Privacy Policy
PRIVATE ENTERPRISE "LORANGE" · Effective date: 15 September 2026 · Version: 1.0
2.1 Who we are
The controller of your personal data is Private Enterprise "LORANGE", 31 M. Hordiychuka Street, Kamianets-Podilskyi, Khmelnytskyi region, 32300, Ukraine, USREOU code 33757617.
For any question about this policy or about your data, write to info@lorangegroup.com or call +380 67 933 3483.
We have not appointed a Data Protection Officer. Our processing does not fall into the categories for which the GDPR requires one — we do not carry out large-scale monitoring of individuals and we do not process special categories of data.
2.2 Who this policy applies to
This policy covers the personal data of:
- representatives of bridal boutiques and distributors who apply for or hold a partner account;
- people who submit an enquiry or a request through the website forms;
- recipients named for delivery of an order.
This is a B2B platform. We do not knowingly collect data from consumers or from anyone under 18.
2.3 What we collect
Supplied by you in the forms
| Data | Where it comes from | Why we need it |
|---|---|---|
| First and last name | Registration, enquiry, request | Identity of the business owner, buyer or authorised decision-maker |
| Boutique / company name | Registration, enquiry, request | Commercial and legal name of the salon |
| Corporate email address | Registration, enquiry, request | Automated invoices, security verification, password resets, account updates |
| Country / location | Registration, enquiry, request | Territorial exclusivity check, shipping cost and delivery time |
| Messenger handle or phone number (Telegram, WhatsApp, Viber, Instagram) | Registration, enquiry, request | Direct contact route for the account manager, real-time communication |
| Notes and custom comments | Enquiry, request | Operational requests, deadlines, design enquiries |
| Desired timeframes | Request | Target arrival dates for seasonal stock or a specific wedding |
| VAT number / Tax ID | Registration | Legal verification that the applicant is a registered business, before access to wholesale prices is granted |
| Delivery address, plus the name and phone number of the recipient at that address | Partner account | Delivery of orders by courier |
Created by the system
- Password (stored as a cryptographic hash — we never see or store your password itself)
- Session and sign-in records, used for security and to keep you signed in
- Order history and billing records
- Your cookie choice
About measurements of third parties
The request and enquiry forms allow you to describe an individual custom-measurement order. If you send us the measurements or any other details of a bride or any other individual, you are responsible for having a lawful basis to share that information with us. We process it solely to produce the gown you ordered.
2.4 Why we process it, and on what legal basis
- To review your application and operate your partner account — performance of a contract and steps taken at your request before entering into a contract.
- To verify that you are a registered business (VAT / Tax ID checks, duplicate account detection) — our legitimate interest in preventing fraud, protecting confidential pricing and enforcing territorial exclusivity.
- To answer your enquiries and prepare quotations — steps taken at your request before entering into a contract.
- To produce and deliver orders — performance of a contract.
- To communicate through the messenger you chose — your consent, given by selecting that channel in the form.
- To keep the website secure and to detect abuse — our legitimate interest.
- To keep accounting records — compliance with a legal obligation.
- Analytics cookies — your consent, given through the cookie banner.
You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
2.5 Who else sees your data
We do not sell, rent or trade personal data. It is shared only with the following service providers, and only to the extent needed:
| Recipient | What they receive | Where |
|---|---|---|
| ukraine.com.ua — VPS hosting | All data stored by the website and the internal CRM | Ukraine |
| Zoho (SMTP) — transactional email | Name and email address, contents of service emails such as registration and password reset | EU |
| Google Analytics — website statistics | Cookie identifiers and usage data, only if you accept analytics cookies | Global |
| Meta (WhatsApp, Instagram) | Your messenger handle and the content of the conversation, if your account manager replies to you through one of these channels | Global |
| Couriers: DHL, EMS, Nova Poshta Global, trusted private couriers | Recipient name, delivery address, phone number | Depends on the route |
Data may also be disclosed where we are legally obliged to do so.
Your data is not shared with other partners, retail customers or competing salons. VAT numbers and other corporate identifiers are used strictly internally.
2.6 Where your data is stored, and international transfers
The website, the database and the internal CRM are hosted on a virtual private server located in Ukraine, provided by ukraine.com.ua.
Ukraine is not a member of the European Union or the European Economic Area, and the European Commission has not issued an adequacy decision in respect of Ukraine. This means Ukrainian law is not formally recognised as providing a level of data protection equivalent to the GDPR. We apply the security measures described below to protect your data regardless of where it is stored.
Some of our service providers (Zoho, Google, Meta) operate infrastructure outside Ukraine, so data shared with them leaves the country.
2.7 How long we keep it
| Data | Retention |
|---|---|
| Active partner account | For as long as the account is active |
| Account locked for inactivity | Retained pending re-verification; historical order data, measurements and billing information are preserved and re-linked if the account is unlocked |
| Application with no response within 14 days | Profile archived and locked; a new application is required to restart |
| Account terminated after the re-verification deadline passes | Non-essential data such as old notes and desired timeframes is archived; core order history is retained for accounting purposes |
| Enquiries and requests that did not lead to an account | 24 months |
| Accounting and billing records | 24 months |
| Sign-in and security logs | 12 months |
2.8 How we protect it
- The server is a dedicated virtual private server, not shared hosting.
- Access to the internal CRM is limited to employees who need it for their work.
- Passwords are stored as cryptographic hashes.
- Connections to the website are encrypted (HTTPS).
- Accounts inactive for three months are locked automatically and the password is voided.
2.9 Your rights
You have the right to:
- ask what data we hold about you and receive a copy;
- have inaccurate data corrected;
- ask for your data to be deleted, where we are not required to keep it;
- ask us to restrict processing, or object to it;
- receive your data in a portable format;
- withdraw any consent you have given;
- lodge a complaint with a supervisory authority. In Ukraine this is the Ukrainian Parliament Commissioner for Human Rights (the Ombudsman). If you are in the EU, you may also complain to the supervisory authority of your country.
Write to info@lorangegroup.com to exercise any of these. We respond within 30 days.
Note that deleting the account of a partner with an order history does not delete records we are legally required to keep for accounting.
2.10 Cookies
The website uses cookies. Analytics cookies are loaded only after you accept them. See the Cookies Policy for the full list and for how to change your choice.
2.11 Changes to this policy
We may update this policy. The current version and effective date are published on this page. Where changes materially affect partner accounts, we notify the email address registered in the account.