Your position: Home
>
Privacy policy
Privacy policy
# Privacy Policy
**Last Updated:** October 27, 2026
Welcome to LolaDiva. Pujiang Mishi E-Commerce Co., Ltd. (“LolaDiva,” “we,” “us,” or “our”) operates https://loladiva.store (the “Website”). We are committed to protecting your privacy and handling your personal information in accordance with applicable privacy and data protection laws.
This Privacy Policy explains how we collect, use, disclose, transfer, retain, and protect personal information when you visit the Website, place an order, contact us, or otherwise interact with our services.
For the purposes of applicable data protection laws, Pujiang Mishi E-Commerce Co., Ltd. is the data controller of the personal information described in this Policy, unless otherwise stated.
We use UEESHOP Inc. (“UEESHOP”) to power our e-commerce business. UEESHOP acts as our data processor for certain processing activities and may act as an independent data controller for personal information processed for its own purposes, such as platform security, legal compliance, and service improvement.
This Policy applies to visitors and customers in all destinations listed in our Shipping Policy, including the United States, Canada, Australia, New Zealand, the United Kingdom, the European Economic Area, Switzerland, Singapore, Thailand, Japan, the United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain, Israel, Mexico, South Africa, and Chile.
Where a local law provides you with additional rights or imposes additional requirements, those mandatory local requirements will apply.
## 1. Information We Collect
The information we collect depends on how you interact with the Website and our services.
### A. Information You Provide
We may collect:
- **Identifiers and contact information:** Your name, billing address, shipping address, email address, telephone number, and account details.
- **Order and transaction information:** Products purchased, order history, delivery details, returns, refunds, invoices, and customer service records.
- **Prescription and health-related information:** Because we sell contact lenses, we collect prescription information for all orders. This may include prescription images or copies, your prescriber’s name and contact details, and lens parameters such as brand, power, base curve, diameter, cylinder, and axis, where applicable.
- **Communications:** Information you provide when contacting customer support, submitting a privacy request, responding to a survey, or otherwise communicating with us.
- **Marketing and consent preferences:** Your communication preferences, cookie choices, consent records, and information about whether you have subscribed to or unsubscribed from marketing communications.
### B. Payment Information
Your payment information is processed by UEESHOP and its payment partners. We do not store your full payment card number or complete payment card details.
Payment processors may process payment card information, billing details, transaction information, and fraud-prevention data in accordance with their own privacy policies and applicable payment security standards.
### C. Information Collected Automatically
When you visit the Website, we may automatically collect:
- Internet Protocol (“IP”) address;
- Browser type, operating system, and device identifiers;
- Referring URLs and pages viewed;
- Date, time, and duration of visits;
- Shopping cart and checkout activity;
- Cookie identifiers and similar online identifiers;
- Advertising attribution and campaign interaction information; and
- Purchase, conversion, and other Website interaction events.
### D. Information From Third Parties
We may receive information from payment processors, logistics providers, fraud-prevention providers, advertising platforms, and other service providers where necessary to fulfill orders, prevent fraud, measure advertising performance, or operate the Website.
## 2. How We Use Personal Information
We use personal information for the following purposes:
- Processing and fulfilling orders;
- Processing payments and preventing payment fraud;
- Verifying prescriptions and complying with contact lens regulations;
- Arranging shipping, customs clearance, delivery, returns, and refunds;
- Providing order confirmations, invoices, tracking information, and customer support;
- Creating and administering customer accounts;
- Maintaining Website security and preventing misuse;
- Improving our products, services, and Website functionality;
- Measuring advertising attribution and campaign performance;
- Sending marketing communications where permitted and, where required, with your consent;
- Complying with accounting, tax, customs, medical device, consumer protection, and other legal obligations; and
- Establishing, exercising, or defending legal claims.
We do not use Prescription Information for advertising, audience targeting, marketing profiles, or unrelated commercial purposes.
## 3. Legal Bases for Processing
Where applicable, including under the GDPR, UK GDPR, and similar laws, we rely on one or more of the following legal bases:
- **Performance of a contract:** To process orders, arrange payment, verify prescriptions where necessary, deliver products, and provide requested customer support.
- **Compliance with legal obligations:** To maintain transaction, customs, accounting, prescription-verification, medical device, and other legally required records.
- **Legitimate interests:** To prevent fraud, maintain Website security, protect our legal rights, and improve our services, where those interests are not overridden by your rights and freedoms.
- **Consent:** To send optional marketing communications, use non-essential cookies or advertising technologies where consent is required, and process health-related information where explicit consent is required.
- **Other bases permitted by local law:** Where another lawful basis applies in your jurisdiction.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Certain processing activities may continue on another applicable legal basis, including where processing is necessary to fulfill your order, maintain legally required records, or establish or defend legal claims.
If providing prescription information is necessary to fulfill an order and we cannot lawfully process that information, we may be unable to complete the order.
## 4. Prescription and Health-Related Information
Prescription Information may be considered health data, sensitive personal information, protected health information, or special-category data in certain jurisdictions.
We collect and use Prescription Information only for purposes including:
- Verifying your prescription;
- Fulfilling and delivering your order;
- Providing customer support relating to your order;
- Complying with applicable contact lens, medical device, record-keeping, and consumer protection requirements; and
- Establishing, exercising, or defending legal claims.
Where required by applicable law, we will obtain your explicit consent before collecting or processing Prescription Information, unless another lawful basis applies.
We disclose Prescription Information only to:
- Your prescriber, for prescription-verification purposes;
- Service providers that process it on our behalf under contractual confidentiality and data protection obligations;
- Logistics or regulatory recipients where legally necessary to fulfill the order; and
- Regulators, courts, law-enforcement authorities, or other parties where required by law.
We do not sell or rent Prescription Information. We do not disclose Prescription Information to Meta, Google, or other advertising providers for advertising, audience targeting, or behavioral profiling purposes.
We protect Prescription Information using appropriate administrative, technical, and physical safeguards. Access is limited to personnel and service providers who need the information for the purposes described in this Policy.
We retain Prescription Information only for as long as necessary to complete verification, fulfill your order, meet applicable record-keeping requirements, and establish or defend legal claims. When it is no longer required, we will securely delete or anonymize it, subject to any legal retention obligations.
Where applicable, our handling of Prescription Information is intended to address requirements under the U.S. Fairness to Contact Lens Consumers Act, the FTC Contact Lens Rule, HIPAA where applicable, applicable U.S. state health information laws, the GDPR, UK GDPR, and other applicable privacy or health information laws.
HIPAA obligations apply only where the relevant entity and processing activity are legally subject to HIPAA.
## 5. Cookies and Advertising Technologies
We use strictly necessary cookies and similar technologies to operate the Website, maintain shopping carts, process transactions, provide security, and remember essential preferences.
### Meta Pixel
We use Meta Pixel for advertising attribution, conversion measurement, campaign analysis, and related advertising purposes. The information collected through Meta Pixel may include IP addresses, device and browser information, cookie or online identifiers, pages viewed, Website interactions, and purchase or conversion events.
The information may be disclosed to Meta and processed by Meta in accordance with its own privacy terms and policies.
### Google Advertising Technologies
We use Google Tag Manager to manage certain Website tags and may use Google Ads for advertising attribution, conversion measurement, campaign analysis, and related advertising purposes when these services are enabled.
Depending on the services enabled, these technologies may collect information such as IP addresses, device and browser information, pages viewed, Website interactions, and purchase or conversion events.
### Consent and Your Choices
For visitors in the European Economic Area, the United Kingdom, and other jurisdictions where prior consent is required, we provide a cookie consent mechanism. Non-essential cookies and advertising technologies will remain disabled until you provide your consent, except where applicable law permits another approach.
Where required, you may accept, reject, or customize non-essential cookies. You may withdraw or change your consent through the available cookie consent or preference controls.
You may also manage cookies through your browser settings and advertising preferences through the relevant Meta, Google, or other platform settings. Disabling strictly necessary cookies may affect Website functionality.
We do not intentionally transmit Prescription Information, prescription images, prescriber details, lens parameters, or other health-related order information to Meta, Google, or other advertising providers.
Certain disclosures through advertising technologies may be considered “sharing,” “targeted advertising,” or similar processing under applicable laws. Where required, you may opt out by using available privacy controls or by contacting us at service@loladiva.store.
## 6. How We Share Personal Information
We may disclose personal information to the following categories of recipients, only as necessary for the purposes described in this Policy:
- **E-commerce and technology providers:** Including UEESHOP, hosting providers, website maintenance providers, customer support providers, and communications providers.
- **Payment and fraud-prevention providers:** To process payments, prevent fraud, and manage chargebacks or disputes.
- **Shipping, customs, and logistics providers:** To fulfill orders, arrange delivery, process customs documentation, and handle returns.
- **Prescribers:** Solely for prescription-verification purposes.
- **Advertising and technology providers:** Including Meta and, where enabled, Google, subject to applicable consent and opt-out requirements.
- **Professional advisers:** Including lawyers, accountants, auditors, and consultants, where reasonably necessary.
- **Regulators and government authorities:** Where disclosure is required by law, legal process, customs requirements, or regulatory obligations.
- **Business transferees:** In connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate confidentiality protections.
We require service providers acting on our behalf to process personal information only in accordance with our instructions and applicable contractual confidentiality and data protection obligations.
We do not sell Prescription Information. We do not sell personal information for monetary consideration. Certain advertising disclosures may nevertheless be regulated as a “sale,” “sharing,” or “targeted advertising” under applicable law, and you may exercise any applicable opt-out rights.
## 7. International Data Transfers
We operate from China and use service providers that may process personal information in China, the United States, Canada, and other countries in which they operate.
Your personal information may therefore be transferred to and processed in countries outside your jurisdiction, including countries whose privacy or data protection laws may differ from those in your jurisdiction.
Where required by applicable law, we use an appropriate lawful transfer mechanism. Depending on the circumstances, this may include:
- An adequacy decision or equivalent recognition;
- European Commission Standard Contractual Clauses;
- The UK International Data Transfer Agreement or Addendum;
- Contractual, organizational, and technical safeguards required by local law; or
- Another legally recognized transfer mechanism.
Where necessary, we will take supplementary measures reasonably designed to protect the transferred information.
You may contact us for further information about the safeguards applicable to international transfers of your personal information, subject to lawful confidentiality restrictions.
## 8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.
Our retention criteria include:
- **Order and transaction information:** Retained as necessary to fulfill orders and meet accounting, tax, customs, warranty, consumer protection, and other legal requirements.
- **Prescription Information:** Retained as necessary for prescription verification, order fulfillment, legally required record-keeping, and the establishment or defense of legal claims.
- **Customer service records:** Retained as necessary to resolve inquiries, complaints, disputes, and related legal matters.
- **Marketing information:** Retained until you withdraw consent or opt out, subject to limited suppression records needed to honor your request.
- **Cookie and advertising data:** Retained for the periods applicable to the relevant technology, consent record, or advertising purpose, subject to applicable law.
- **Privacy requests and consent records:** Retained as necessary to demonstrate compliance and honor your choices.
When personal information is no longer required, we will delete it, anonymize it, or securely isolate it until deletion is possible.
## 9. Your Privacy Rights
Depending on your jurisdiction and subject to applicable conditions and exceptions, you may have the right to:
- Request confirmation of whether we process your personal information;
- Access or obtain a copy of your personal information;
- Correct inaccurate or incomplete personal information;
- Request deletion or erasure of personal information;
- Request restriction of processing;
- Object to processing based on legitimate interests;
- Object to direct marketing at any time;
- Withdraw consent at any time;
- Request data portability;
- Request information about international transfers and applicable safeguards;
- Opt out of certain sales, sharing, profiling, or targeted advertising;
- Express your views concerning certain automated decisions and request human review where required;
- Appeal a decision regarding your privacy request, where applicable;
- Receive communications about a personal data breach where required by law; and
- Lodge a complaint with your local privacy or data protection authority.
These rights are not absolute. For example, we may retain information where necessary to comply with legal obligations, complete an ongoing transaction, protect against fraud, or establish or defend legal claims.
To exercise your rights, contact us at service@loladiva.store. We may request information reasonably necessary to verify your identity and, where applicable, the authority of an authorized agent.
We will respond within the period required by applicable law. We will not unlawfully discriminate against you for exercising your privacy rights.
## 10. Regional Privacy Notices
### A. European Economic Area, United Kingdom, and Switzerland
This section applies to customers in Austria, Belgium, Bulgaria, Croatia, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, the United Kingdom, and Switzerland.
We process personal information in accordance with the GDPR, UK GDPR, the UK Data Protection Act 2018, the Swiss Federal Act on Data Protection, and other applicable local requirements, as relevant.
In addition to the rights described in Section 9, you may have the right to lodge a complaint with the data protection authority in your country of residence, place of work, or the place where you believe an infringement occurred.
Our legal bases for processing are described in Section 3. Information about international transfers is provided in Section 7.
Where we rely on legitimate interests, you may object to the relevant processing. Where we process special-category or health-related information, we will rely on an applicable legal condition, which may include your explicit consent where required.
Where required by applicable law, we will provide the contact details of any appointed EU, UK, or Swiss representative through this Policy or upon request.
### B. United States
This section applies to customers in the United States.
Depending on your state of residence and whether a particular law applies to our business, you may have rights to access, correct, delete, or obtain a portable copy of personal information, and to opt out of certain sales, sharing, targeted advertising, profiling, or processing of sensitive personal information.
We handle Prescription Information in accordance with applicable federal and state requirements, including prescription-verification and record-keeping obligations. HIPAA applies only where the relevant entity and activity are legally subject to HIPAA.
You may exercise applicable rights or appeal a decision concerning a privacy request by contacting service@loladiva.store. We will not unlawfully discriminate against you for exercising your rights.
### C. Canada
This section applies to customers in Canada.
We handle personal information in accordance with applicable federal and provincial privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable.
Subject to applicable law, you may request access to or correction of your personal information, withdraw consent, and challenge our handling of your personal information.
Withdrawing consent may affect our ability to provide services that depend on the relevant information. You may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.
### D. Australia and New Zealand
This section applies to customers in Australia and New Zealand.
We handle personal information in accordance with applicable privacy requirements, including the Australian Privacy Act 1988 and Australian Privacy Principles, and the New Zealand Privacy Act 2020, where applicable.
You may request access to or correction of your personal information and may complain about our handling of your personal information. You may also contact the Office of the Australian Information Commissioner or the New Zealand Office of the Privacy Commissioner, as applicable.
### E. Japan, Singapore, and Thailand
This section applies to customers in Japan, Singapore, and Thailand.
We handle personal information in accordance with applicable requirements under Japan’s Act on the Protection of Personal Information, Singapore’s Personal Data Protection Act, and Thailand’s Personal Data Protection Act, where applicable.
Subject to local law, you may have rights to access, correct, delete, restrict, or object to certain processing, withdraw consent, request data portability, or complain to the relevant authority.
Where required, we will provide information about the purposes of processing, overseas transfers, and applicable safeguards.
### F. United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain, and Israel
This section applies to customers in the United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain, and Israel.
We handle personal information in accordance with applicable privacy, data protection, consumer protection, electronic communications, and health information requirements in these jurisdictions.
Subject to applicable law, you may have rights to access, correct, update, delete, restrict, or object to certain processing, withdraw consent, or complain to the relevant authority.
Where local law requires a specific legal basis, consent, record, safeguard, or approval for processing or cross-border transfers, we will apply the relevant requirements to the affected processing activity.
### G. Mexico and Chile
This section applies to customers in Mexico and Chile.
We handle personal information in accordance with applicable privacy and data protection requirements in Mexico and Chile.
Subject to local law, you may exercise rights relating to access, rectification, correction, updating, cancellation, deletion, opposition, blocking, portability, or revocation of consent, where those rights are available.
You may also complain to the applicable privacy, data protection, or consumer protection authority.
### H. South Africa
This section applies to customers in South Africa.
We handle personal information in accordance with the Protection of Personal Information Act (“POPIA”) and other applicable requirements.
Subject to applicable law, you may request access to, correction of, or deletion of personal information, object to certain processing, withdraw consent, and complain to the Information Regulator of South Africa.
## 11. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, alteration, use, or destruction.
These safeguards may include encrypted transmission, access controls, confidentiality obligations, and limiting access to personnel and service providers who need the information for authorized purposes.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will respond to security incidents and provide notifications where required by applicable law.
## 12. Children’s Privacy
The Website is not directed to children under the age of 13, or any higher minimum age required by applicable law.
We do not knowingly collect personal information from children in violation of applicable law. If you are a parent or guardian and believe that a child has provided personal information without legally valid authorization or consent, please contact us at service@loladiva.store.
Where required, we will delete or otherwise appropriately handle the relevant information after verification.
## 13. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, service providers, technology, or legal requirements.
The updated Policy will be posted on this page with a revised “Last Updated” date. Where required by applicable law, we will provide additional notice or obtain consent for material changes.
## 14. Contact Us
If you have questions about this Policy, wish to exercise your privacy rights, or wish to make a complaint, please contact:
**Company:** Pujiang Mishi E-Commerce Co., Ltd.
**Address:** Room 201, Building 1, Complex Building, No. 115 Jiahe Road, Xianhua Sub-district, Pujiang County, Jinhua City, Zhejiang Province, China
**Email:** service@loladiva.store
**Telephone:** +86 195 5787 0627
Please include sufficient information for us to identify your request and the jurisdiction from which you are contacting us. We may need to verify your identity before completing your request.
If you are not satisfied with our response, you may have the right to contact or lodge a complaint with the privacy, data protection, health information, or consumer protection authority in your jurisdiction.
**Last Updated:** October 27, 2026
Welcome to LolaDiva. Pujiang Mishi E-Commerce Co., Ltd. (“LolaDiva,” “we,” “us,” or “our”) operates https://loladiva.store (the “Website”). We are committed to protecting your privacy and handling your personal information in accordance with applicable privacy and data protection laws.
This Privacy Policy explains how we collect, use, disclose, transfer, retain, and protect personal information when you visit the Website, place an order, contact us, or otherwise interact with our services.
For the purposes of applicable data protection laws, Pujiang Mishi E-Commerce Co., Ltd. is the data controller of the personal information described in this Policy, unless otherwise stated.
We use UEESHOP Inc. (“UEESHOP”) to power our e-commerce business. UEESHOP acts as our data processor for certain processing activities and may act as an independent data controller for personal information processed for its own purposes, such as platform security, legal compliance, and service improvement.
This Policy applies to visitors and customers in all destinations listed in our Shipping Policy, including the United States, Canada, Australia, New Zealand, the United Kingdom, the European Economic Area, Switzerland, Singapore, Thailand, Japan, the United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain, Israel, Mexico, South Africa, and Chile.
Where a local law provides you with additional rights or imposes additional requirements, those mandatory local requirements will apply.
## 1. Information We Collect
The information we collect depends on how you interact with the Website and our services.
### A. Information You Provide
We may collect:
- **Identifiers and contact information:** Your name, billing address, shipping address, email address, telephone number, and account details.
- **Order and transaction information:** Products purchased, order history, delivery details, returns, refunds, invoices, and customer service records.
- **Prescription and health-related information:** Because we sell contact lenses, we collect prescription information for all orders. This may include prescription images or copies, your prescriber’s name and contact details, and lens parameters such as brand, power, base curve, diameter, cylinder, and axis, where applicable.
- **Communications:** Information you provide when contacting customer support, submitting a privacy request, responding to a survey, or otherwise communicating with us.
- **Marketing and consent preferences:** Your communication preferences, cookie choices, consent records, and information about whether you have subscribed to or unsubscribed from marketing communications.
### B. Payment Information
Your payment information is processed by UEESHOP and its payment partners. We do not store your full payment card number or complete payment card details.
Payment processors may process payment card information, billing details, transaction information, and fraud-prevention data in accordance with their own privacy policies and applicable payment security standards.
### C. Information Collected Automatically
When you visit the Website, we may automatically collect:
- Internet Protocol (“IP”) address;
- Browser type, operating system, and device identifiers;
- Referring URLs and pages viewed;
- Date, time, and duration of visits;
- Shopping cart and checkout activity;
- Cookie identifiers and similar online identifiers;
- Advertising attribution and campaign interaction information; and
- Purchase, conversion, and other Website interaction events.
### D. Information From Third Parties
We may receive information from payment processors, logistics providers, fraud-prevention providers, advertising platforms, and other service providers where necessary to fulfill orders, prevent fraud, measure advertising performance, or operate the Website.
## 2. How We Use Personal Information
We use personal information for the following purposes:
- Processing and fulfilling orders;
- Processing payments and preventing payment fraud;
- Verifying prescriptions and complying with contact lens regulations;
- Arranging shipping, customs clearance, delivery, returns, and refunds;
- Providing order confirmations, invoices, tracking information, and customer support;
- Creating and administering customer accounts;
- Maintaining Website security and preventing misuse;
- Improving our products, services, and Website functionality;
- Measuring advertising attribution and campaign performance;
- Sending marketing communications where permitted and, where required, with your consent;
- Complying with accounting, tax, customs, medical device, consumer protection, and other legal obligations; and
- Establishing, exercising, or defending legal claims.
We do not use Prescription Information for advertising, audience targeting, marketing profiles, or unrelated commercial purposes.
## 3. Legal Bases for Processing
Where applicable, including under the GDPR, UK GDPR, and similar laws, we rely on one or more of the following legal bases:
- **Performance of a contract:** To process orders, arrange payment, verify prescriptions where necessary, deliver products, and provide requested customer support.
- **Compliance with legal obligations:** To maintain transaction, customs, accounting, prescription-verification, medical device, and other legally required records.
- **Legitimate interests:** To prevent fraud, maintain Website security, protect our legal rights, and improve our services, where those interests are not overridden by your rights and freedoms.
- **Consent:** To send optional marketing communications, use non-essential cookies or advertising technologies where consent is required, and process health-related information where explicit consent is required.
- **Other bases permitted by local law:** Where another lawful basis applies in your jurisdiction.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Certain processing activities may continue on another applicable legal basis, including where processing is necessary to fulfill your order, maintain legally required records, or establish or defend legal claims.
If providing prescription information is necessary to fulfill an order and we cannot lawfully process that information, we may be unable to complete the order.
## 4. Prescription and Health-Related Information
Prescription Information may be considered health data, sensitive personal information, protected health information, or special-category data in certain jurisdictions.
We collect and use Prescription Information only for purposes including:
- Verifying your prescription;
- Fulfilling and delivering your order;
- Providing customer support relating to your order;
- Complying with applicable contact lens, medical device, record-keeping, and consumer protection requirements; and
- Establishing, exercising, or defending legal claims.
Where required by applicable law, we will obtain your explicit consent before collecting or processing Prescription Information, unless another lawful basis applies.
We disclose Prescription Information only to:
- Your prescriber, for prescription-verification purposes;
- Service providers that process it on our behalf under contractual confidentiality and data protection obligations;
- Logistics or regulatory recipients where legally necessary to fulfill the order; and
- Regulators, courts, law-enforcement authorities, or other parties where required by law.
We do not sell or rent Prescription Information. We do not disclose Prescription Information to Meta, Google, or other advertising providers for advertising, audience targeting, or behavioral profiling purposes.
We protect Prescription Information using appropriate administrative, technical, and physical safeguards. Access is limited to personnel and service providers who need the information for the purposes described in this Policy.
We retain Prescription Information only for as long as necessary to complete verification, fulfill your order, meet applicable record-keeping requirements, and establish or defend legal claims. When it is no longer required, we will securely delete or anonymize it, subject to any legal retention obligations.
Where applicable, our handling of Prescription Information is intended to address requirements under the U.S. Fairness to Contact Lens Consumers Act, the FTC Contact Lens Rule, HIPAA where applicable, applicable U.S. state health information laws, the GDPR, UK GDPR, and other applicable privacy or health information laws.
HIPAA obligations apply only where the relevant entity and processing activity are legally subject to HIPAA.
## 5. Cookies and Advertising Technologies
We use strictly necessary cookies and similar technologies to operate the Website, maintain shopping carts, process transactions, provide security, and remember essential preferences.
### Meta Pixel
We use Meta Pixel for advertising attribution, conversion measurement, campaign analysis, and related advertising purposes. The information collected through Meta Pixel may include IP addresses, device and browser information, cookie or online identifiers, pages viewed, Website interactions, and purchase or conversion events.
The information may be disclosed to Meta and processed by Meta in accordance with its own privacy terms and policies.
### Google Advertising Technologies
We use Google Tag Manager to manage certain Website tags and may use Google Ads for advertising attribution, conversion measurement, campaign analysis, and related advertising purposes when these services are enabled.
Depending on the services enabled, these technologies may collect information such as IP addresses, device and browser information, pages viewed, Website interactions, and purchase or conversion events.
### Consent and Your Choices
For visitors in the European Economic Area, the United Kingdom, and other jurisdictions where prior consent is required, we provide a cookie consent mechanism. Non-essential cookies and advertising technologies will remain disabled until you provide your consent, except where applicable law permits another approach.
Where required, you may accept, reject, or customize non-essential cookies. You may withdraw or change your consent through the available cookie consent or preference controls.
You may also manage cookies through your browser settings and advertising preferences through the relevant Meta, Google, or other platform settings. Disabling strictly necessary cookies may affect Website functionality.
We do not intentionally transmit Prescription Information, prescription images, prescriber details, lens parameters, or other health-related order information to Meta, Google, or other advertising providers.
Certain disclosures through advertising technologies may be considered “sharing,” “targeted advertising,” or similar processing under applicable laws. Where required, you may opt out by using available privacy controls or by contacting us at service@loladiva.store.
## 6. How We Share Personal Information
We may disclose personal information to the following categories of recipients, only as necessary for the purposes described in this Policy:
- **E-commerce and technology providers:** Including UEESHOP, hosting providers, website maintenance providers, customer support providers, and communications providers.
- **Payment and fraud-prevention providers:** To process payments, prevent fraud, and manage chargebacks or disputes.
- **Shipping, customs, and logistics providers:** To fulfill orders, arrange delivery, process customs documentation, and handle returns.
- **Prescribers:** Solely for prescription-verification purposes.
- **Advertising and technology providers:** Including Meta and, where enabled, Google, subject to applicable consent and opt-out requirements.
- **Professional advisers:** Including lawyers, accountants, auditors, and consultants, where reasonably necessary.
- **Regulators and government authorities:** Where disclosure is required by law, legal process, customs requirements, or regulatory obligations.
- **Business transferees:** In connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate confidentiality protections.
We require service providers acting on our behalf to process personal information only in accordance with our instructions and applicable contractual confidentiality and data protection obligations.
We do not sell Prescription Information. We do not sell personal information for monetary consideration. Certain advertising disclosures may nevertheless be regulated as a “sale,” “sharing,” or “targeted advertising” under applicable law, and you may exercise any applicable opt-out rights.
## 7. International Data Transfers
We operate from China and use service providers that may process personal information in China, the United States, Canada, and other countries in which they operate.
Your personal information may therefore be transferred to and processed in countries outside your jurisdiction, including countries whose privacy or data protection laws may differ from those in your jurisdiction.
Where required by applicable law, we use an appropriate lawful transfer mechanism. Depending on the circumstances, this may include:
- An adequacy decision or equivalent recognition;
- European Commission Standard Contractual Clauses;
- The UK International Data Transfer Agreement or Addendum;
- Contractual, organizational, and technical safeguards required by local law; or
- Another legally recognized transfer mechanism.
Where necessary, we will take supplementary measures reasonably designed to protect the transferred information.
You may contact us for further information about the safeguards applicable to international transfers of your personal information, subject to lawful confidentiality restrictions.
## 8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.
Our retention criteria include:
- **Order and transaction information:** Retained as necessary to fulfill orders and meet accounting, tax, customs, warranty, consumer protection, and other legal requirements.
- **Prescription Information:** Retained as necessary for prescription verification, order fulfillment, legally required record-keeping, and the establishment or defense of legal claims.
- **Customer service records:** Retained as necessary to resolve inquiries, complaints, disputes, and related legal matters.
- **Marketing information:** Retained until you withdraw consent or opt out, subject to limited suppression records needed to honor your request.
- **Cookie and advertising data:** Retained for the periods applicable to the relevant technology, consent record, or advertising purpose, subject to applicable law.
- **Privacy requests and consent records:** Retained as necessary to demonstrate compliance and honor your choices.
When personal information is no longer required, we will delete it, anonymize it, or securely isolate it until deletion is possible.
## 9. Your Privacy Rights
Depending on your jurisdiction and subject to applicable conditions and exceptions, you may have the right to:
- Request confirmation of whether we process your personal information;
- Access or obtain a copy of your personal information;
- Correct inaccurate or incomplete personal information;
- Request deletion or erasure of personal information;
- Request restriction of processing;
- Object to processing based on legitimate interests;
- Object to direct marketing at any time;
- Withdraw consent at any time;
- Request data portability;
- Request information about international transfers and applicable safeguards;
- Opt out of certain sales, sharing, profiling, or targeted advertising;
- Express your views concerning certain automated decisions and request human review where required;
- Appeal a decision regarding your privacy request, where applicable;
- Receive communications about a personal data breach where required by law; and
- Lodge a complaint with your local privacy or data protection authority.
These rights are not absolute. For example, we may retain information where necessary to comply with legal obligations, complete an ongoing transaction, protect against fraud, or establish or defend legal claims.
To exercise your rights, contact us at service@loladiva.store. We may request information reasonably necessary to verify your identity and, where applicable, the authority of an authorized agent.
We will respond within the period required by applicable law. We will not unlawfully discriminate against you for exercising your privacy rights.
## 10. Regional Privacy Notices
### A. European Economic Area, United Kingdom, and Switzerland
This section applies to customers in Austria, Belgium, Bulgaria, Croatia, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, the United Kingdom, and Switzerland.
We process personal information in accordance with the GDPR, UK GDPR, the UK Data Protection Act 2018, the Swiss Federal Act on Data Protection, and other applicable local requirements, as relevant.
In addition to the rights described in Section 9, you may have the right to lodge a complaint with the data protection authority in your country of residence, place of work, or the place where you believe an infringement occurred.
Our legal bases for processing are described in Section 3. Information about international transfers is provided in Section 7.
Where we rely on legitimate interests, you may object to the relevant processing. Where we process special-category or health-related information, we will rely on an applicable legal condition, which may include your explicit consent where required.
Where required by applicable law, we will provide the contact details of any appointed EU, UK, or Swiss representative through this Policy or upon request.
### B. United States
This section applies to customers in the United States.
Depending on your state of residence and whether a particular law applies to our business, you may have rights to access, correct, delete, or obtain a portable copy of personal information, and to opt out of certain sales, sharing, targeted advertising, profiling, or processing of sensitive personal information.
We handle Prescription Information in accordance with applicable federal and state requirements, including prescription-verification and record-keeping obligations. HIPAA applies only where the relevant entity and activity are legally subject to HIPAA.
You may exercise applicable rights or appeal a decision concerning a privacy request by contacting service@loladiva.store. We will not unlawfully discriminate against you for exercising your rights.
### C. Canada
This section applies to customers in Canada.
We handle personal information in accordance with applicable federal and provincial privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable.
Subject to applicable law, you may request access to or correction of your personal information, withdraw consent, and challenge our handling of your personal information.
Withdrawing consent may affect our ability to provide services that depend on the relevant information. You may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.
### D. Australia and New Zealand
This section applies to customers in Australia and New Zealand.
We handle personal information in accordance with applicable privacy requirements, including the Australian Privacy Act 1988 and Australian Privacy Principles, and the New Zealand Privacy Act 2020, where applicable.
You may request access to or correction of your personal information and may complain about our handling of your personal information. You may also contact the Office of the Australian Information Commissioner or the New Zealand Office of the Privacy Commissioner, as applicable.
### E. Japan, Singapore, and Thailand
This section applies to customers in Japan, Singapore, and Thailand.
We handle personal information in accordance with applicable requirements under Japan’s Act on the Protection of Personal Information, Singapore’s Personal Data Protection Act, and Thailand’s Personal Data Protection Act, where applicable.
Subject to local law, you may have rights to access, correct, delete, restrict, or object to certain processing, withdraw consent, request data portability, or complain to the relevant authority.
Where required, we will provide information about the purposes of processing, overseas transfers, and applicable safeguards.
### F. United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain, and Israel
This section applies to customers in the United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain, and Israel.
We handle personal information in accordance with applicable privacy, data protection, consumer protection, electronic communications, and health information requirements in these jurisdictions.
Subject to applicable law, you may have rights to access, correct, update, delete, restrict, or object to certain processing, withdraw consent, or complain to the relevant authority.
Where local law requires a specific legal basis, consent, record, safeguard, or approval for processing or cross-border transfers, we will apply the relevant requirements to the affected processing activity.
### G. Mexico and Chile
This section applies to customers in Mexico and Chile.
We handle personal information in accordance with applicable privacy and data protection requirements in Mexico and Chile.
Subject to local law, you may exercise rights relating to access, rectification, correction, updating, cancellation, deletion, opposition, blocking, portability, or revocation of consent, where those rights are available.
You may also complain to the applicable privacy, data protection, or consumer protection authority.
### H. South Africa
This section applies to customers in South Africa.
We handle personal information in accordance with the Protection of Personal Information Act (“POPIA”) and other applicable requirements.
Subject to applicable law, you may request access to, correction of, or deletion of personal information, object to certain processing, withdraw consent, and complain to the Information Regulator of South Africa.
## 11. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, alteration, use, or destruction.
These safeguards may include encrypted transmission, access controls, confidentiality obligations, and limiting access to personnel and service providers who need the information for authorized purposes.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will respond to security incidents and provide notifications where required by applicable law.
## 12. Children’s Privacy
The Website is not directed to children under the age of 13, or any higher minimum age required by applicable law.
We do not knowingly collect personal information from children in violation of applicable law. If you are a parent or guardian and believe that a child has provided personal information without legally valid authorization or consent, please contact us at service@loladiva.store.
Where required, we will delete or otherwise appropriately handle the relevant information after verification.
## 13. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, service providers, technology, or legal requirements.
The updated Policy will be posted on this page with a revised “Last Updated” date. Where required by applicable law, we will provide additional notice or obtain consent for material changes.
## 14. Contact Us
If you have questions about this Policy, wish to exercise your privacy rights, or wish to make a complaint, please contact:
**Company:** Pujiang Mishi E-Commerce Co., Ltd.
**Address:** Room 201, Building 1, Complex Building, No. 115 Jiahe Road, Xianhua Sub-district, Pujiang County, Jinhua City, Zhejiang Province, China
**Email:** service@loladiva.store
**Telephone:** +86 195 5787 0627
Please include sufficient information for us to identify your request and the jurisdiction from which you are contacting us. We may need to verify your identity before completing your request.
If you are not satisfied with our response, you may have the right to contact or lodge a complaint with the privacy, data protection, health information, or consumer protection authority in your jurisdiction.
