Test mode, checkout runs against the PayPal sandbox. No real payment is taken and no order will be fulfilled.

Glow Into Summer Sale: 15% Off Sitewide + Free Shipping on Canadian Orders $50+

LILVAA

Privacy Policy

Last updated 2026-07-26

LILVAA respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have over it. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

When you place an order: your name, email address, shipping address, billing address, phone number if you give one, and the contents of your order.

When you join our mailing list: your email address, the date and time you consented, and which form you used.

Automatically, when you browse: your IP address, browser type, pages visited, and similar technical information used to keep the site working and secure.

We never see your card details. Payments are processed by PayPal. Your card or bank information goes directly to them and is never transmitted to, stored by, or accessible to us.

Why we collect it

  • To process, fulfil and deliver your order
  • To send order confirmations, shipping updates and account access links
  • To answer your questions and provide support
  • To send marketing email, where you have consented (see below)
  • To keep business and tax records as Canadian law requires
  • To detect and prevent fraud and abuse

We do not sell your personal information. We do not share it with advertisers.

Who we share it with

We share only what is necessary, only with providers who help us operate:

documentation for international orders

  • PayPal: payment processing
  • Amazon Web Services (SES): sending email
  • Cloudflare: website hosting and database
  • Shipping carriers: delivering your parcel, including customs

Cross-border transfers. Some of these providers store or process data outside Canada, including in the United States. While your information is in another country it may be accessible to that country's courts and law enforcement under its laws. By using this site you acknowledge this transfer.

We may also disclose information where required by law.

Marketing email and consent

If you buy from us, you may receive occasional marketing email under the existing business relationship provision of Canada's Anti-Spam Legislation (CASL). This lasts for 24 months after your most recent purchase, and a new purchase extends it.

If you sign up to our mailing list without buying, we ask you to tick a consent box and then confirm by email before we send you anything.

Every marketing email we send identifies us, gives our mailing address, and includes an unsubscribe link. You can unsubscribe at any time, and we act on it immediately. Unsubscribing from marketing does not stop order-related email, we still need to send you receipts and delivery updates.

Cookies

We use a small number of strictly necessary cookies: one to remember your shopping cart, one to keep you signed in if you request an account link, and one set by our bot-protection service on forms.

We do not use advertising or cross-site tracking cookies.

How long we keep it

Order and transaction records are kept for six years, as required for Canadian business and tax records. Mailing list records are kept until you unsubscribe, plus a record of the unsubscribe itself so we do not contact you again by mistake. Other information is deleted when it is no longer needed.

Security

Data is transmitted over encrypted connections. Access to personal information is limited to those who need it to run the business. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of what we hold, which, notably, does not include payment card data.

Your rights

Under PIPEDA you may:

  • Ask what personal information we hold about you, and receive a copy
  • Ask us to correct anything inaccurate or incomplete
  • Withdraw consent for marketing at any time
  • Ask us to delete information we no longer need to keep

Write to hi@lilvaa.com and we will respond within 30 days. We may need to verify your identity first.

Children

This site is not directed at children, and we do not knowingly collect personal information from anyone under 13.

Changes

If we change this policy we will update the date below. Material changes will be announced on this page.

Contact and complaints

LILVAA 140 Yonge St, Toronto ON M5C 1X6, Canada hi@lilvaa.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.