EEA, UK & Switzerland Privacy Addendum

Last updated: September 23, 2026

This EEA, UK & Switzerland Privacy Addendum supplements the Lavahut Privacy Policy and applies to individuals located in the European Economic Area (“EEA”), the United Kingdom (“UK”), and Switzerland. Please read this Addendum together with our Privacy Policy. If there is a conflict between this Addendum and our Privacy Policy concerning your rights under applicable data protection law, this Addendum will apply to the extent required by applicable law.

Data Controller

Lavahut, LLC is the controller of the personal information described in our Privacy Policy, except where another party, such as Shopify, acts as an independent controller for particular processing activities as described in our Privacy Policy.

Lavahut, LLC
PO Box 10577
Honolulu, Hawaii 96816
United States
Email: help@lavahut.com
Phone: +1 888-381-8323

Legal Bases for Processing

If you are located in the EEA or UK, we process your personal information only when we have an applicable legal basis for doing so. Depending on the circumstances, we rely on the following legal bases:

  • Performance of a contract. We process information when it is necessary to provide products or services you request, including processing payments, fulfilling and shipping orders, processing returns, maintaining customer accounts, and sending transactional communications about your orders.
  • Legitimate interests. We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights. These interests may include providing customer service, preventing fraud and misuse, securing and improving our website and services, understanding how our business and website are used, maintaining our business operations, and protecting or enforcing our legal rights.
  • Consent. We rely on your consent where required by law, including for certain non-essential cookies and similar technologies, personalized advertising, and certain marketing communications. When processing is based on consent, you may withdraw your consent at any time. You can manage cookie and advertising preferences through the privacy controls available on our website, use the unsubscribe link in marketing emails, or contact us.
  • Legal obligations. We may process information when necessary to comply with applicable laws and legal requirements, including tax, accounting, recordkeeping, regulatory, and valid governmental or legal requests.

Cookies, Analytics and Personalized Advertising

We use cookies and similar technologies as described in our Privacy Policy. In locations where consent is required, non-essential cookies and similar technologies used for analytics, personalization, or advertising will not be used for those purposes unless you provide the required consent.

You may accept, decline, or manage non-essential cookies using the cookie controls available on our website. If you previously provided consent, you may change your preferences or withdraw that consent through those controls.

Shopify and Enhanced Services

Our store is hosted by Shopify. As explained in our Privacy Policy, Shopify processes information when you visit or make purchases from our store. We also use certain Shopify enhanced features that may incorporate information from your interactions with Lavahut, Shopify, and other merchants.

Where required by applicable law, personalized advertising based on these activities is subject to your consent. You can manage your choices through our website privacy controls. You may also learn more about Shopify’s processing and exercise rights relating to information processed by Shopify through the Shopify Privacy Portal at https://privacy.shopify.com/.

Switzerland

If you are located in Switzerland, we process personal information in accordance with the Swiss Federal Act on Data Protection (“FADP”), including the principles of lawfulness, good faith, transparency, proportionality, purpose limitation, and data security.

Where processing that affects your personality rights requires justification under Swiss law, the applicable justification may include your consent, an overriding private or public interest, or a basis provided by law.

Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including rights to request access to your information, correction of inaccurate information, deletion, restriction of certain processing, data portability, and objection to certain processing.

Where we rely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect processing that lawfully occurred before your withdrawal.

You also have the right to object to the use of your personal information for direct marketing.

To exercise your rights, please contact us using the information above. We may need to verify your identity before completing certain requests.

Complaints

If you have a concern about how we process your personal information, we encourage you to contact us first so that we can address your concern.

Individuals in the EEA have the right to lodge a complaint with the data protection authority in the country where they live, work, or where they believe a violation occurred. Individuals in the UK have the right to lodge a complaint with the UK Information Commissioner's Office. Individuals in Switzerland may contact the Swiss Federal Data Protection and Information Commissioner.

International Transfers

Lavahut is located in the United States, and our service providers may process information in the United States and other countries. As described in our Privacy Policy, where applicable we use recognized safeguards for transfers of personal information, including approved standard contractual clauses or other legally recognized transfer mechanisms.

Relationship to Our Privacy Policy

This Addendum supplements our Privacy Policy. For additional information about the categories of personal information we collect, how we use and disclose information, security, retention, international transfers, Shopify, and how to contact us, please review our Privacy Policy.