Privacy Policy
Privacy Policy
This Privacy Policy explains how Lanai Grace Honolulu collects, uses, stores, and protects personal information when you visit our website, place an order, contact us, or interact with our services.
Lanai Grace Honolulu is operated from:
2215 ALOHA DR HONOLULU HI 96815-2839 USA
Email: info@lanaigrace.com
For the purposes of data protection law, Lanai Grace Honolulu is the data controller for the personal information processed through this website.
1. Personal Information We Collect
We may collect the following personal information:
- Full name
- Billing and shipping address
- Email address
- Telephone number
- Order details
- Payment confirmation details
- IP address
- Device and browser information
- Website activity, such as pages viewed, products viewed, cart activity, and checkout activity
- Customer service messages and communication history
- Marketing preferences, where applicable
We do not directly store full credit card details. Payments are processed securely through third-party payment providers.
2. How We Use Your Personal Information
We use your personal information for the following purposes:
- Processing and fulfilling orders
- Delivering products to your address
- Sending order confirmations, shipping updates, and customer service messages
- Handling returns, refunds, cancellations, and complaints
- Detecting fraud, abuse, security risks, or suspicious activity
- Improving our website, products, and customer experience
- Sending marketing emails or promotional messages where you have given consent or where permitted by law
- Measuring website performance and advertising effectiveness
- Complying with legal, tax, accounting, and regulatory obligations
3. Legal Basis for Processing
Where GDPR applies, we process personal information based on one or more of the following legal bases:
- Performance of a contract: to process your order, payment, shipping, returns, refunds, and customer service requests.
- Legal obligation: to comply with tax, accounting, consumer protection, and regulatory requirements.
- Legitimate interests: to improve our website, prevent fraud, secure our business, respond to customer enquiries, and understand store performance.
- Consent: for certain marketing communications, non-essential cookies, or other processing where consent is required.
GDPR requires a valid legal basis for processing personal data, such as contract performance, legal obligation, legitimate interest, or consent.
4. Sharing Personal Information With Third Parties
We only share personal information when necessary to operate our business, provide our services, or comply with the law.
We may share personal information with:
- Payment providers
- Shipping carriers
- Fulfilment partners and suppliers
- Website hosting and e-commerce platform providers
- Email and customer support providers
- Analytics and advertising platforms
- Fraud prevention and security service providers
- Professional advisers, such as accountants or legal advisers
- Authorities, regulators, or law enforcement where legally required
These third parties may process personal information only where necessary for their services or where required by law.
Our website may use Shopify or other e-commerce infrastructure providers to operate the online store. Shopify explains that it processes personal data when consumers interact with merchants using Shopify services.
5. International Transfers
Because we sell to customers in the United States, including Hawaii, and may use international service providers, your personal information may be transferred to, stored, or processed in countries outside Ireland or the European Economic Area.
Where required, we use appropriate safeguards to protect personal information in accordance with applicable data protection laws.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
- Make the website function correctly
- Remember cart and checkout details
- Analyse website traffic and visitor behaviour
- Improve website performance
- Support advertising, retargeting, and marketing measurement
Some cookies are necessary for the website to work. Other cookies, such as analytics or marketing cookies, may require your consent depending on your location.
You can manage or disable cookies through your browser settings. Where available, you may also adjust your cookie preferences through our website cookie banner or privacy settings.
7. Marketing Communications
If you subscribe to our email list, create an account, place an order, or otherwise opt in to marketing, we may send you promotional emails, product updates, offers, or store news.
You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us at:
We will not sell your personal information to unrelated third parties for their own independent marketing purposes.
8. Data Retention
We keep personal information only for as long as necessary for the purposes described in this Privacy Policy.
In general:
- Order and transaction records may be retained for legal, tax, accounting, and business record purposes.
- Customer service messages may be retained for complaint handling and business protection.
- Marketing data is retained until you unsubscribe or withdraw consent.
- Cookie and analytics data may be retained according to the settings of the relevant analytics or advertising provider.
When personal information is no longer needed, we will delete, anonymise, or securely retain it only where required by law.
9. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- Request access to your personal information
- Request correction of inaccurate personal information
- Request deletion of your personal information
- Object to certain processing
- Request restriction of processing
- Request data portability
- Withdraw consent where processing is based on consent
- Lodge a complaint with a data protection authority
Under GDPR, individuals have rights in relation to their personal data, including access, rectification, erasure, restriction, objection, portability, and the right to complain to a supervisory authority.
To exercise your rights, contact us at:
We may need to verify your identity before responding to your request.
10. Security
We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction.
However, no online transmission or storage system is completely secure. Customers are responsible for keeping their account login details confidential.
11. Children’s Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children.
If you believe a child has provided personal information to us, please contact us so we can take appropriate action.
12. Links to Other Websites
Our website may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices, content, or security of those third parties.
You should review their privacy policies before providing personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, technology, or website functionality.
The updated version will be posted on this page with a revised effective date.
14. Contact Details
For questions, requests, or complaints about this Privacy Policy or how we process personal information, contact us at:
Lanai Grace Honolulu
2215 ALOHA DR HONOLULU HI 96815-2839 USA
info@lanaigrace.com