Privacy Policy

1. Who We Are

Lorhia Beauty & Wellness AB, company registration number 559335-7691, Lykttändarens väg 22, 179 75 Skå, Sweden, is the data controller responsible for the processing of personal data described in this Privacy Policy.

This Privacy Policy applies when you visit lorhia.com or lorhia.se, make a purchase, create an account, complete our skin quiz, subscribe to a product plan or newsletter, or otherwise contact us.

Contact: info@lorhia.se | +46 73 511 76 71

2. Personal Data We Collect

Depending on how you use our services, we may collect the following categories of personal data:

• Identity and contact details, including your name, delivery and billing address, email address and telephone number.
• Account information, including login details and account preferences.
• Order and transaction information, including products ordered, order history, returns, refunds and payment status. Complete card details are processed by our payment providers and are not stored by Lorhia.
• Delivery information and communications relating to your shipment.
• Customer-service communications and information you choose to provide when contacting us.
• Skin quiz responses and skincare preferences that you voluntarily provide so we can suggest products or routines. The quiz is not a medical assessment and you should not submit medical diagnoses or other sensitive health information.
• Marketing preferences and newsletter consent.
• Technical and usage information, including IP address, device and browser information, pages visited and cookie identifiers, subject to your cookie choices.

3. Why We Process Personal Data

Purpose	Legal basis
Process orders, payments, deliveries, returns and refunds	Performance of a contract
Create and administer your account or subscription	Performance of a contract
Provide customer service	Performance of a contract and legitimate interests
Provide skin quiz suggestions requested by you	Performance of a requested service and legitimate interests
Keep accounting and transaction records	Legal obligation
Prevent fraud and protect the website	Legitimate interests and legal obligations
Send newsletters and promotional emails	Consent
Measure website use with non-essential analytics	Consent
Personalise advertising using marketing technologies	Consent

4. Who We Share Personal Data With

We share only the personal data necessary for the relevant recipient to perform its services. Depending on the service and processing activity, a service provider may act as our processor or as an independent data controller.

Recipient category	Purpose
Payment providers	Process payments, perform security checks and prevent fraud
Delivery and logistics partners	Book and deliver shipments and provide delivery information
Hosting and technical service providers	Operate, secure and maintain the website and customer account functions
Accounting and administration providers	Accounting, financial administration and compliance with legal obligations
Translation and AI service providers	Support language, content and AI-based website functions
Analytics and marketing providers	Measure website use and marketing, only where enabled and where consent is required

We may also share personal data with authorities where required by law, and with professional advisers where necessary to establish, exercise or defend legal claims. We do not sell your personal data.

5. International Transfers

We aim to process personal data within the EU and EEA. Some service providers may process personal data outside the EU or EEA. Where this occurs, we use a lawful transfer mechanism and appropriate safeguards, such as an adequacy decision or the European Commission's standard contractual clauses, where required.

6. How Long We Keep Personal Data

• Order and accounting records are generally retained for seven years where required by Swedish accounting legislation.
• Account information is retained while your account remains active and may be deleted after account closure or a period of inactivity, subject to legal retention requirements.
• Customer-service records are retained only for as long as reasonably necessary to resolve the matter and document our obligations.
• Newsletter and marketing information is retained until you unsubscribe or withdraw your consent, subject to a limited suppression record so we can respect your choice.
• Cookie data is retained for the duration shown in the cookie settings or cookie list.

7. Your Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data where no legal reason requires us to retain it.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Receive certain personal data in a portable format.
• Withdraw consent at any time without affecting processing already carried out.

To exercise your rights, contact info@lorhia.se. We may need to verify your identity before responding.

8. Complaints

If you have concerns about our processing of personal data, please contact us first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se.

9. Cookies

We use strictly necessary cookies to operate the website and checkout. With your consent, we may also use cookies and similar technologies for analytics, marketing, AI-powered features and to improve your experience. For details and to change your choices, please read our Cookie Policy or open Cookie Settings.

10. Changes to This Policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current version and its latest update date will always be published on this page.