Privacy Policy

Last Updated: 23 March, 2026

ONYOURSHAPE LTD (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, stored, and shared when you visit or make a purchase from www.lonaw.com (the “Website”) or use related services (the “Service”).

By using the Website, you agree to the practices described in this Privacy Policy and our Terms of Service.

Definitions and Key Terms

Company / we / us / our: ONYOURSHAPE LTD
Website: www.lonaw.com
Country: United Kingdom
Customer / you: Any individual or entity visiting the Website or placing an order
Device: Any internet-connected device used to access the Website
Personal Data: Information that identifies or can reasonably be linked to you, such as name, email address, postal address, phone number, IP address, or order details
Service: The online store, content, and related services provided through the Website
Third-party services: External providers used for payments, shipping, analytics, email communication, and similar business functions

Information We Collect

We collect Personal Data when you:

Browse the Website
Create an account
Place an order
Subscribe to our newsletter
Contact us via email or contact forms

Information collected may include:

Name, email address, phone number
Billing and delivery address
Order details
IP address and device information

Payment information is processed securely by our payment providers and is never stored on our servers.

How We Use Your Information

We use Personal Data to:

Process and deliver orders
Provide customer support and respond to enquiries
Send transactional emails (order confirmations, shipping updates)
Send marketing communications where consent has been given
Improve Website performance, functionality, and security
Comply with legal obligations

Legal Basis for Processing Personal Data

Under UK GDPR, we process your Personal Data based on:

Performance of a contract: to process orders and provide customer support
Legal obligation: to comply with accounting, tax, and regulatory requirements
Legitimate interests: to operate and secure our Website, prevent fraud, and improve user experience
Consent: for marketing communications and non-essential cookies

Sharing of Personal Data

We share Personal Data only where necessary, including with:

Payment processors: PayPal, Shopify Payments
Shipping providers: Royal Mail
Email and communication services: Shopify Email, Mailchimp (if used)
Analytics providers: Google Analytics, Meta Pixel / Google Ads (if used)

All third-party providers are required to process data securely and only for the services they provide.

We may also disclose Personal Data where required by law or to protect our legal rights.

International Data Transfers

Some third-party service providers may process Personal Data outside the United Kingdom or European Economic Area.

Appropriate safeguards (such as UK-approved standard contractual clauses) are in place to protect your data.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Website, analyse traffic, remember preferences, and improve functionality.
Essential cookies are required for core Website functionality (checkout, security, account login)
Non-essential cookies (such as analytics and marketing cookies) are used only with your consent
You can manage cookie preferences through our cookie banner or browser settings. Disabling cookies may affect Website functionality.
For more information, please see our Cookie Policy.

Email Communications

If you provide your email address during checkout, account creation, or newsletter signup, we may send you service-related emails.
Marketing emails are sent only where you have opted in, and you may unsubscribe at any time using the link in each email. Transactional emails related to orders will still be sent as required.

Data Retention

We retain your personal data for the following periods:

Order and transaction records: 7 years (required by UK HMRC)
Customer contact information: 3 years after last interaction
Analytics data: 26 months (Google Analytics default)
Marketing consent records: until consent is withdrawn, or 3 years of inactivity
Fraud prevention records: up to 5 years

Security of Personal Data

We implement technical and organisational measures to protect your Personal Data, including:

Encrypted SSL connections
Restricted access to systems
Secure third-party service providers

While no system is completely secure, we take reasonable steps to prevent unauthorised access, loss, or misuse.

Your Data Protection Rights

Under UK GDPR, you have the right to:

Request access to your Personal Data
Request correction of inaccurate or incomplete data
Request deletion of your data where legally permitted
Object to or restrict processing in certain circumstances
Withdraw consent for marketing communications at any time
To exercise these rights, contact us at contact@lonaw.com We may request proof of identity before fulfilling requests.

Right to Lodge a Complaint

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

ICO Website: https://ico.org.uk

Children’s Privacy

The Website is not intended for children under the age of 13.

We do not knowingly collect Personal Data from children.
If a child has provided Personal Data, contact us to have it removed.

Third-Party Links and Services

The Website may contain links to third-party websites or use third-party services. This Privacy Policy does not apply to those third parties, and their own privacy policies govern your use of their services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Continued use of the Website after changes are made indicates acceptance of the updated Policy.