Personal Data Processing Policy

Last updated: June 2026Version 1.0

This policy explains how Light Style processes your personal data in accordance with the Republic of Armenia Law “On Protection of Personal Data” and, where applicable, the EU General Data Protection Regulation (GDPR). It complements our Privacy Policy and Cookie Policy.

Data operator

The operator (controller) that determines the purposes and means of processing your personal data is:

LIGHT STYLE LLC, TIN 01056231

77 Tsarav Aghbyuri St., Yerevan 0052, Armenia

support@ls.am

+374 41 554 455

What data we process

We process only the personal data needed to operate the online store, fulfil your orders and provide support. The categories below depend on how you use the Services.

CategoryPurposeLegal basis
Contact details (name, phone, email)Account, order communication, supportPerformance of a contract
Delivery addressDelivering your ordersPerformance of a contract
Order and payment confirmation dataProcessing orders, accounting, returnsContract; legal obligation
Device and usage data (IP, browser, pages, cookies)Security, fraud prevention, site improvementLegitimate interest; consent (analytics)
Marketing preferencesNewsletters and offersConsent

Legal grounds for processing

We process personal data only when at least one of the following legal grounds applies:

  • Performance of a contract with you (processing orders, delivery, returns, account management).
  • Compliance with our legal obligations (accounting, tax, consumer-protection requirements).
  • Your consent (marketing communications, analytics and advertising cookies), which you can withdraw at any time.
  • Our legitimate interests (securing the Services, preventing fraud, improving the website), balanced against your rights.

Payment data

We never store your full card numbers. All card payments are processed directly by IDBank and IDram on their secure systems; we receive only the payment confirmation needed to fulfil your order.

Cookies and tracking

We use cookies and similar technologies for essential functionality, analytics and advertising. You can manage or withdraw your consent at any time. See our Cookie Policy

Disclosure to third parties

We never sell your personal data. We share it only with partners who help us provide the Services, and only to the extent necessary:

RecipientPurposeCountry
Delivery partners / couriersDelivering your ordersArmenia
IDBank, IDramProcessing card paymentsArmenia
Google (Analytics)Website analyticsEU / USA
Hosting provider (Hetzner)Cloud hosting of the ServicesFinland (EU)

International data transfers

Our servers are located in Finland (EU, Hetzner). Some service providers (e.g. Google) may process data outside Armenia and the EU. In such cases we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses.

Data retention

We keep your personal data only as long as needed for the purposes above: for the life of your account and afterwards for the periods required by accounting, tax and consumer-protection law. When data is no longer needed, we delete or anonymise it.

Security measures

We apply organisational and technical measures to protect your data, including:

  • Encrypted (HTTPS/TLS) connections across the Services.
  • Card data handled only by certified payment providers, never stored by us.
  • Restricted, role-based access to personal data.
  • Regular backups and monitoring.

Minors

The Services are intended for users aged 18 and over. We do not knowingly collect personal data from children. Products for children are purchased by parents or guardians.

Your rights

Under Armenian law and the GDPR you have the following rights regarding your personal data:

  • Right of access to the data we hold about you.
  • Right to rectification of inaccurate data.
  • Right to erasure (the “right to be forgotten”).
  • Right to data portability.
  • Right to restrict processing.
  • Right to object to processing, including for marketing.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with the supervisory authority.

You can exercise most of these rights yourself in your account settings, or by contacting us at support@ls.am.

Account settings

Supervisory authority

If you believe your data is processed unlawfully, you have the right to lodge a complaint with the Personal Data Protection Agency of the Republic of Armenia (ՀՀ Անձնական տվյալների պաշտպանության գործակալություն).

Changes to this policy

We may update this policy from time to time for operational, legal or regulatory reasons. We will post the revised version on the Site and update the “Last updated” date.

Contact us

For any question about how we process your personal data, or to exercise your rights, contact us at support@ls.am, +374 41 554 455, 77 Tsarav Aghbyuri St., Yerevan 0052, Armenia.

Governing law

This policy is governed by the law of the Republic of Armenia, taking into account the requirements of the EU GDPR. It is published in Armenian, Russian and English; in case of discrepancy, the Armenian version prevails.