Privacy Policy
Effective Oct. 22, 2026
JOSMARY ELIZABETH BOUCHARD FUNY LLC, the company behind Lamiza Store, sells no personal information and keeps order records for 6 years. This page explains what it collects, why and for how long.
Purely for orders, delivery and support
Personal information serves seven jobs: taking payment, passing the order to the fulfillment partner, getting the dress delivered, answering messages, handling returns and refunds, stopping fraud and meeting tax and accounting duties. The phone number goes along with the address only so the carrier can reach the customer on delivery day; no sales call or text ever uses it.
Directly provided details at checkout
Placing an order means typing in contact and address details: the customer’s name, email, phone, delivery address and billing address, plus the dresses and sizes picked. A message to customer service adds whatever it says, plus any photos attached, such as a close-up of a torn seam. Card numbers go into the payment gateway’s form and on to Stripe, and PayPal keeps PayPal logins, so the store never holds a full card number.
Automatically logged data while browsing
Each visit leaves server and Cloudflare logs (records kept by the web host and by the network that protects the site) with the IP address (the number that identifies a connection), the browser, the device, the pages opened and the time. Those logs keep the site up and let abusive traffic be blocked. Cloudflare Web Analytics, a counting script, also tallies page views and loading times without setting any cookie.
Indirectly received updates from partners
Payment results come back from PayPal, Stripe and the gateway: approved, declined or reversed. Carriers send their scans, and the fulfillment partner confirms the hand-over together with the tracking ID. All of it is attached to the order record.
Equally covered visits and orders
This policy applies to lamizastore.com, to every order placed there and to emails with customer service. When it changes, the date at the top changes too, and a material change is announced on this page before it applies to data already collected.
Never sold customer information
Customer information, contact details included, has not been sold, rented or traded, and the company has no plan to sell it. No list of buyers therefore exists, as Rhode Island law asks online stores to disclose. Nothing is shared for cross-context behavioral advertising (ads aimed at a person based on activity across other sites).
Explicitly excluded AI training
Order records, messages and photos are kept out of any effort to teach large language models or other AI tools, and none of it goes to anyone who would use it that way.
Likewise, nothing uploaded to ad platforms
Customer emails and phone numbers are never uploaded to Google, Meta or any other ad network, whether scrambled by hashing (a one-way code) or not, so no ad measurement, enhanced conversion or audience matching is built on them. The site runs no advertising pixel, and if that ever changes, this page and the Do Not Sell or Share My Personal Information page change first.
Only the needed fields for each recipient
Each recipient gets the fields its task requires and nothing more.
| Recipient | Fields received | Task |
|---|---|---|
| Partner in China that packs and ships | customer name, delivery address, phone, dresses and sizes | packing and dispatch |
| Web host and Cloudflare | IP address, browser, pages opened | hosting, security and page-view counts |
| International and US carriers | name, delivery address, phone, shipment details | transport, customs clearance and delivery scans |
| Payment gateway service, Stripe and PayPal | card or PayPal payment data, billing address, email, order amount | charging the payment and screening for fraud |
| Email delivery service | email address and message text | order confirmations and replies |
Contractually bound service providers
The recipients above act as service providers (companies that handle data on the store’s behalf and may not use it for their own ends). The categories they receive are identifiers, the customer-record category defined in California Civil Code section 1798.80(e), commercial information about the order and internet activity limited to the site.
Internationally handled order data
Because dresses ship from China, the name, address, phone number and order details are processed by the partner in China, while the store’s own systems sit in the United States. Only the shipping fields leave the country; payment details stay with the payment services.
Strictly necessary cookies
The site sets cookies that keep a cart and a checkout working, plus a Cloudflare security cookie, and none for advertising or analytics. That is why no cookie banner appears. A GPC signal (Global Privacy Control, an opt-out setting sent by some browsers) is honored as an opt-out request.
Carefully guarded records
The order database can only be reached over HTTPS and through password-protected admin accounts held by the people who run the store, and the partner gets the shipping fields alone. No system is perfectly secure, so the company limits what it stores in the first place.
Temporarily kept data, with set periods
| Data | Kept for | Reason |
|---|---|---|
| Orders and payment records | 6 years after the order | tax filings and bookkeeping |
| Messages and photos sent to customer service | 3 years from the last message | resolving returns and disputes |
| Server and security logs | 90 days | site security |
Quickly announced breaches
If a breach ever exposes personal information, the people affected hear about it without unreasonable delay and within 30 days, as Florida’s Information Protection Act (Fla. Stat. § 501.171) requires.
Freely exercised privacy rights
The customer may request access to personal information, a correction, a deletion, a portable copy or an opt-out from any sale or sharing. Requests go to contact@lamizastore.com with the subject “Privacy request”. Receipt is confirmed within 5 business days and the answer follows within 45 days, extended once to 90 when needed, with a note explaining why. An authorized agent may file for someone else with written permission.
Formally reviewed appeals
A refused request can be appealed within 60 days by replying to the decision email, and the appeal gets a written answer. Some data must stay on file despite a deletion request, mainly order records that tax law requires the company to keep.
Specifically for California residents
The CCPA (California Consumer Privacy Act, as amended by the CPRA) gives California residents every right on this page and one more: a say over how sensitive information is used. The company collects no sensitive information beyond what a payment requires, and it does not sell or share personal information, as the Do Not Sell or Share My Personal Information page confirms.
Similarly honored rights in other states
Nineteen states besides California now have privacy laws of their own: Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. The company gives the same rights, on the same timetable, to customers anywhere in the United States.
Exclusively adult customers
The shop is meant for adults 18 and over. Nobody under 13 should give it information, and a record that turns out to belong to a child is erased once discovered.
Separately governed outside links
Links out to PayPal, carriers and similar sites open services governed by their own privacy terms, and this page does not reach them.
Readily answered privacy questions
Privacy questions reach customer service at contact@lamizastore.com or +1 (786) 971-0149 from 9 a.m. to 5 p.m. Eastern on weekdays, with a reply within 1 business day. Written requests can also go to JOSMARY ELIZABETH BOUCHARD FUNY LLC at its business address, 10061 NW 87th Ter, Doral, FL 33178, United States.