PRIVACY POLICY

Last updated: September 7, 2026

LONNIS LLC ("LONNIS," "we," "us," or "our") operates this store and website under the LONNIS BOOK brand, together with all associated information, content, features, tools, products, and services, in order to offer you a considered shopping experience (the "Services"). Our store runs on Shopify, which enables us to provide these Services.

This Privacy Policy describes how we collect, use, and share your personal data when you visit or use the Services, make a purchase, or communicate with us. In the event of any conflict between our Terms and Conditions of Sale and this Privacy Policy, this Privacy Policy prevails in all matters concerning the processing of your personal data.

By accessing and using the Services, you acknowledge that you have read and understood this Privacy Policy.


1 · Data Controller

The controller responsible for processing your personal data is:

LONNIS LLC
Operator of the LONNIS BOOK store
412 N Main St, Suite 100
Buffalo, WY 82834
United States

Email: contact@trylonnis.com


2 · The Data We Collect

By "personal data," we mean information that identifies you or can reasonably be linked to you. Anonymised data that can no longer be used to identify you is not considered personal data.

Depending on how you interact with the Services, we may collect the following categories of personal data:

Contact details — first name, last name, billing address, delivery address, telephone number, and email address.

Payment information — payment method, transaction details, and payment confirmation. We do not directly store complete payment card numbers. These are handled securely by our payment service providers.

Account information — username, encrypted password, preferences, and account settings.

Order information — products viewed, added to your cart, purchased, returned, exchanged, or cancelled, together with your order history.

Communications with us — the content of messages you send when contacting customer service, responding to a survey, or leaving a review.

Technical information — device type, browser, operating system, IP address, network information, and other unique identifiers.

Usage information — pages viewed, time spent on the website, browsing path, traffic source, and interactions with our website and emails.


3 · Where This Data Comes From

We may collect personal data from the following sources:

Directly from you — when you create an account, place an order, subscribe to our newsletter, contact us, complete a form, or otherwise provide information to us.

Automatically — through cookies and similar technologies when you browse or interact with our website.

From our service providers — when they collect or process personal data on our behalf, including for payments, delivery, audience analytics, customer support, and advertising.

From our partners — including advertising platforms and social networks when you interact with our advertisements or content.


4 · Why We Use Your Data

Purpose Legal basis
Processing and delivering your orders Performance of a contract
Managing your customer account Performance of a contract
Responding to your enquiries Performance of a contract or legitimate interest
Handling returns and refunds Performance of a contract
Sending marketing emails Consent
Personalising your experience and advertising Consent where required
Measuring website traffic and performance Consent where required
Preventing fraud and securing the website Legitimate interest
Improving our products and Services Legitimate interest
Meeting accounting, tax, and legal obligations Legal obligation

5 · Who We Share Your Data With

We do not sell your personal data for monetary consideration.

We may share your personal data with the following recipients when necessary:

Shopify — for store hosting, ecommerce functionality, and order processing.

Payment service providers — to process transactions securely.

Carriers, manufacturers, and logistics providers — to prepare, fulfil, and deliver your orders.

Customer support, marketing, and email providers — to manage customer enquiries and send communications, where permitted.

Analytics and advertising providers — including Meta, Google, and similar services, where you have accepted the relevant cookies or where otherwise permitted by law.

Professional advisers — including accountants, auditors, lawyers, insurers, and other advisers where reasonably necessary.

Competent authorities — where disclosure is required by law, regulation, court order, or to establish, exercise, or defend our legal rights.

A potential purchaser or successor — in connection with a merger, acquisition, financing, sale, restructuring, or transfer of all or part of our business.

Each service provider receives only the information reasonably necessary to perform its services and is required to handle that information in accordance with applicable law.


6 · Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember your shopping cart and preferences, measure website traffic, understand how visitors use the Services, and personalise advertising.

Strictly necessary cookies — these are essential to the operation, security, and functionality of the website, including the shopping cart, checkout, account login, and fraud prevention. These cookies do not require consent where applicable law permits.

Analytics cookies — these help us understand how the website is used and allow us to improve its performance.

Advertising cookies — these help us and our advertising partners measure campaigns and display advertisements that may be relevant to you on other platforms.

Where required by applicable law, analytics and advertising cookies are only placed after you have provided consent.

You can change or withdraw your consent at any time using the cookie management link available on the website or through your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.


7 · International Transfers

Some of our service providers may be located outside your country of residence, including in the United States, Canada, and other countries.

As a result, your personal data may be transferred to and processed in jurisdictions with different data protection laws.

Where required, we use recognised safeguards for international transfers, including adequacy decisions, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or another transfer mechanism recognised under applicable data protection law.


8 · How Long We Retain Your Data

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Indicative retention periods include:

Type of data Indicative retention period
Order and transaction records For the period required by applicable accounting and tax laws
Customer account information While the account remains active and for up to 3 years after the last activity, unless a longer period is required
Prospects and newsletter subscribers Up to 3 years after the last meaningful contact or until consent is withdrawn
Customer service correspondence Up to 3 years after the request is resolved, unless a longer period is reasonably necessary
Cookie information Up to 13 months, unless a different period is permitted or required by applicable law

When personal data is no longer required, it will be deleted, anonymised, or otherwise securely disposed of.


9 · Your Rights

Depending on where you live, you may have some or all of the following rights:

Access — request access to the personal data we hold about you.

Rectification — request the correction of inaccurate or incomplete personal data.

Erasure — request the deletion of your personal data, subject to our legal obligations and applicable exceptions.

Restriction — request that we temporarily limit the processing of your personal data.

Portability — receive certain personal data in a structured, commonly used, and machine-readable format.

Objection — object to certain processing based on our legitimate interests and object to direct marketing at any time.

Withdrawal of consent — withdraw consent at any time where we rely on your consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Opt-out of sale, sharing, or targeted advertising — where provided by applicable law, request that we do not sell or share your personal data or use it for targeted advertising.

Post-mortem instructions — provide instructions regarding the handling of your personal data after your death where applicable law provides this right.

To exercise your rights, contact us at contact@trylonnis.com. We will respond within the time required by applicable law. We may request information necessary to verify your identity before processing your request.

You may also use our data-sharing opt-out page where available:

https://trylonnis.com/pages/data-sharing-opt-out

If you reside in the European Economic Area or the United Kingdom, you may lodge a complaint with your national data protection authority if you believe your rights have not been respected.

If you reside in California, you may have the right to know which categories of personal information we collect, request access to or deletion of your information, correct inaccurate information, and opt out of the sale or sharing of personal information. We will not discriminate against you for exercising your privacy rights.


10 · Unsubscribing From Marketing Emails

Every marketing email we send contains an unsubscribe link at the bottom of the message. You may also request to unsubscribe by contacting us at contact@trylonnis.com.

If you unsubscribe from marketing communications, you may continue to receive non-promotional messages relating to your purchases or account, including order confirmations, dispatch notifications, delivery tracking, and customer service responses.


11 · Security

We implement reasonable technical and organisational measures designed to protect your personal data. These measures may include encrypted HTTPS connections, secure hosting, access restrictions, fraud prevention measures, and the use of payment providers that comply with applicable industry standards.

However, no method of transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security.

You are responsible for keeping any account credentials confidential and should not share your password or access details with anyone else.


12 · Minors

Our Services are not directed at children under 16, and we do not knowingly collect personal data from children under 16.

If you are a parent or guardian and believe that a child has provided personal data to us, please contact us at contact@trylonnis.com. We will review the request and delete the information where required by applicable law.


13 · Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, technologies, or applicable legal and regulatory requirements.

When we update this Privacy Policy, we will publish the revised version on this website and update the "Last updated" date at the top of the page.

If a change materially affects how we process your personal data, we will provide additional notice where required by applicable law.


14 · Contact Us

For questions regarding this Privacy Policy, our privacy practices, or the exercise of your privacy rights, please contact:

LONNIS LLC
Operator of the LONNIS BOOK store
412 N Main St, Suite 100
Buffalo, WY 82834
United States

Email: contact@trylonnis.com

For the purposes of applicable data protection laws, LONNIS LLC is the controller responsible for processing your personal data.