YOUR INFORMATION

Privacy Policy

This policy explains what personal information CHEZ LOLA collects, why we use it, who may receive it and the choices available to you.

Clear purposeWe use information only for stated and lawful purposes

Secure partnersTrusted providers help us run payments, delivery and communication

Your choicesYou may exercise your privacy rights at any time

1. Who is responsible?

Nlab Holding AS is the data controller for personal information processed through chezlolafashion.com and CHEZ LOLA customer services.

Nlab Holding AS
Org. no. 932 549 085
Bentsebrugata 27C, 0469 Oslo, Norway
hello@chezlolafashion.com

2. Information we may collect

Identity and contact details, such as name, billing and delivery address, email address and telephone number.
Order information, including products, order value, returns, delivery and customer service history.
Payment-related information. Full card details are handled by payment providers and are not stored by CHEZ LOLA.
Account information, login details and preferences if you create a customer account.
Messages, custom-order enquiries, studio appointment requests and other information you choose to provide.
Marketing preferences and interactions with emails.
Technical and usage information, including IP address, device, browser, cookie identifiers and activity on the website.

3. Where information comes from

We receive information directly from you when you place an order, create an account, contact us, subscribe to communications or use the website. We may also receive transaction, delivery, fraud-prevention and website interaction information from payment providers, carriers and technology partners.

4. Why we use personal information

To process orders, payments, delivery, returns and refunds.
To answer questions, provide customer service and manage custom orders or appointments.
To maintain accounts, prevent fraud, protect the website and troubleshoot technical problems.
To meet accounting, tax, consumer protection and other legal obligations.
To improve our products, services, website and customer experience.
To send marketing where you have consented or where otherwise permitted by law.

Depending on the purpose, our legal basis is performance of a contract, compliance with a legal obligation, our legitimate interests in operating and protecting the business, or your consent.

5. Payments

Payments are processed by the providers offered at checkout, which may include Stripe, card networks, PayPal, Vipps or other payment services. These providers process payment information under their own privacy terms and security requirements. We receive the information needed to confirm and manage the transaction, but not full payment card details.

6. Who we share information with

We share only the information reasonably necessary for the relevant service. Recipients may include:

Website, hosting and e-commerce providers, including WordPress and WooCommerce-related services.
Payment, fraud-prevention and accounting providers.
Shipping carriers and fulfilment partners.
Email and communication providers, including Brevo where applicable.
Analytics and advertising providers, including Google and Meta where enabled and permitted.
Professional advisers, insurers, authorities or other parties where required by law or necessary to establish, exercise or defend legal claims.

We do not sell personal information.

7. Cookies, analytics and advertising

We use necessary cookies to operate features such as the shopping cart, checkout, login and security. With consent where required, we may also use analytics, preference and advertising technologies to understand website use, measure campaigns and show more relevant content.

You can manage available choices through the website’s cookie controls and your browser settings. Disabling necessary cookies may prevent parts of the store from working correctly.

8. International transfers

Some service providers may process information outside Norway or the European Economic Area. Where required, we rely on an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.

9. How long we keep information

We keep personal information only for as long as needed for the purpose for which it was collected. Order, payment and accounting information is retained for the periods required by Norwegian law. Customer service and account information is kept while needed to manage the relationship, resolve disputes and protect legal rights. Marketing information is kept until you unsubscribe, withdraw consent or it is no longer needed.

When information is no longer required, it is deleted or anonymised unless continued storage is legally required.

10. Your rights

Subject to the conditions in applicable data protection law, you may request:

Information about and access to your personal data.
Correction of inaccurate or incomplete information.
Deletion or restriction of processing.
Data portability where applicable.
Objection to processing based on legitimate interests or to direct marketing.
Withdrawal of consent at any time, without affecting earlier lawful processing.

To exercise a right, email hello@chezlolafashion.com. We may need to verify your identity before responding.

11. Marketing communications

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the message or contacting us. Service messages relating to an order, payment, delivery, account or customer request are not marketing and may still be sent when necessary.

12. Security and children

We use organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse or alteration. No online system can be guaranteed completely secure.

Our store is not directed at children, and we do not knowingly collect personal information from children who cannot legally provide it. If you believe a child has provided information to us improperly, please contact us.

13. Complaints, updates and contact

If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the Norwegian Data Protection Authority, Datatilsynet, at datatilsynet.no.

We may update this policy when our services, providers or legal obligations change. The current version will always be published on this page.

Privacy contact: hello@chezlolafashion.com
Last updated: September 2026.