Privacy Policy

1. Who we are

Laverie Nails ("Laverie", "we", "us") operates this online store for reusable press-on nails. We are responsible for the personal information described in this policy.

2. Information we collect

We collect information you give us, information created when you use the store, and limited technical information needed to keep the service secure.

• Account details: your name, email address, phone number, delivery address, and a securely hashed password. If you sign in with Google, we receive your Google account identifier, verified email address, and display name.
• Order and delivery details: recipient name, email, phone number, full delivery address (province, regency, district, village, and street details), order notes, products, quantities, prices, shipping cost, order status, and payment status.
• Sizing details: hand measurements and selected sizes you submit, the recommended size, confidence values, and any measurement history saved to your account.
• Payment information: order number, amount, payment status, and payment references received from our payment provider. We do not receive or store full card numbers, CVV codes, banking credentials, or other secret payment credentials. Those are handled by Midtrans under its own privacy policy.
• Technical and security information: IP address, browser and device information, session identifiers, CSRF tokens, language preference, error logs, and records of actions taken to prevent fraud or abuse.

3. How we use information

We use personal information to provide and improve the Laverie Nails service, including to:

• create and manage your account and sign you in securely;
• calculate sizing recommendations and, when you choose to save them, keep your measurement history;
• process orders, calculate shipping, collect payment through Midtrans, and arrange delivery;
• send transactional messages such as order confirmations, payment updates, shipping updates, and replies to your questions;
• detect, prevent, and investigate fraud, abuse, and security incidents;
• comply with accounting, tax, consumer-protection, and other legal obligations; and
• understand how the store is used so we can fix problems and improve the experience.

4. Why we are allowed to process it

Depending on the activity, we process personal information to perform a contract with you (for example, fulfilling an order), to comply with legal obligations, with your consent (for example, optional Google sign-in or optional communications), or for our legitimate interests in running and protecting the store. Where consent is the basis, you may withdraw it at any time; withdrawal does not affect processing that already happened.

5. When we share information

We do not sell personal information. We share only what is necessary with service providers and other parties who help us operate the store:

• Midtrans, to process payments and receive payment status updates;
• couriers and delivery partners, to deliver your order and provide tracking information;
• hosting, infrastructure, and security providers, including Cloudflare, to serve the website and protect it from abuse;
• our email delivery provider, Brevo, to send transactional email;
• Google, when you choose to sign in with Google;
• professional advisers, auditors, or authorities when required by law or necessary to protect our rights and users; and
• a successor or buyer if the business is reorganized, subject to appropriate confidentiality protections.

6. International transfers

Some service providers may process information outside Indonesia. When that happens, we use appropriate safeguards and require providers to protect the information in line with this policy and applicable law.

7. How long we keep information

We keep personal information only as long as needed for the purposes described above. Account information is kept while your account is active. Order and transaction records may be kept longer where accounting, tax, dispute-resolution, or other legal requirements apply. Measurement history is kept until you delete it or ask us to delete it. Security logs and operational backups are kept for a limited period and then deleted or overwritten.

8. How we protect information

We use technical and organizational safeguards, including encrypted connections (HTTPS), hashed passwords, access controls, and limited administrative access. No method of transmission or storage is completely secure, so we cannot promise absolute security. If a breach affects your rights, we will notify you and the relevant authority as required by applicable law.

9. Cookies and similar technologies

We use essential cookies and similar storage to keep you signed in, protect forms against cross-site request forgery, remember your language choice, and maintain your shopping cart. We do not currently use advertising cookies or third-party analytics cookies. If you use Google sign-in, Google may set or read cookies under its own policies. You can control cookies in your browser, but blocking essential cookies may prevent checkout or sign-in from working.

10. Your rights

Subject to applicable law, you may ask us to access, correct, update, delete, restrict, or stop processing your personal information, request a portable copy, or withdraw consent. You may also object to processing based on legitimate interests and lodge a complaint with the competent data-protection authority in Indonesia.

To make a request, contact us at the email below. We may need to verify your identity before acting. Some information may be retained where we have a legal obligation or an ongoing dispute, and deleting account data may prevent us from completing or supporting past orders.

11. Children

The store is not directed to children under 13, and we do not knowingly collect their personal information. If you are under 18, please use the store with the involvement of a parent or guardian. If you believe a child has provided information to us, contact us so we can remove it.

12. Changes to this policy

We may update this policy as the store or the law changes. The updated version will show a new "last updated" date. If a change materially affects how we use personal information, we will provide additional notice on the website or by email where appropriate.