
Cookies and Similar Technologies
We use cookies and similar technologies to operate, secure, and improve the LIORÉ website.
These technologies may include:
- Cookies
- Pixels
- Local storage
- Tags
- Similar device or browser identifiers
They may be used to:
- Keep the website secure
- Enable shopping-cart functionality
- Operate checkout and payment functions
- Maintain customer-account sessions
- Remember preferences
- Prevent fraud and unauthorised activity
- Understand website performance
- Analyse how visitors use the website
- Measure advertising and marketing performance
- Support personalised advertising where legally permitted
Strictly Necessary Technologies
Strictly necessary cookies and similar technologies may be used where they are required to provide essential website functions or services requested by the user.
These may support:
- Website security
- Shopping-cart functions
- Checkout
- Payments
- Account sessions
- Fraud prevention
Optional Technologies
Optional functional, analytics, advertising, and marketing technologies will only be used where legally permitted and, where required, after valid consent has been provided.
Where consent is required:
- Optional technologies will not be activated before consent
- You may accept or reject optional categories
- You may change your preferences later
- You may withdraw consent at any time
- Withdrawing consent will not affect processing that was lawful before withdrawal
Managing Cookie Preferences
You can review, accept, reject, or change your choices through the Cookie Settings or Cookie Preferences option available on the LIORÉ website.
You may also manage cookies through your browser settings. However, blocking certain technologies may prevent parts of the website from functioning correctly.
Full information about cookie categories, purposes, providers, and available preference controls is provided in our separate Cookie Policy.
Marketing Communications
If you subscribe or otherwise lawfully agree to receive marketing communications, we may send you:
- Product news
- Product-launch announcements
- Promotional offers
- Discount information
- Brand news
- Beauty and personal-care content
You can unsubscribe at any time by using the unsubscribe link included in a marketing email.
Unsubscribing from marketing does not prevent you from receiving essential transactional messages, including:
- Order confirmations
- Payment notifications
- Shipping and tracking updates
- Security notifications
- Return and refund updates
- Customer-service responses
TikTok Advertising and Data Sharing
We use TikTok advertising and measurement technologies to understand the performance of our advertising, measure customer interactions, improve campaign delivery, create advertising audiences, and show more relevant advertisements where legally permitted.
Our Shopify store may be connected to TikTok using the Maximum Data Sharing level. This integration may use technologies and services including:
-
TikTok Pixel
-
TikTok Events API
-
Advanced Matching
-
Shopify APIs
-
TikTok in-app browsing or checkout functionality, where available
-
Other TikTok advertising and measurement technologies
Depending on your interaction with our website and the permissions available, information may be shared with TikTok through browser-based technologies and server-to-server connections.
Events That May Be Shared
The customer and website events shared with TikTok may include:
-
Viewing a page or product
-
Searching the website
-
Adding a product to the shopping cart
-
Beginning checkout
-
Adding payment information
-
Completing a purchase
-
Completing customer registration
-
Other interactions used to measure and optimise advertising performance
Information That May Be Shared
The information associated with these events may include:
-
Email address
-
Telephone number
-
First name
-
Last name
-
Country or region
-
State or province
-
City
-
Postal or ZIP code
-
IP address
-
Browser and device information
-
Cookie, pixel, device, or advertising identifiers
-
Order and transaction information
-
Product and cart information
-
Website activity and interaction data
-
Referral and campaign information
Certain identifiers, such as email addresses and telephone numbers, may be hashed before being transmitted for advertising-matching purposes. Hashing does not prevent the information from being used to match website activity with TikTok users.
Information may also be shared through Shopify’s Order APIs, Customer APIs, app pixels, server pixels, and related integrations where enabled.
Why We Share Information With TikTok
We may use and share this information to:
-
Measure advertising conversions
-
Understand whether an advertisement led to a visit, registration, checkout, or purchase
-
Analyse advertising and campaign performance
-
Improve advertising delivery
-
Create or expand advertising audiences
-
Support retargeting
-
Reduce irrelevant advertising
-
Prevent fraud and unauthorised activity
-
Improve our marketing strategy and customer reach
Legal Basis and Consent
Where legally required, TikTok advertising, analytics, Advanced Matching, and other optional tracking technologies will only be used after valid consent has been provided.
Visitors may reject optional marketing and analytics technologies without preventing access to the basic website.
You may review, reject, or withdraw your choices at any time through the Cookie Settings or Cookie Preferences control available on our website.
Withdrawing consent does not affect processing that was lawful before consent was withdrawn.
In jurisdictions where applicable privacy laws provide a right to opt out of certain targeted advertising, sales, or sharing of personal data, you may exercise that right through our available privacy controls or by contacting us.
TikTok’s Use of Information
TikTok may process information received through its advertising technologies according to its own business terms, privacy information, and applicable legal responsibilities.
Depending on the processing activity and applicable law, TikTok may act as a processor, independent data controller, joint controller, service provider, or another legally recognised role.
For further information about cookies and tracking technologies, review our Cookie Policy. You can manage available choices through Cookie Settings.
How We Share Personal Data
We do not sell personal data for monetary compensation.
We may disclose personal data where reasonably necessary to:
- Operate and secure our business
- Provide our products and services
- Process and fulfil orders
- Arrange payments, shipping, and customer support
- Measure and improve website performance
- Manage advertising and marketing where legally permitted
- Prevent fraud and unauthorised activity
- Comply with legal and regulatory obligations
Recipients may include:
- Shopify and other e-commerce or website providers
- Payment processors
- Fulfilment and warehouse partners
- Shipping and logistics providers
- Email and marketing platforms
- Analytics and advertising providers
- Social media platforms
- Fraud-prevention and security providers
- Customer-service providers
- Accountants
- Legal advisers
- Insurers
- Other professional advisers
- Authorities, regulators, courts, or law-enforcement bodies where legally required
- A genuine buyer, successor, or adviser in connection with a business sale, restructuring, merger, or transfer
We may also share personal data with TikTok and its affiliated advertising services where we use:
- TikTok Pixel
- TikTok Events API
- Advanced Matching
- Shopify Order APIs
- Shopify Customer APIs
- App pixels
- Server-to-server integrations
- Other related TikTok advertising and measurement technologies
Information shared with TikTok may include:
- Website and product views
- Searches
- Add-to-cart activity
- Checkout activity
- Payment events
- Completed purchases
- Customer registrations
- Order and transaction information
- Product and cart information
- Browser and device information
- IP address
- Advertising, cookie, pixel, or device identifiers
- Email address
- Telephone number
- First name
- Last name
- Country or region
- State or province
- City
- Postal or ZIP code
This information may be used to:
- Measure advertising conversions
- Analyse campaign performance
- Improve advertising delivery
- Create or expand advertising audiences
- Support retargeting
- Provide more relevant advertising
- Understand whether advertisements lead to visits, checkouts, or purchases
Where legally required, optional TikTok advertising, analytics, Advanced Matching, and related tracking technologies will only be used after valid consent has been provided.
Certain identifiers, such as email addresses and telephone numbers, may be hashed before being transmitted for advertising-matching purposes.
Depending on their role, these recipients may act:
- As processors acting on our instructions
- As independent data controllers responsible for their own processing
- In another role recognised under applicable data-protection law
We only share personal data that is reasonably necessary for the relevant purpose.
International Data Transfers
Some service providers may process personal data outside Norway or the European Economic Area.
Where required, international transfers may be protected through:
- A recognised adequacy decision
- European Commission Standard Contractual Clauses
- Another legally recognised transfer mechanism
- Appropriate supplementary technical and organisational safeguards
We take reasonable steps to ensure that international transfers are protected in accordance with applicable data-protection law.
Data Retention
We retain personal data only for as long as reasonably necessary for the relevant purpose and to comply with legal obligations.
Retention periods may depend on:
- The type of personal data
- The purpose for which the data was collected
- The duration of our customer relationship
- Accounting and tax requirements
- Consumer-protection requirements
- Product-safety obligations
- Fraud-prevention and security needs
- Complaint and dispute-resolution requirements
- Applicable limitation periods
- Other legal or regulatory obligations
When personal data is no longer required, we will:
- Delete it
- Anonymise it
- Securely restrict access to it where appropriate
Data Security
We use appropriate technical and organisational measures designed to protect personal data against:
- Unauthorised access
- Accidental loss
- Misuse
- Unauthorised disclosure
- Alteration
- Destruction
Access to personal data is limited to people and service providers that reasonably require it to perform their duties.
No internet transmission or electronic storage method can be guaranteed to be completely secure. Although we take reasonable measures to protect personal data, absolute security cannot be guaranteed.
Automated Processing and Fraud Prevention
LIORÉ does not generally make decisions that produce legal or similarly significant effects based solely on automated processing.
Payment, security, and fraud-prevention providers may use automated systems to:
- Identify suspicious activity
- Verify transactions
- Prevent fraud
- Protect customer accounts
- Protect the website
Where applicable, this processing is governed by the provider’s own policies and applicable data-protection obligations.
Your Privacy Rights
Where the GDPR or another applicable data-protection law applies, you may have the right to:
- Request access to personal data held about you
- Request correction of inaccurate or incomplete personal data
- Request deletion in applicable circumstances
- Request restriction of processing in applicable circumstances
- Object to processing based on legitimate interests
- Object to direct marketing at any time
- Withdraw consent where processing is based on consent
- Receive eligible personal data in a structured and commonly used format
- Request transfer of eligible data to another provider
- Request human review of certain qualifying automated decisions
- Submit a complaint to a competent data-protection authority
These rights are not absolute and may be limited where we are required to retain or process personal data to:
- Comply with legal obligations
- Establish legal claims
- Exercise legal rights
- Defend legal claims
- Protect the rights of another person
To make a privacy request, use our Contact Us form and clearly state that your request concerns privacy or personal data.
We may need to verify your identity before processing your request.
Customers in Norway may also submit a complaint to the Norwegian Data Protection Authority, Datatilsynet.
United States Privacy Rights
Residents of certain U.S. states may have additional privacy rights where the relevant law and applicable legal thresholds apply to LIORÉ.
Depending on the applicable law, these rights may include:
- Access to personal data
- Correction of inaccurate personal data
- Deletion of personal data
- Data portability
- Information about how personal data is used or disclosed
- Opting out of certain targeted advertising
- Opting out of certain sales or sharing of personal data
- Exercising privacy rights without unlawful discrimination
LIORÉ does not sell personal data for money.
Certain analytics or advertising activities may nevertheless fall within broad legal definitions of “sale” or “sharing” under some U.S. state privacy laws.
Where an applicable opt-out right exists, you may:
- Use the cookie-preference tool available on our website
- Withdraw consent through Cookie Settings
- Submit a request through our Contact Us form
- Email support@lioreglow.com
Children’s Privacy
Our website is not specifically directed at children.
We do not knowingly collect personal data from children in violation of applicable law.
If you believe that a child has improperly provided personal data to us, please contact us so we can investigate the matter and take appropriate action.
Third-Party Links
Our website may contain links to external websites, services, platforms, or applications.
LIORÉ does not control and is not responsible for the independent privacy, security, content, or practices of third-party websites and services.
We recommend reviewing the relevant third party’s privacy information before providing personal data or using its services.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Our business
- Our website
- Our products or services
- Our service providers
- Our data-processing activities
- The technologies we use
- Applicable legal or regulatory requirements
The latest version will be published on this page.
The “Last updated” date at the top of this Privacy Policy shows when it was most recently revised.
Contact
For questions about this Privacy Policy, how we process personal data, or to exercise your privacy rights, use our Contact Us form.
You may also email: support@lioreglow.com
Our complete business and legal information is available in our Legal Notice.
Full information about cookies and similar technologies is available in our Cookie Policy, and preferences can be managed through Cookie Settings.