DRAFT FOR REVIEW: Resolve the bracketed notes and confirm that the descriptions below match LASIO's actual practices before publishing. Remove this paragraph after review.

Last updated: [Insert publication date]

Lasio Professional Products LLC ("LASIO," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit lasioinc.com, make a purchase, create a retail or professional account, subscribe to our communications, or contact us.

Personal information means information that identifies you, relates to you, or can reasonably be linked to you. This policy applies to our website and related customer services. Additional notices may apply to particular programs or features.

1. Personal Information We Collect

The information we collect depends on how you interact with us. It can include:

• Contact and account information: Your name, email address, telephone number, billing and shipping addresses, login information, and account preferences.
• Order and transaction information: Products purchased or considered, order history, payment status, transaction details, delivery information, and information related to return, refund, or replacement requests. Payment details are processed by the payment providers used at checkout; we receive the transaction information needed to manage your order.
• Professional and business information: Salon or business name, business contact information, and professional credentials or other documents you submit to establish eligibility for a professional or wholesale account.
• Communications and submissions: Messages, customer-service requests, reviews, photographs, and other information you choose to send or submit.
• Device and website activity: IP address, browser and device information, cookie identifiers, approximate location inferred from your IP address, referring pages, and interactions with products, pages, shopping carts, and marketing communications.
• Preferences and consent records: Marketing subscriptions, cookie choices, opt-out requests, and related consent records.

We obtain information directly from you, automatically through your interaction with our website and communications, and from providers that support our store, payments, delivery, and marketing. We may also receive information from a social platform when you interact with us there, subject to your settings on that platform.

Providing some information is necessary to complete an order, maintain an account, or respond to a request. If you choose not to provide it, we may be unable to provide the requested service.

2. How We Use Personal Information

We use personal information to:

• Process payments, fulfill orders, arrange delivery, and review return, refund, replacement, or shipping-protection requests.
• Create and manage accounts and verify eligibility for professional purchasing.
• Answer questions, provide customer support, and send order or account updates.
• Operate, maintain, troubleshoot, and improve our website, products, and customer experience.
• Send marketing communications and provide relevant advertising, subject to your choices and any required consent.
• Understand website activity and measure the effectiveness of our marketing.
• Detect fraud, protect accounts and systems, resolve disputes, and meet legal, tax, and recordkeeping obligations.

3. How We Disclose Personal Information

We disclose information as needed for the purposes described in this policy, including to:

• Service providers: Shopify and other providers supporting website hosting, payments, order fulfillment, delivery, customer service, communications, and business administration. These providers receive information relevant to the services they perform.
• Optional-service providers: Providers of services you select, such as shipping protection or an alternative payment method.
• Analytics and advertising partners: As described in Section 5, subject to your choices and applicable law.
• Professional advisers and authorities: When needed for legal advice, accounting, compliance with a valid legal request, protection of rights or safety, or the investigation of fraud or other unlawful activity.
• Parties to a business transaction: In connection with a proposed or completed merger, acquisition, financing, reorganization, or sale of business assets, subject to applicable confidentiality and legal requirements.
• Other recipients you authorize: When you request or consent to a particular disclosure.

If you submit a review or other content for public display, the content and the display information associated with it may be visible to other people. Please avoid including information you do not want made public.

4. Shopify and Our Online Store

Our store is hosted on Shopify. Shopify processes personal information to support the store, checkout, and related services. If you use Shopify's own consumer services, such as Shop or Shop Pay, Shopify also processes information under its own privacy terms.

[CONFIRM SHOPIFY SETTING: Keep the next paragraph only if Shopify Network Intelligence is enabled. Confirm the related consent and opt-out controls before publishing.]

We use Shopify Network Intelligence to support enhanced services for our business. Shopify processes information about your interactions with our store together with information from your interactions with other merchants and Shopify to provide these services, including improvements to shopping experiences and advertising. Information is shared with Shopify and providers supporting these services, which may be located in countries other than where you live.

You can learn more in Shopify's Consumer Privacy Policy and manage applicable choices concerning Shopify's own processing through the Shopify Privacy Portal.

5. Cookies, Analytics, and Advertising Choices

Cookies, pixels, and similar technologies help our website operate, remember preferences, understand activity, and support marketing. Some are needed for functions such as maintaining your shopping cart or securing checkout. Other technologies support analytics or advertising.

[CONFIRM TRACKING AND CONTROLS: Verify the analytics and advertising services actually used and the information disclosed to them. Replace the bracketed links below with working privacy controls. Confirm that consent choices and Global Privacy Control signals are honored by the relevant tools.]

Depending on the tools in use and your privacy choices, we disclose identifiers, device and browsing information, and shopping activity to analytics and advertising partners to measure campaigns and show relevant advertising. These disclosures may qualify as a "sale," "sharing," or processing for "targeted advertising" under applicable privacy laws, even when no money is exchanged.

You can manage optional tracking through [INSERT WORKING COOKIE-PREFERENCES LINK]. Where applicable, you can opt out of the sale or sharing of personal information or targeted advertising through [INSERT WORKING YOUR PRIVACY CHOICES LINK]. You can also contact customerservice@lasioinc.com for help with your choices.

Where consent is required, optional tracking is used only with that consent, and you may withdraw it through the available controls. We honor legally required opt-out preference signals, including Global Privacy Control, as required by applicable law. Browser settings can also block or delete cookies, although blocking essential cookies may affect website functions.

6. Email and Text Messages

You can unsubscribe from marketing emails using the unsubscribe link in an email. We may still send non-marketing communications needed to service your orders, account, or requests.

If you enroll in text messages, we process your telephone number, consent records, and message interactions to operate the messaging program. You can stop marketing texts by replying STOP or following the instructions in the message. Consent to marketing texts is not a condition of purchase.

[CONFIRM SMS PRACTICES: Check the following paragraph against your current SMS provider and settings. If you send abandoned-cart texts, add an accurate explanation of the tracking used to trigger them and link any applicable messaging privacy notice.]

We do not sell or share text-message opt-in information or consent with third parties for their own marketing purposes. We disclose it to providers that help operate our messaging program, as needed to provide that service, or when required by law. The general disclosure provisions elsewhere in this policy do not override this restriction.

7. Your Privacy Rights and Requests

Depending on where you live and the laws that apply, you may have rights to access or obtain a copy of your personal information, correct inaccurate information, request deletion, restrict or object to processing, withdraw consent, or opt out of certain sales, sharing, targeted advertising, or profiling. Some laws also provide rights concerning the use of sensitive personal information.

To make a request, email customerservice@lasioinc.com. We may need to verify your identity for requests involving access, correction, or deletion. We do not require identity verification for opt-out requests beyond information reasonably necessary to apply the request. An authorized agent may submit a request where permitted by law.

Rights are subject to legal conditions and exceptions. We respond within applicable legal deadlines and will not unlawfully discriminate against you for exercising a privacy right. If an appeal right applies, you can appeal our decision by replying to our response or emailing us. You may also complain to the appropriate privacy regulator.

8. Information for European and UK Customers

Where European Economic Area or UK data protection law applies, Lasio Professional Products LLC is the controller of the personal information it processes for the purposes described in this policy.

Our legal bases depend on the activity: performing our contract with you for orders and requested account services; complying with legal obligations for required records and lawful requests; pursuing legitimate interests in security, fraud prevention, service improvement, and business administration where your rights do not override those interests; and obtaining consent for optional tracking or marketing where required.

You may withdraw consent at any time without affecting processing that was lawful before withdrawal. Where applicable, you may object to processing based on legitimate interests and to processing for direct marketing. You may complain to your local data protection authority.

9. International Processing

LASIO is based in Florida, United States. We and our providers may process personal information in the United States and other countries. Those countries may have privacy laws different from the laws where you live.

[CONFIRM INTERNATIONAL DETAILS: Identify the transfer safeguards actually used for EEA, UK, or Swiss information and any required local representative. Complete this section with those details before publishing for those markets.]

Where applicable law requires safeguards for an international transfer, we use an appropriate legal transfer mechanism. You may contact us for details of the safeguards applicable to your information and how to obtain a copy, where available.

10. How Long We Retain Information

We retain personal information for the period reasonably needed for the purpose for which it was collected, taking account of the type of information, our relationship with you, and applicable legal obligations.

For example, order and payment records may need to be kept for tax, accounting, dispute, or fraud-prevention purposes. Account information is retained as needed to provide account services. Support records are retained as needed to address inquiries and related claims. We may retain limited consent and suppression records to document your choices and avoid sending unwanted marketing.

When information is no longer needed, we delete or de-identify it, subject to lawful retention requirements.

11. Information Security

We use administrative, technical, and organizational safeguards appropriate to the information we handle. No internet transmission or storage system is completely secure. Please protect your account credentials and avoid sending full payment-card details or other unnecessary sensitive information by email.

12. Children's Privacy

Our website is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided personal information to us, please contact us so we can investigate and take appropriate action, including deletion where required.

13. Other Websites and Services

Our website may link to third-party websites, social platforms, or services. Their privacy practices are governed by their own notices. Please review those notices when you interact with them.

14. Changes to This Policy

We may update this policy to reflect changes in our practices, services, or legal requirements. We will update the date above and provide additional notice or obtain consent when required by law.

15. Contact Us

For privacy questions or requests, contact:

Lasio Professional Products LLC
1031 Exchange Place, Unit 107
St. Cloud, FL 34769
United States

Email: customerservice@lasioinc.com
Website: lasioinc.com