Privacy Policy

Applies to: https://us.lbdo.com/ (United States and Canada)

Last Updated: April 21, 2026

This Privacy Policy describes how LBDO US ("the Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from us.lbdo.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Jurisdiction and Scope

This Site is intended for users located in the United States and Canada. We do not offer products or services to individuals located in other jurisdictions. Orders placed through this Site may only be shipped to addresses within the United States and Canada.

If you are located outside of these regions, including in the European Economic Area, United Kingdom, or Australia, please refer to the privacy policy available at www.lbdo.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

• Contact details including your name, address, phone number, and email.

• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.

• Account information including your username, password, security questions and other information used for account security purposes.

• Shopping information including the items you view, put in your cart, saved into your account like loyalty points, reviews, referrals or gift cards, or purchases.

• Customer support information including the information you choose to include in communications with us.

Information We Collect about Your Usage

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

Information We Obtain from Third Parties

We may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

• Companies who support our Site and Services, such as Shopify.

• Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfil your orders.

• When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

How We Use Your Personal Information

• Providing Products and Services: to process your payments, fulfil your orders, send notifications related to your account, purchases, returns, and exchanges, and to manage your account.

• Marketing and Advertising: to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services.

• Security and Fraud Prevention: to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity.

• Communicating with You and Service Improvement: to provide customer support and improve our Services.

Third-Party Services We Use

We use the following third-party services that may receive your personal data:

• Shopify — e-commerce platform

• Google Analytics — site analytics

• Google Ads / Meta (Facebook) Ads / Microsoft (Bing) Ads — advertising and retargeting

• Klaviyo or similar — email marketing

• Fulfilment and logistics partners — used to ship your orders

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for the following purposes:

• With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).

• With business and marketing partners to provide services and advertise to you.

• When you direct, request us, or otherwise consent to our disclosure of certain information to third parties.

• With our affiliates or otherwise within our corporate group.

• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We have in the past 12 months disclosed identifiers, commercial information, internet/network activity, and geolocation data to vendors, business and marketing partners, and affiliates as described above.

We have "sold" and "shared" (as those terms are defined in applicable law) personal information — specifically identifiers, commercial information, and usage data — with business and marketing partners for advertising and marketing purposes.

Cookies

Like many websites, we use Cookies on our Site. We use Cookies to power and improve our Site and our Services, to run analytics and better understand user interaction with the Services, and to better tailor the services, products and advertising on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services to work incorrectly or no longer be available.

Our website recognises the Global Privacy Control (GPC) signal. If you notify us of your preference through GPC, we will treat such signal as a valid request to opt out of sharing / targeted advertising for the associated browser or device. Our website does not respond to other "Do Not Track" signals.

Data Retention

How long we retain your personal information depends on the nature of the data and the purpose for which it is used:

• Order information is retained for 7 years for tax and legal compliance purposes.

• Email marketing data is retained until you unsubscribe or request deletion.

• Device and analytics data is retained for up to 26 months.

• Account information is retained for as long as your account remains active, or as needed to provide the Services.

Data Breach Notification

In the event of a data breach that poses a risk of harm to individuals, we will notify affected users and relevant authorities as required by applicable law. This includes compliance with:

• US state breach notification laws (including California, Colorado, Virginia, and others), which generally require notification within the timeframe required by applicable law.

• Canada’s Breach of Security Safeguards Regulations under PIPEDA, which require notification to the Office of the Privacy Commissioner of Canada and affected individuals when there is a real risk of significant harm.

• Quebec Law 25, which requires notification to the Commission d’accès à l’information (CAI) and affected individuals within 72 hours of becoming aware of a confidentiality incident.

User Generated Content

The Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone. We are not responsible for the privacy or security of any information that you make publicly available.

Third Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of such links does not imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children’s Data

The Services are not intended to be used by children under the age of 18, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" personal information of individuals under 16 years of age.

Security and Retention of Your Information

We implement reasonable security measures to protect your personal information. However, no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

We do not intentionally collect sensitive personal information beyond what is necessary to process transactions.

Additional Rights for US Residents

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights regarding your personal information:

• The right to know what personal information we collect, use, disclose, and sell

• The right to delete personal information we have collected from you

• The right to opt out of the sale or sharing of your personal information

• The right to correct inaccurate personal information

• The right to limit the use of sensitive personal information

• The right to non-discrimination for exercising any of these rights

We collect the following categories of personal information: identifiers (name, email, IP address); commercial information (purchase history); internet or other electronic network activity (browsing behaviour on our site); and geolocation data. We share this data with service providers including Shopify, Google Analytics, and advertising platforms (Facebook/Meta, Google, Bing) for business purposes including order fulfilment, fraud prevention, analytics, and targeted advertising. We do not sell personal information for money, but we may "share" it for cross-context behavioural advertising as defined under California law.

To exercise any of these rights, please contact us at hello@lbdo.com. We will respond to verified requests within 45 days.

Other US State Residents

Residents of Colorado, Connecticut, Virginia, Texas, Oregon, and other states with applicable privacy laws may have similar rights to access, delete, correct, and opt out of certain data processing. Please contact us at hello@lbdo.com to submit a request. We will respond within the timeframe required by your applicable state law.

Do Not Track and Global Privacy Control

Our website does not currently respond to browser-level Do Not Track (DNT) signals. However, if you visit our site with a Global Privacy Control (GPC) signal enabled in your browser, we will treat this as a request to opt out of the sale or sharing of your personal information as required by applicable law.

Additional Rights for Canadian Residents

This section applies to residents of Canada and reflects our obligations under the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25), and other applicable provincial privacy laws.

Your Rights Under Canadian Law

As a Canadian resident, you have the following rights:

• Right to Access: You may request access to the personal information we hold about you, including how it is being used and to whom it has been disclosed.

• Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.

• Right to Withdraw Consent: Where we rely on your consent to process your personal information, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide you with certain Services.

• Right to Data Portability (Quebec residents): If you are a resident of Quebec, you have the right to receive personal information you have provided to us in a structured, commonly used, and technological format, and to request that we transmit it to a third party, where technically feasible.

• Right to Object to Automated Decision-Making (Quebec residents): You have the right to be informed of and to object to any decision made solely on the basis of automated processing of your personal information, if such a decision produces legal or significant effects.

Purpose of Collection

In accordance with PIPEDA, we collect personal information only for the following identified purposes:

• To process and fulfil your orders and manage your account

• To communicate with you about your orders, returns, and account

• To send you marketing communications where you have consented

• To improve our website and Services through analytics

• To prevent fraud and ensure the security of our Services

• To comply with applicable legal obligations

We will not use your personal information for any purpose other than those identified above without first seeking your consent, or as otherwise required or permitted by law.

Privacy Officer

We have designated a Privacy Officer who is responsible for overseeing our compliance with applicable Canadian privacy laws. To contact our Privacy Officer or to exercise any of your rights under Canadian law, please contact us at:

Privacy Officer, LBDO

Email: hello@lbdo.com

Address: 1 Carlton Avenue, Brooklyn, NY 11205

Privacy Incidents (Quebec Law 25)

In the event of a confidentiality incident (including any unauthorized access, use, or disclosure of personal information), we will:

• Assess whether the incident poses a risk of serious injury to the affected individuals

• Notify the Commission d’accès à l’information (CAI) and affected individuals within 72 hours where required

• Maintain a register of all confidentiality incidents as required by law

Cross-Border Transfers of Canadian Personal Information

Your personal information may be transferred to and stored in countries outside of Canada, including the United States. When we transfer your personal information outside of Canada, we take steps to ensure that it receives a comparable level of protection, including through contractual protections and/or our assessment of the adequacy of protection in the recipient country.

By using our Services, you consent to the transfer of your personal information to countries outside of Canada, including the United States, in accordance with this Privacy Policy.

Complaints — Canadian Residents

If you have a complaint about our handling of your personal information, please contact our Privacy Officer at hello@lbdo.com. If you are not satisfied with our response, you may escalate your complaint to the relevant authority:

• Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca

• Quebec residents: Commission d’accès à l’information (CAI): www.cai.gouv.qc.ca

Your Rights (All Users)

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.

• Right to Access / Know: You may request access to personal information that we hold about you.

• Right to Delete: You may request that we delete personal information we maintain about you.

• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.

• Right of Portability: You may request a copy of the personal information we hold about you.

• Restriction of Processing: You may ask us to stop or restrict our processing of personal information.

• Withdrawal of Consent: Where we rely on consent to process your personal information, you may withdraw this consent.

• Appeal: You may appeal our decision if we decline to process your request by replying directly to our denial.

• Managing Communication Preferences: You may opt out of promotional emails at any time by using the unsubscribe option in our emails.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before responding to your request. You may also designate an authorised agent to make requests on your behalf.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response, you may have the right to lodge your complaint with your local data protection authority.

International Users

We may use geolocation tools to direct users to the appropriate regional website where available.

Please note that we may transfer, store and process your personal information outside the country you live in. Your personal information is also processed by staff and third party service providers and partners in these countries.

If we transfer your personal information out of Europe, we will rely on recognised transfer mechanisms like the European Commission’s Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

If you access this Site from outside the United States or Canada, you acknowledge that your information will be processed in accordance with this Privacy Policy.

Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:

Email: hello@lbdo.com

Address: 1 Carlton Avenue, Brooklyn, NY 11205

Privacy Officer: hello@lbdo.com

We will respond to your request in a timely manner as required under applicable law.