Privacy Policy

Privacy Policy

Last updated: August 27, 2026

This policy explains what yihui shop collects when you shop with us, why we collect it, and the choices you have. It covers orders placed through lilithnoir.shop and any conversation with our support team.

Information we collect

  • Order information — your name, shipping and billing addresses, email, phone number, and the items you buy.
  • Payment information — card details are handled by our payment providers and never stored on our servers.
  • Communication — messages you send through the contact page and any notes you leave on an order.
  • Device information — IP address, browser type, and pages visited, collected through cookies and analytics.

How we use it

Order information runs the store: packing, shipping, returns, and refunds. Communication stays attached to your order history so you never have to repeat yourself. Device data helps us find broken pages and understand which products people actually look at. Marketing email is opt-in only, and every message carries an unsubscribe link.

Who we share it with

Only the providers the store needs to function: payment processors, shipping carriers, email and analytics platforms, and support tools. Each receives the minimum its job requires. We do not sell or rent your personal information.

Where the data lives

Our providers mostly run in the United States and the European Union. When data crosses borders, it travels under the transfer mechanisms those providers maintain, such as standard contractual clauses.

Cookies

Cookies keep your cart between visits and remember your region. You can block them in your browser settings; checkout still works, you will just re-enter some details.

How long we keep data

Order records are kept as long as accounting and warranty handling require. Support conversations are kept for two years so we can pick up where an old issue left off.

Your privacy rights

Depending on where you live — the EU, the UK, or US states like California — the law gives you some or all of these rights:

  • Access and a copy — see the personal data we hold and receive it in a portable file.
  • Correction — fix data that is wrong or out of date.
  • Deletion — remove your data, except the records accounting or the law requires us to keep.
  • Objection and restriction — ask us to stop or limit a specific use.
  • Opt-out — unsubscribe from marketing at any time; the link is in every email.

Exercising these rights never affects your prices or your service. Requests go through the contact page; we confirm receipt within a week and finish within 30 days, as the GDPR timeline requires.

Changes to this policy

When this policy changes, the date at the top changes with it. Material changes are also announced in the store announcement bar for two weeks.