Privacy policy

Last updated: 28 May 2026

This Privacy Policy explains how Lakato Commerce collects, uses, stores and shares personal information when you visit, use or make a purchase through lakatocommerce.com, contact us, create an account, subscribe to marketing communications or otherwise interact with our online store.

The Lakato Commerce online store is operated by LAKATO COMMERCE LTD, registered in England and Wales under company number 17248065.

For the purposes of applicable data protection law, LAKATO COMMERCE LTD is the controller of the personal information described in this Privacy Policy, except where another organisation acts as an independent controller.

1. Contact Details

Store name: Lakato Commerce
Legal entity: LAKATO COMMERCE LTD
Company number: 17248065
Registered office: 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ
Email: sales@lakatocommerce.com
Website: https://lakatocommerce.com

Questions, privacy requests and complaints regarding this Privacy Policy should be sent to sales@lakatocommerce.com.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through Lakato Commerce in connection with:

  • Visits to our website;
  • Purchases of hats, caps and other headwear products;
  • Customer accounts;
  • Checkout and payment processing;
  • Delivery, fulfilment and returns;
  • Customer service communications;
  • Marketing subscriptions;
  • Product reviews and other submissions;
  • Cookies and similar technologies;
  • Fraud prevention and website security;
  • Other interactions with Lakato Commerce.

This Privacy Policy does not apply to third-party websites, platforms or services that have their own privacy policies.

3. Personal Information We Collect

The personal information we collect depends on how you interact with Lakato Commerce.

We may collect the following categories of personal information.

3.1 Identity Information

  • Full name;
  • Title or form of address;
  • Account username or identifier;
  • Information required to verify your identity where necessary.

3.2 Contact Information

  • Email address;
  • Telephone number;
  • Billing address;
  • Delivery address;
  • Other contact details you provide to us.

3.3 Order and Transaction Information

  • Products viewed, selected or purchased;
  • Product style, colour, size and quantity;
  • Order number;
  • Order date and status;
  • Purchase price;
  • Discounts and promotional codes;
  • Delivery charges;
  • Tax information;
  • Returns, cancellations, exchanges and refunds;
  • Customer service history relating to an order;
  • Payment status and transaction reference information.

3.4 Payment Information

Payments are processed through Shopify and applicable third-party payment service providers.

Depending on the payment method selected, payment information may include:

  • Payment card type;
  • Last digits of a payment card;
  • Card expiry information;
  • Billing address;
  • Payment authorisation status;
  • Payment transaction identifier;
  • Digital wallet or payment account information.

Lakato Commerce does not normally receive or store complete payment card numbers or card security codes. These details are generally collected and processed securely by the applicable payment provider.

3.5 Delivery and Fulfilment Information

  • Recipient name;
  • Delivery address;
  • Telephone number;
  • Delivery instructions;
  • Courier and tracking information;
  • Delivery status;
  • Proof of delivery;
  • Information regarding lost, delayed, damaged or undeliverable parcels.

3.6 Account Information

If customer account functionality is available and you create or use an account, we may collect:

  • Your name and contact details;
  • Your login details;
  • Your account preferences;
  • Your saved addresses;
  • Your order history;
  • Your communication preferences.

Passwords are processed through the relevant platform systems. We do not normally have access to passwords in readable form.

3.7 Communications

When you contact us, we may collect:

  • Your name;
  • Your email address;
  • Your telephone number;
  • Your order number;
  • The contents of your message;
  • Attachments, photographs or documents you provide;
  • Records of our response;
  • Information relating to complaints, returns or product issues.

3.8 Marketing Information

Where you subscribe to marketing or otherwise provide permission, we may collect:

  • Your email address;
  • Your telephone number, where applicable;
  • Your marketing preferences;
  • Your consent records;
  • Information about whether you opened or interacted with a marketing communication;
  • Information about products or categories that may interest you.

3.9 Website and Device Information

When you visit our website, we or our service providers may automatically collect:

  • Internet Protocol address;
  • Browser type and version;
  • Device type;
  • Operating system;
  • Device identifiers;
  • Language settings;
  • Approximate location derived from technical information;
  • Time zone;
  • Pages viewed;
  • Products viewed;
  • Links clicked;
  • Referring website or source;
  • Date and time of visits;
  • Website navigation and interaction information;
  • Checkout activity;
  • Cookie and consent preferences;
  • Security and error log information.

3.10 Reviews and User Submissions

If review, feedback or other submission functionality is available, we may collect:

  • Your name or chosen display name;
  • Your rating;
  • Your written review or feedback;
  • Photographs or other content you submit;
  • Information about the product purchased;
  • The date of your submission.

3.11 Fraud Prevention Information

We and our payment, ecommerce and security providers may process information used to identify suspicious, fraudulent or unlawful activity, including:

  • Internet Protocol address;
  • Device and browser information;
  • Payment verification results;
  • Billing and delivery address comparisons;
  • Order patterns;
  • Failed payment attempts;
  • Fraud risk indicators;
  • Information regarding disputed transactions or chargebacks.

4. How We Collect Personal Information

We may collect personal information from the following sources.

4.1 Directly From You

We collect information directly from you when you:

  • Place an order;
  • Enter information at checkout;
  • Create or use a customer account;
  • Contact customer service;
  • Request a return, exchange or refund;
  • Report a damaged, faulty or incorrect product;
  • Subscribe to marketing communications;
  • Submit a review or feedback;
  • Participate in a promotion;
  • Otherwise provide information to us.

4.2 Automatically Through the Website

We may collect technical, browsing and interaction information automatically through cookies, pixels, log files and similar technologies.

4.3 From Service Providers

We may receive information from organisations that help us operate the store, including:

  • Shopify;
  • Payment providers;
  • Delivery companies;
  • Fulfilment providers;
  • Fraud prevention providers;
  • Marketing and analytics providers;
  • Customer service providers;
  • Website and technology providers.

4.4 From Third Parties

Where permitted by law, we may receive information from advertising platforms, social media services, business partners, publicly available sources and other third parties.

5. How We Use Personal Information

We may use personal information for the purposes described below.

5.1 Processing and Fulfilling Orders

We use identity, contact, order, transaction and delivery information to:

  • Receive and process orders;
  • Confirm purchases;
  • Take or arrange payment;
  • Prepare products for dispatch;
  • Deliver products;
  • Provide tracking information;
  • Contact you about an order;
  • Manage cancellations, returns, exchanges and refunds;
  • Resolve delivery or fulfilment issues.

The lawful basis for this processing is normally that it is necessary to enter into or perform a contract with you.

5.2 Providing Customer Service

We use identity, contact, order and communication information to:

  • Respond to questions;
  • Provide product and order support;
  • Investigate complaints;
  • Resolve problems;
  • Provide return instructions;
  • Assess reports of faulty, damaged or incorrect products;
  • Maintain records of customer communications.

The lawful basis is normally performance of our contract, compliance with legal obligations or our legitimate interest in providing effective customer service and maintaining accurate records.

5.3 Managing Customer Accounts

Where account functionality is available, we use account information to:

  • Create and maintain your account;
  • Authenticate account access;
  • Display order history;
  • Save account preferences;
  • Help protect the account from unauthorised access.

The lawful basis is normally performance of our contract or our legitimate interest in providing account functionality and protecting customer accounts.

5.4 Processing Payments

We use transaction and payment-related information to:

  • Authorise and process payments;
  • Confirm whether payment was successful;
  • Issue refunds;
  • Maintain accounting records;
  • Prevent fraudulent transactions;
  • Handle payment disputes and chargebacks.

The lawful basis is normally performance of our contract, compliance with legal obligations and our legitimate interest in preventing fraud and protecting our business.

5.5 Fraud Prevention and Security

We may use personal information to:

  • Detect suspicious activity;
  • Prevent fraud and payment abuse;
  • Protect customer accounts;
  • Protect our website and systems;
  • Investigate security incidents;
  • Enforce our terms and policies;
  • Respond to chargebacks and payment disputes;
  • Protect the rights, property and safety of customers, Lakato Commerce and others.

The lawful basis is normally our legitimate interest in protecting customers, preventing fraud, securing our systems and protecting our business. In some cases, processing may also be necessary to comply with a legal obligation.

5.6 Marketing Communications

Where permitted by law, we may use your contact information and marketing preferences to send information about:

  • New headwear products;
  • Product collections;
  • Special offers;
  • Discounts;
  • Seasonal promotions;
  • Store updates;
  • Other Lakato Commerce news.

Where consent is required, the lawful basis is your consent.

In limited circumstances, we may rely on our legitimate interests or an applicable existing-customer marketing rule, where legally permitted and where you have been given an opportunity to opt out.

You may unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us at sales@lakatocommerce.com.

Unsubscribing from marketing does not prevent us from sending transactional or service messages about an order, payment, delivery, return, refund, account or legal matter.

5.7 Personalising and Improving the Store

We may use website, device, order and interaction information to:

  • Understand how visitors use the website;
  • Improve website navigation;
  • Improve product presentation;
  • Identify popular products and collections;
  • Improve checkout and customer service;
  • Diagnose technical problems;
  • Measure website performance;
  • Develop and improve our products and services.

The lawful basis is normally our legitimate interest in operating, analysing and improving our online store. Where cookies or similar technologies require consent, we rely on your consent.

5.8 Advertising and Measurement

Where advertising or analytics technologies are enabled and permitted by your privacy choices, we and our service providers may use information to:

  • Measure advertising performance;
  • Understand how visitors found our website;
  • Measure visits and purchases;
  • Display advertising that may be more relevant;
  • Limit repeated advertisements;
  • Create or use advertising audiences;
  • Improve marketing campaigns.

Where legally required, we rely on your consent for non-essential advertising and analytics cookies.

5.9 Legal, Tax and Accounting Requirements

We may use and retain personal information to:

  • Maintain transaction and accounting records;
  • Comply with tax requirements;
  • Respond to lawful requests from authorities;
  • Establish, exercise or defend legal claims;
  • Comply with court orders and legal processes;
  • Meet other applicable legal obligations.

The lawful basis is normally compliance with a legal obligation or our legitimate interest in establishing, exercising and defending legal rights.

6. Lawful Bases for Processing

Depending on the purpose and circumstances, we rely on one or more of the following lawful bases:

  • Contract: processing is necessary to enter into or perform a contract with you, including processing and delivering an order;
  • Legal obligation: processing is necessary to comply with applicable legal, tax, accounting or regulatory requirements;
  • Legitimate interests: processing is necessary for our legitimate business interests or those of a third party, provided that your rights and interests do not override those interests;
  • Consent: you have given clear permission for a particular type of processing, such as certain marketing or non-essential cookies;
  • Legal claims: processing is necessary to establish, exercise or defend legal claims where applicable.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Our Legitimate Interests

Where we rely on legitimate interests, those interests may include:

  • Operating and improving Lakato Commerce;
  • Providing customer service;
  • Understanding customer needs;
  • Protecting our website and systems;
  • Preventing fraud and abuse;
  • Maintaining accurate records;
  • Resolving disputes;
  • Protecting our legal rights;
  • Measuring and improving business performance;
  • Marketing products where permitted by law.

We consider the nature of the information, the reasonable expectations of customers, the purpose of the processing and the potential impact on individual rights before relying on legitimate interests.

8. How We Share Personal Information

We may share personal information with trusted service providers and other recipients where necessary for the purposes described in this Privacy Policy.

We do not provide personal information to third parties for their own unrelated purposes unless you have authorised us to do so or the disclosure is otherwise permitted or required by law.

8.1 Shopify

Our online store is hosted and supported by Shopify.

Shopify may process personal information to provide ecommerce infrastructure, checkout services, hosting, security, fraud prevention, customer account functions and other platform services.

Shopify may process information as our service provider and may also process certain information for its own purposes as described in Shopify's own privacy documentation.

8.2 Payment Providers

We may share information with banks, card networks, payment gateways, digital wallet providers and other payment service providers to:

  • Process and authorise payments;
  • Verify payment details;
  • Issue refunds;
  • Prevent fraud;
  • Resolve payment disputes;
  • Manage chargebacks.

Payment providers may process your information under their own privacy policies.

8.3 Delivery and Fulfilment Providers

We may share your name, delivery address, telephone number, email address, order information and delivery instructions with warehouses, fulfilment partners, postal operators and couriers where necessary to prepare and deliver your order.

8.4 Technology and Hosting Providers

We may use service providers for:

  • Website hosting and maintenance;
  • Cloud storage;
  • Email delivery;
  • Customer service tools;
  • Order management;
  • Website security;
  • Error monitoring;
  • Technical support.

8.5 Analytics and Advertising Providers

Where applicable and permitted by your privacy choices, we may share or make information available to providers that assist with:

  • Website analytics;
  • Advertising measurement;
  • Audience creation;
  • Marketing campaign management;
  • Conversion tracking;
  • Social media advertising.

8.6 Professional Advisers

We may share information with professional advisers, including accountants, auditors, legal advisers, insurers, consultants and tax advisers, where reasonably necessary.

8.7 Authorities and Legal Recipients

We may disclose personal information to courts, law enforcement bodies, tax authorities, regulators and other public authorities where:

  • Required by law;
  • Necessary to comply with a lawful request;
  • Necessary to protect legal rights;
  • Necessary to prevent or investigate fraud or unlawful activity;
  • Necessary to protect the safety of customers or others.

8.8 Business Transactions

If LAKATO COMMERCE LTD is involved in a merger, acquisition, reorganisation, financing, sale of assets, insolvency or transfer of all or part of its business, personal information may be disclosed to relevant parties and professional advisers as part of that transaction.

9. Cookies and Similar Technologies

Lakato Commerce and its service providers may use cookies, pixels, local storage, tags and similar technologies.

Cookies are small data files placed on or accessed through your device when you visit a website.

9.1 Essential Cookies

Essential cookies may be used to:

  • Load and operate the website;
  • Maintain the shopping cart;
  • Enable checkout;
  • Remember privacy preferences;
  • Provide account security;
  • Prevent fraud;
  • Maintain website stability.

These cookies are necessary for the website to function and may not require consent where permitted by law.

9.2 Functional Cookies

Functional cookies may remember choices such as language, location, account settings or other website preferences.

9.3 Analytics Cookies

Analytics cookies may help us understand:

  • How many people visit the website;
  • Which pages and products are viewed;
  • How visitors move through the website;
  • Whether technical errors occur;
  • How the website can be improved.

9.4 Advertising Cookies

Advertising cookies and pixels may be used to:

  • Measure marketing campaigns;
  • Understand whether an advertisement resulted in a visit or purchase;
  • Display advertisements that may be more relevant;
  • Limit how often advertisements are displayed;
  • Create advertising audiences.

9.5 Managing Cookies

Where a cookie consent tool is available, you can use it to accept, reject or manage non-essential cookies.

You can also control cookies using your browser settings. Blocking certain cookies may affect website functionality, including the shopping cart, account features and checkout.

Your cookie preferences may be stored using an essential cookie so that the website can remember your selection.

10. Marketing Preferences

You can stop receiving marketing emails at any time by:

We may retain limited information about your opt-out request to ensure that we respect your preference.

Even if you opt out of marketing, we may continue to send necessary service communications regarding:

  • Your order;
  • Payment;
  • Delivery;
  • Return or refund;
  • Customer account;
  • Security issue;
  • Changes that materially affect your purchase or legal rights.

11. Product Reviews and Public Content

If you submit a product review, photograph, comment or other content for publication, some information may become publicly visible.

Depending on the functionality used, public information may include:

  • Your name or chosen display name;
  • Your rating;
  • Your review;
  • Photographs or other content you submitted;
  • The date of the review.

Do not include sensitive, confidential or unnecessary personal information in a public review.

You may contact us if you wish to request removal or correction of content you submitted. We will consider the request in accordance with applicable law and our legitimate interests.

12. International Transfers of Personal Information

Some of our service providers may process personal information outside England.

This may occur because Shopify, payment providers, cloud service providers, delivery providers, analytics services or other technology providers operate internationally.

Where personal information is transferred to another country, we take reasonable steps to ensure that appropriate protections are used as required by applicable data protection law.

These protections may include:

  • A recognised adequacy decision;
  • Approved contractual safeguards;
  • A recognised data transfer agreement or addendum;
  • Other lawful transfer mechanisms.

You may contact us for further information about the safeguards relevant to your personal information.

13. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, tax, fraud prevention, customer service and dispute-resolution purposes.

Retention periods may vary depending on the type of information and the reason it is processed.

We may apply the following general criteria:

  • Order and transaction records may be retained for the period required by tax, accounting and legal obligations;
  • Customer service communications may be retained while an issue is active and for a reasonable period afterwards;
  • Account information may be retained while the account remains active and for a reasonable period after closure;
  • Marketing information may be retained until you unsubscribe, withdraw consent or the information is no longer required;
  • Cookie and consent records may be retained for a period necessary to demonstrate and respect your privacy choices;
  • Fraud prevention records may be retained for as long as reasonably necessary to protect our business and customers;
  • Legal dispute information may be retained until the dispute and any applicable limitation period have ended.

When personal information is no longer required, we may delete it, anonymise it or securely restrict its use, unless continued retention is required or permitted by law.

14. Data Security

We use reasonable administrative, technical and organisational measures designed to protect personal information against:

  • Unauthorised access;
  • Unauthorised disclosure;
  • Loss;
  • Misuse;
  • Alteration;
  • Destruction;
  • Other unlawful processing.

These measures may include:

  • Secure ecommerce and payment systems;
  • Encrypted website connections;
  • Access controls;
  • Account authentication;
  • Restricted staff and service-provider access;
  • Security monitoring;
  • Fraud detection tools;
  • Data minimisation practices.

No website, internet transmission or storage system can be guaranteed to be completely secure. Customers should protect their login details, use strong passwords and avoid sharing account credentials.

If you believe your account or personal information may have been compromised, contact us promptly at sales@lakatocommerce.com.

15. Your Data Protection Rights

Subject to applicable law and certain exceptions, you may have the following rights regarding your personal information.

15.1 Right to Be Informed

You have the right to receive clear information about how your personal information is collected and used.

15.2 Right of Access

You may request confirmation of whether we process your personal information and request a copy of that information.

15.3 Right to Correction

You may request correction of personal information that is inaccurate or completion of information that is incomplete.

15.4 Right to Erasure

You may request deletion of your personal information in certain circumstances.

This right is not absolute. We may need to retain information where required for tax, accounting, fraud prevention, legal claims or other lawful purposes.

15.5 Right to Restrict Processing

You may request that we restrict the processing of your personal information in certain circumstances.

15.6 Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You may object to direct marketing at any time.

15.7 Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format or request that it be transferred to another organisation where technically feasible.

15.8 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

15.9 Rights Relating to Automated Decisions

You may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

Lakato Commerce does not intend to make solely automated decisions producing legal or similarly significant effects without appropriate safeguards.

Payment and fraud prevention providers may use automated systems to assess transactions. Where applicable, questions regarding those systems may also need to be directed to the relevant provider.

16. How to Exercise Your Rights

To exercise a privacy right, email sales@lakatocommerce.com.

Please include:

  • Your full name;
  • The email address associated with your order or account;
  • Your order number, where relevant;
  • A clear description of your request;
  • Any information reasonably needed to locate the relevant records.

We may need to request additional information to verify your identity before completing a request. This is intended to protect personal information from unauthorised access or disclosure.

We will respond within the period required by applicable law. In some circumstances, the response period may be extended where a request is particularly complex or multiple requests have been made. Where applicable, we will inform you of the extension and the reason.

Privacy requests are normally handled without charge. A reasonable fee may be charged, or a request may be refused, where legally permitted and where the request is manifestly unfounded or excessive.

17. Children

Lakato Commerce is a general online headwear store and is not intended to collect personal information directly from children who are not legally able to enter into an online purchase contract.

Customers placing orders must have the legal capacity to make the purchase or must act with the involvement and permission of a parent or legal guardian where required.

We do not knowingly collect personal information directly from a child in circumstances where parental permission is legally required.

If you believe that a child has provided personal information to us improperly, contact sales@lakatocommerce.com. We will review the matter and take appropriate action.

18. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, payment services or other external services.

Lakato Commerce does not control the privacy, security or content practices of independent third parties.

When you follow an external link or use a third-party service, that organisation's own privacy policy and terms may apply. You should review those documents before providing personal information.

19. Social Media

If you interact with Lakato Commerce through a social media platform, the platform may process information about you under its own privacy policy.

We may receive information that you make available through the platform, including:

  • Your public profile name;
  • Your username;
  • Your messages;
  • Your comments;
  • Your reactions or interactions;
  • Other information you choose to share.

Do not send payment card details, passwords or other highly confidential information through public comments or social media messages.

20. Sale or Sharing of Personal Information

Lakato Commerce does not sell personal information for monetary payment in the ordinary meaning of the word "sell".

However, some privacy laws may define "sale", "sharing" or targeted advertising broadly enough to include certain uses of advertising cookies, pixels or similar technologies.

Where required, we provide privacy controls or consent options that allow eligible users to manage these technologies.

21. Do Not Track Signals

Some browsers offer a "Do Not Track" setting.

Because there is no universally accepted technical standard for responding to all such signals, our website may not respond to every browser-based Do Not Track signal.

Where legally required and technically supported, we may recognise applicable consent choices or recognised privacy preference signals.

22. Changes to Your Information

You are responsible for ensuring that the contact and delivery information you provide is accurate and current.

You may update certain account information through your customer account where this functionality is available.

For order-related changes, contact us promptly. We cannot guarantee that a delivery address can be changed after an order has entered processing or dispatch.

23. Privacy Complaints

If you have a concern about how Lakato Commerce has handled your personal information, contact us first so that we can investigate and attempt to resolve the matter.

Contact: sales@lakatocommerce.com.

You may also have the right to complain to the Information Commissioner's Office or another competent data protection authority.

We would appreciate the opportunity to address your concern directly before you contact an authority, although you are not required to contact us first.

24. Changes to This Privacy Policy

Lakato Commerce may update this Privacy Policy from time to time to reflect changes to:

  • Our website;
  • Our products and services;
  • Shopify functionality;
  • Payment and delivery arrangements;
  • Service providers;
  • Cookies and analytics technologies;
  • Business operations;
  • Applicable legal requirements.

The updated version will be published on this page with a revised "Last updated" date.

Where required by law, we will provide additional notice or request consent before making a material change to how personal information is processed.

25. Contact Us

For questions, requests or complaints regarding this Privacy Policy or the processing of personal information, please contact:

Lakato Commerce
Operated by LAKATO COMMERCE LTD
Company number: 17248065
Registered office: 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ
Email: sales@lakatocommerce.com
Website: https://lakatocommerce.com