Privacy policy

LaPalm Shop | Last Updated: March 25, 2026

At LaPalm Shop ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have. By using our website at lapalm-shop.com or purchasing from us, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, place an order, or contact us, we collect:

  • Name, email address, phone number

  • Billing and shipping address

  • Payment information (processed securely — we do not store full card details)

  • Order history and purchase details

  • Communications you send us (e.g., support emails)

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

  • IP address and general location data

  • Browser type, device type, and operating system

  • Pages visited, time spent on pages, and clicks

  • Referring URLs and exit pages

  • Cookie identifiers and tracking pixel data

1.3 Information From Third Parties

We may receive information about you from third-party services such as advertising platforms (Meta, TikTok), analytics providers, and payment processors when you interact with our ads or complete a transaction.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Processing and fulfilling your orders, including shipping and returns

  • Sending order confirmations, shipping updates, and customer service communications

  • Sending marketing emails, promotions, and product updates (only if you opt in)

  • Personalizing your shopping experience on our website

  • Analyzing website traffic and user behavior to improve our store

  • Running targeted advertising campaigns on Meta, TikTok, and Google

  • Detecting and preventing fraud and unauthorized access

  • Complying with legal obligations


3. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to operate and improve our website and to deliver relevant advertising. Here is an overview of the tools we use:

Meta Pixel (Facebook/Instagram)

We use the Meta Pixel to measure the effectiveness of our advertising campaigns, build custom audiences, and retarget visitors on Facebook and Instagram. Meta may use this data in accordance with its own data policy. You can opt out via Meta's ad settings at facebook.com/adpreferences.

TikTok Pixel

We use the TikTok Pixel to track conversions from TikTok ads and retarget visitors. TikTok processes this data under its own privacy policy. You can manage ad preferences in the TikTok app settings.

Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics collects data such as session duration, pages per visit, and geographic location. This data is anonymized and aggregated. You can opt out using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

Klaviyo

We use Klaviyo for email and SMS marketing. Klaviyo helps us send personalized messages based on your purchase history and browsing behavior. You can unsubscribe at any time via the link in any email we send, or by contacting us at support@lapalm-shop.com.

Shopify

Our store is built on Shopify. Shopify may collect technical data and analytics as part of providing our platform. For details, refer to Shopify's Privacy Policy at shopify.com/legal/privacy.

4. How We Share Your Information

LaPalm Shop does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

  • Service providers: Shopify (e-commerce platform), Klaviyo (email marketing), PayPal and Shopify Payments (payment processing), and shipping carriers — solely to fulfill your order or provide their service

  • Advertising platforms: Meta and TikTok receive pixel event data to facilitate targeted advertising — this is subject to their respective privacy policies and your ad preferences

  • Analytics providers: Google Analytics receives anonymized usage data

  • Legal compliance: We may disclose your information if required by law, court order, or governmental authority

  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred — we will notify you before this occurs

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including for legal, accounting, and fraud prevention purposes. Order data is generally retained for 7 years to comply with commercial law requirements. Marketing data is retained until you unsubscribe or request deletion.

6. Children's Privacy

LaPalm Shop is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@lapalm-shop.com and we will promptly delete such information. Users between 13 and 18 should only use our site with parental consent.

7. International Data Transfers

As a German-registered company currently serving customers in the United States, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection law, including reliance on Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.

As we expand to additional markets in the future, this section will be updated to reflect any new transfer mechanisms required.

8. Your Privacy Rights

8.1 Rights Under GDPR (All Users)

Because we are a European-based company, GDPR protections apply to our data processing globally. You have the right to:

  • Access — request a copy of the personal data we hold about you

  • Rectification — request correction of inaccurate or incomplete data

  • Erasure — request deletion of your personal data ('right to be forgotten')

  • Restriction — request that we limit how we process your data

  • Portability — receive your data in a structured, machine-readable format

  • Object — object to processing based on legitimate interests or for direct marketing

  • Withdraw consent — where processing is based on consent, you may withdraw at any time


8.2 California Residents (CCPA)

If you are a California resident, you additionally have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to non-discrimination for exercising your privacy rights. We do not sell personal information as defined by the CCPA.

8.3 How to Exercise Your Rights

To exercise any of the rights above, contact us at support@lapalm-shop.com. We will respond within 30 days. We may need to verify your identity before processing your request.

9. Security

We implement commercially reasonable technical and organizational security measures to protect your personal information, including SSL encryption for data in transit and access controls for data at rest. However, no system is completely secure. We cannot guarantee the absolute security of your information and encourage you to use strong, unique passwords and to notify us immediately of any suspected unauthorized access.

10. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites. We are not responsible for the privacy practices of any third parties and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy. For material changes, we will provide additional notice (e.g., via email or a prominent banner on our site).

12. Contact Us

For any privacy-related questions, requests, or concerns, please contact us at:

LaPalm Shop

Email: support@lapalm-shop.com

Website: https://lapalm-shop.com

Data Controller Information

LaPalm Shop is a brand operated by Grance UG (haftungsbeschränkt), a limited liability company registered in Germany. As the data controller under the General Data Protection Regulation (GDPR), Grance UG is responsible for the collection and processing of personal data as described in this policy. Registered office: Germany. For data protection inquiries, contact: support@lapalm-shop.com.