Privacy Policy

Updated: 1 November 2026

Who is responsible for your information

Lemann Fashion LLC operates this shop and is responsible for the personal information described here. For privacy questions or requests, email info@lemann.fashion.

Information we use

• Orders and support: your name, email, phone number, delivery address, purchased items, order and payment status, and information you send when asking for help.
• Optional account: your account email, securely protected password information, profile, saved addresses and order history. Do not share your password with staff or anyone else.
• Service and security: session identifiers, language and currency preferences, consent choices, IP address and technical logs needed to operate and protect the shop. Approximate country information can help choose an initial language or currency; you can change these choices.
• Optional analytics: if enabled and you agree, Google Analytics receives information about page visits and use of the shop. It is not loaded before your analytics choice permits it.

Your full card number and security code are entered on Bank of Georgia’s payment page, not collected or stored by the shop. We receive payment references and status needed to manage the order. An email address is required for checkout, but registration is optional.

Why we process information

We use order details to take steps you request before a purchase and to perform the purchase contract; account details to provide the account service; and relevant records to meet legal obligations. We use proportionate technical data for service security and fraud prevention based on legitimate interests. Direct marketing requires the relevant consent. Analytics cookie choices are described below. A purchase or an account is not automatic marketing consent.

Cookies and your choices

Necessary cookies and browser storage support sessions, the shopping bag, security, language/currency preferences and remembering your consent choice. Use Cookie settings in the footer to accept or reject optional analytics and change your choice. Rejecting analytics does not prevent shopping. You can also clear browser storage, although doing so may sign you out or reset your bag and preferences.

Who receives information

Access is limited to staff and providers who need information for their role, including hosting and technical support, payment processing and delivery. A courier receives the details needed to deliver an actual order. Google Tag Manager and Google Analytics are enabled on the production shop. We use the country inferred from your IP address to show an analytics-cookie prompt in EU countries and when the country cannot be determined. Elsewhere, analytics cookies are enabled by default. A saved choice takes priority in every region, and Cookie settings lets you change it. Before consent or after rejection, Google may receive limited cookieless measurements through advanced consent mode. Advertising storage, advertising user data and ad personalization remain denied. Authorities may receive information when required by law. We do not sell personal information.

Providers may process data outside Georgia. Where an international transfer requires safeguards under applicable law, those safeguards must be in place. Contact us for information about the providers and safeguards relevant to your data. External bank and social-media sites have their own privacy policies.

Retention and security

We retain information for the purpose for which it is needed, including account operation, order fulfilment, legal recordkeeping and resolving disputes, then delete or anonymise it when it is no longer required. Account closure does not necessarily remove records that must be kept by law. We use access restrictions and technical security measures; no online service can promise absolute security.

Your rights and complaints

Subject to applicable law, you may request access, correction, deletion, restriction or a portable copy of your information, and object to certain processing. You may withdraw consent for future consent-based processing. Contact us using the details above; we may need proportionate identity verification to protect your data. You may also complain to the competent data-protection authority or a court.

Material changes will be reflected in this policy and its update date, with any further notice required by law. See the Georgian Law on Personal Data Protection.

International orders and recipients

For an agreed international shipment, delivery and customs processing may require your recipient name, address, contact information and order or parcel details to be shared with the carrier, its delivery partners and the relevant customs authority. We use information necessary for the shipment and legal requirements. We do not ask you to email card security details or unnecessary identity documents.

The shop is operated from Georgia. Depending on the service used, providers may process information in other countries with different privacy laws. Where applicable transfer rules require an adequacy decision, contractual safeguards or another lawful mechanism, an appropriate mechanism is required before the transfer. You may contact us for details of the destinations, recipients and safeguards relevant to your information, including how to obtain a copy where available. Placing an order is not blanket consent to unrestricted international transfers.

Information sources and retention criteria

Most order, account and support information comes from you. Payment providers supply payment references and status; delivery providers may supply tracking and delivery updates. Technical information comes from your interaction with the shop. If you provide another recipient’s details, use information you are entitled to provide and let them know about this policy.

Retention depends on the record: order and payment records are kept for applicable accounting and legal requirements; support records for handling the enquiry and related claims; account information for providing the account service; and technical logs for operational and security needs. We consider legal retention periods, outstanding disputes and the purpose of the information before deletion or anonymisation. Contact us for the retention information applicable to a particular record.

Exercising rights from outside Georgia

Where EU or UK data-protection law applies, the rights described above include access, rectification, erasure, restriction, portability where applicable, and objection to processing based on legitimate interests. You can object to direct marketing and withdraw consent at any time without affecting the lawfulness of earlier processing. Rights can be subject to legal exceptions, including records we must retain.

Email us with your request and enough information to identify the relevant account or order. We will request only proportionate verification and respond within the period required by the law that applies to your request; under EU or UK rules this is normally one month, with notice of any permitted extension. You may complain to the supervisory authority competent for your place of residence, work or the alleged infringement where applicable, without first completing a complaint with us.

We do not use solely automated decision-making that produces legal or similarly significant effects about you in the shop. The payment provider may perform its own fraud or authorisation checks under its policies. Contact us if you need help understanding an order or payment decision.