Last updated: 25 October 2026
This policy explains how VULKOORA LLC, trading as Lavafor, collects and uses your personal data when you visit lavafor.com, place an order or contact us. We are the data controller for your personal data. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
- Data controller: VULKOORA LLC, 5830 E 2nd St, Ste 7000 #39524, Casper, WY 82609, United States
- Privacy contact: support@lavafor.com
2. What we collect
- Contact and order details: name, email, phone, billing and delivery address, order history, returns and refunds.
- Payment information: handled by our payment providers. We do not store full card numbers. We may receive the payment status, card type and last four digits.
- Account information: login details, saved addresses and preferences, where you create an account.
- Technical information: IP address, browser, device, pages viewed and similar data, collected through cookies.
- Communications: messages, photos and videos you send us.
- Marketing preferences: whether you have signed up to our emails.
3. How we use it, and our lawful basis
- To process, deliver and support your order, including returns: performance of a contract.
- To keep accounting and tax records: legal obligation.
- To prevent fraud and keep the website secure: legitimate interests.
- To improve our website and products: legitimate interests.
- To send marketing emails and use non-essential cookies: your consent, which you can withdraw at any time.
4. Who we share it with
We share personal data only as needed to run our business: Shopify (our e-commerce platform), payment providers, our fulfilment partner and delivery companies, email marketing tools if you have subscribed, analytics and advertising providers where you have consented, professional advisers, and authorities where the law requires. We do not sell your personal data.
5. International transfers
Your data may be processed outside the UK, including in the United States (where we are based), Canada (Shopify) and China (our fulfilment partner). Where required, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism.
6. How long we keep it
We keep order and tax records for 6 years. Marketing data is kept until you unsubscribe. Other data is kept only as long as needed for the purpose it was collected for.
7. Your rights
You have the right to access, correct or delete your data, to restrict or object to how we use it, to data portability, and to withdraw consent. To use any of these rights, email support@lavafor.com. We will reply within one month.
8. Complaints
If you are unhappy with how we handle your data, please contact us first. You can also complain to the UK Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113.
9. Children
Our website is not intended for children under 13, and we do not knowingly collect their data.
10. Cookies
We use strictly necessary cookies to make the website, basket and checkout work. We use analytics and advertising cookies only if you accept them in our cookie banner. You can change your choice at any time through the cookie settings link in the footer.
- Strictly necessary: security, basket, checkout and remembering your cookie choice. These do not need consent.
- Analytics (with consent): for example Google Analytics, to understand how visitors use the site.
- Advertising (with consent): for example Google Ads, to measure and personalise advertising.
Shopify sets cookies to run our store. See https://www.shopify.com/legal/cookies. You can also block or delete cookies in your browser settings; the ICO explains how at https://ico.org.uk/for-the-public/online/cookies/.
Full details are in our Cookie Policy.
11. Changes
We may update this policy. The latest version will always be on this page with its date.