Privacy Policy

Last updated: November 2, 2026

L’Or de Loïc Ltd. (“Loïc Or”, “we”, “us”) makes Loïc Or body serums and operates loicor.com, the purchase-registration page reached from the card in every box, and our Instagram, Facebook and TikTok accounts (together, our “Sites”). This policy explains what personal information we collect and why, how we use and share it, how long we keep it, and the choices you have. It applies when you shop with us, subscribe to our newsletter, register a purchase, contact us, interact with us on social media or sign up at one of our events. It is written for people in Canada and follows Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, Quebec’s Act respecting the protection of personal information in the private sector.

Who is responsible for your information?

L’Or de Loïc Ltd., Suite 6321, 2100 Bloor St. W, Toronto, Ontario M6S 5A5, Canada, is responsible for the personal information described in this policy. Our Director is the person in charge of the protection of personal information and can be reached at orders@loicor.com (please write “Privacy” in the subject line) or at the address above.

What is personal information?

Any information about you that identifies you, directly or indirectly: for example your name, email address, phone number, postal address, social media username or profile link, order history, or the identifiers our website collects from your device.

What information do we collect?

• When you order: your name, email, shipping and billing address, phone number, the products you buy, any discount code you use and your order history. If you create a customer account or sign in to see your orders, we also keep your account details. Payments are handled by our payment providers; we never see or keep your full card number.
• When you subscribe on our website: your email address (required) and, if you choose to give them, your Instagram username and your Facebook username or profile link.
• When you register a purchase with the card in your box: your first and last name, email address and preferred language (required) and, if you choose to give them, your phone number, birthday (month and day only), Instagram username and Facebook username or profile link.
• If a signup is blocked: to keep fake, disposable and mistyped addresses off our lists, our signup forms check the email address you enter. The only outside check is a DNS lookup of the domain (the part after the @) to confirm that it can receive email; nothing is sent to your inbox. If a form refuses a signup, we log the address entered, the reason, the page and the time, and keep that log for 30 days.
• When you contact us: whatever you include in your email, contact form or social media message, and our reply.
• When you interact with us on social media: if you follow, comment on, tag, mention or message a Loïc Or account, we see your public profile and what you share with us, as your settings on that platform allow.
• When you subscribe to our emails: an estimate of your gender (female, male or unknown) that we derive from your name, used only to personalize our emails (see “How do we personalize marketing?”).
• If you opt into personalized marketing: relevant information from the Instagram or Facebook accounts you give us: your username, public profile biography, non-sensitive product interests you express in relevant public posts, and your interactions with Loïc Or, such as comments, tags and messages.
• When you browse our Sites: device and usage information such as your IP address and the approximate location it indicates, browser type, pages viewed and how you arrived, collected through cookies and similar technologies (see “Which cookies do we use?”).
• From our service providers: for example, whether a payment was approved or flagged as possible fraud, and whether your parcel was delivered.
• From business partners: if you work with us as an influencer, stockist, spa or sales representative, we keep the contact, payment and tax details needed to manage our agreement and pay you.

Optional means optional. You can buy from us, subscribe and receive every offer without giving any optional detail.

Why do we ask for your Instagram or Facebook username?

Giving us your Instagram username or your Facebook username or profile link is entirely optional. If you leave these fields blank, nothing else changes: you receive the same newsletter and the same offers.

If you give it to us, we use it only to:

• follow your account from a Loïc Or account (following is public, so other people may be able to see that we follow you);
• recognise you as a subscriber or customer when you tag or mention Loïc Or, so that we can thank you or reply;
• if you agreed to it when you signed up, send you skincare tips, product news, offers and other marketing or promotional messages by direct message on that platform. Each message comes from a Loïc Or account and tells you how to stop them;
• if you separately opted into personalized marketing, tailor the tips, recommendations and offers we send you (see “How do we personalize marketing?”); and
• ask your permission if we would like to share one of your posts.

We will not:

• send you marketing or promotional direct messages unless you agreed to receive them, or keep sending them after you ask us to stop (reply STOP or email us, and we will stop within 10 business days);
• repost, share or use your photos, videos, name or username in our content or ads without asking you first, each time, and crediting you the way you prefer;
• collect your followers, friends or contacts, copy your posts, or try to see anything your settings keep private;
• combine your username with information from other sources to build a profile of you unless you opted into personalized marketing, or upload it to advertising platforms without a separate, clearly explained choice; or
• sell it or share it with anyone else.

Please give only an account that belongs to you, not one belonging to someone else or to anyone under 16. If your account is private, we may send a follow request, which you are free to ignore or decline.

Your username is stored with your subscriber record at Shopify or Klaviyo and is included in an internal daily email listing new subscribers to follow. It is seen only by the people at Loïc Or who manage our social media accounts. We keep it until you remove it, unsubscribe or ask us to delete it, and we delete it sooner if the account no longer exists. To change or remove it, email orders@loicor.com; if you ask, we will also unfollow you. You can also unfollow, remove or block Loïc Or on the platform at any time. Instagram and Facebook are operated by Meta, which handles your information on those platforms under its own privacy policy.

How do we use your information?

• To process, ship and support your orders, returns and questions, and to send order, shipping and account emails.
• To send our newsletter, offers and personal discount codes by email, with your express or implied consent (see “How do we send marketing, and how do we get your consent?”).
• To send you a birthday offer, if you gave us your birthday and we are running one.
• To call or text you about your order if needed and, with your consent, to send you marketing text messages; reply STOP at any time to end them. We do not make promotional calls.
• To use your Instagram or Facebook username as described above.
• To personalize the emails we send you, if you subscribed to them, and to personalize marketing using your Instagram or Facebook information, if you separately opted into it (see “How do we personalize marketing?”).
• To track sales made with an influencer’s, stockist’s, spa’s or representative’s discount code, so that we can pay their commission.
• To prevent fraud, keep our Sites secure, and meet our legal, tax and accounting obligations.
• To understand how our Sites are used and improve them and, with your consent, to show you relevant ads.

We use your information only for the purposes we explained when we collected it, or as the law allows. If we want to use it for a new purpose, we will ask you first. We do not make decisions about you based only on automated processing; if our payment tools flag an order for review, a person makes the final decision. We do not sell your personal information.

How do we send marketing, and how do we get your consent?

We send skincare tips, product news and promotional offers by email, by SMS text message and by direct message on Instagram or Facebook, but only through a channel you have agreed to. Your consent is either express or, where Canadian law allows, implied. You give express consent when you click Subscribe below a statement explaining what you will receive, or tick a box that is never pre-ticked, for example on our website, on the purchase-registration page or at checkout. Consent is implied where the law allows it, for example for two years after you buy from us directly or six months after you ask us a question. Every marketing message identifies Loïc Or and tells you how to stop. We do not make promotional telephone calls. Marketing consent is optional and is never a condition of buying our products. When you subscribe to our emails, you also agree that we may personalize them, as described in “How do we personalize marketing?”.

We record when, where and in which language you agreed to each channel. Using your information to fill and deliver an order you place is part of providing that order. You can withdraw your consent for one channel or for all of them at any time (see “What are your rights and choices?”); if you do, you will still receive necessary messages about orders you have placed.

How do we personalize marketing?

Personalizing our emails. When you subscribe to our marketing emails, you also agree that we may tailor them to you. We use information we already hold about you: your name, the products you have bought and how often, your city, province and country, and any preferences you give us. We also estimate your gender (female, male or unknown) from your name, using a prediction tool provided by our email service, Klaviyo. When the estimate is uncertain, we record it as unknown and you receive our general version. We use the estimate only to choose which products, images and offers to feature; we never use it to refuse you an offer or to charge you a different price. An estimate can be wrong: tell us, and we will correct it or stop using it. If you unsubscribe, we stop personalizing your emails right away.

Personalized marketing using your Instagram or Facebook information. If you separately choose personalized marketing, by ticking the optional box for it, we collect relevant information from the Instagram or Facebook accounts you give us: your username, public profile biography, non-sensitive product interests you express in relevant public posts, and your interactions with Loïc Or, such as comments, tags and messages. We may combine this with the preferences you give us and your purchase history to understand your product interests and tailor the skincare content, product recommendations and offers we send you. Personalized messages are sent only through the marketing channels you have agreed to.

We limit this to what is reasonably needed for that purpose, and we review this information ourselves rather than with automated collection tools. We do not treat information as free to use simply because it is visible online. We do not access private content or collect your friends’, followers’ or contacts’ information. We never infer sensitive characteristics, such as health conditions, ethnicity, religious beliefs or sexual orientation, for marketing. This choice does not allow us to upload your information to advertising platforms for audience matching; that would need a separate, clearly explained choice.

You can decline or withdraw this consent at any time by emailing orders@loicor.com, without losing access to our products or to other marketing you have asked for. We will then stop the collection and personalization and delete the profile we built, unless the law requires us to keep part of it.

How do we share your information?

Only with service providers who help us run our business, and only what each one needs:

• Shopify (online store, checkout, customer accounts, order and newsletter emails, and text messages)
• Klaviyo (emails, text messages, personal discount codes for registered purchases, and the gender estimate used to personalize our emails)
• Google (Gmail and Google Sheets, for our internal daily list of new subscribers who gave a social media username, and for our log of blocked signup attempts)
• Payment providers, including Shop Pay, Apple Pay and Google Pay (processing your payment and preventing fraud)
• Shipping carriers, such as Canada Post (delivering your order)
• Advertising and analytics partners, such as Meta and Google (only through cookies you allow)
• Professional advisers, such as our accountant and lawyer, when needed and under a duty of confidentiality

They must keep your information confidential, protect it and use it only to provide their services to us.

Partner discount codes: if you use a code from an influencer, stockist, spa or sales representative, we tell that partner that a sale was made with their code and its value, so that we can pay their commission. We do not give them your name or contact details.

Shopify: our store runs on Shopify. Shopify also uses some information about your visits and purchases, together with information from other stores, for its own purposes such as fraud prevention and its enhanced features, and it is responsible for that use. You can read the Shopify Consumer Privacy Policy and make requests through the Shopify Privacy Portal. If you use Shop Pay, Shopify handles that account under its own terms.

We may also disclose information when the law requires it, to protect our rights, customers or Sites, or as part of a sale or reorganization of our business, in which case the buyer must protect it as this policy describes.

Text messages: we will not share your mobile information or text-message opt-in consent with third parties or affiliates for marketing or promotional purposes. The providers that send our text messages on our behalf (Shopify and Klaviyo) receive your mobile number only to deliver them. All other categories of sharing described above exclude text-message opt-in data and consent; this information will not be shared with any third parties.

What about ads based on your interests?

With your consent, our advertising partners may use cookies to show you Loïc Or ads on other websites and apps based on your visits to our Sites. You can decline these cookies in our cookie banner, change your mind on our Your Privacy Choices page, and adjust the ad settings in your Meta or Google account. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out for that browser.

Which cookies do we use?

• Essential: needed for the cart, checkout, language and security. They are always on.
• Performance and analytics: show us how the Sites are used so we can improve them.
• Marketing: help us and our partners show you relevant ads and measure them.

Some analytics and marketing tools can identify, locate or profile you. They stay off until you accept them, and you can turn them off again at any time through our cookie banner or our Your Privacy Choices page. You can also block or delete cookies in your browser, although some features may then stop working.

What are your rights and choices?

• Unsubscribe: every marketing email has an unsubscribe link; reply STOP to any marketing text message or direct message; or email us to stop one channel or all of them. We act on it right away, and always within 10 business days.
• Personalization: unsubscribe to stop email personalization; email us to correct your gender estimate or have us stop using it, or to withdraw personalized marketing using your Instagram or Facebook information, without affecting other marketing you asked for.
• Access: ask what personal information we hold about you, how we use it and who we have shared it with.
• Correction: ask us to correct information that is wrong or incomplete.
• Deletion: ask us to delete information we no longer need, or anything you gave us optionally, such as your social media usernames or birthday.
• Withdraw consent: at any time, subject to legal or contractual limits. We will tell you what withdrawing means, for example that you will no longer receive the newsletter.
• Quebec residents may also ask for the information they gave us in a structured, commonly used technological format, and ask us to stop disseminating it or to de-index any link to it.

Email orders@loicor.com. Requests are free. We will reply within 30 days and may need to confirm your identity first; someone you authorize may make a request on your behalf. If we cannot fully meet a request, we will explain why. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

How long do we keep your information?

• Orders and transactions: as long as tax law requires, generally six years after the end of the tax year.
• Newsletter and registration details: until you unsubscribe or ask us to delete them. After you unsubscribe, we keep your email address on a do-not-email list, with a record of your consent and when you withdrew it, so that we can respect your choice and show that we did.
• Social media usernames: as described in “Why do we ask for your Instagram or Facebook username?”.
• Blocked signup attempts: 30 days, then deleted automatically.
• Gender estimate: used only while you are subscribed to our emails; we delete it whenever you ask.
• Personalization profile (Instagram or Facebook): until you withdraw that consent or unsubscribe from all marketing, then deleted.
• Messages: up to two years after your question is resolved, unless they relate to an order.
• Business partner records: for the length of the agreement, then as long as tax law requires.

When we no longer need information, we delete it or make it anonymous.

Is your information secure?

We use reputable providers with industry-standard security, encrypted connections (HTTPS) and access limited to the people who need it. No system is perfectly secure. We keep a record of every privacy incident and, if one creates a risk of serious harm, we will notify you and the authorities as the law requires.

Is your information processed only in Canada?

No. Some of our providers, including Shopify, Klaviyo, Google and Meta, store or process information outside Quebec and outside Canada, including in the United States, where it may be accessible to courts and authorities under local law. Before information leaves Quebec, we assess whether it will be adequately protected, and our providers are bound by their agreements with us to protect it.

Do we collect information from children?

Our Sites and products are intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

What about other websites and platforms?

Our Sites link to other websites and to Instagram, Facebook and TikTok. Those companies handle your information under their own privacy policies, and we are not responsible for their practices.

Will this policy change?

We may update it from time to time. The date at the top shows the latest version. We will tell you about important changes and, where the law requires it, ask for your consent again.

How can you contact us?

Email orders@loicor.com or write to L’Or de Loïc Ltd., Suite 6321, 2100 Bloor St. W, Toronto, Ontario M6S 5A5. See also our Contact us page.