Privacy policy

Who is responsible

LOMÁS+ is responsible for the data you give us on this site. You can reach us on WhatsApp.

What data we collect and why

We only ask for what each thing needs:

• When you buy: name, email, phone, delivery address and, for the invoice, your ID, RUC or passport. We use them to prepare and deliver your order, issue the invoice and contact you about your purchase (for example, the confirmation and the tracking number).
• If your business writes to us through the wholesale form: the business name, its RUC, city, email, phone and message. We use them only to reply to you.
• If you subscribe to our news: your email and the language you subscribed in, to send you a newsletter now and then with new stories about the characters. Every newsletter has an «Unsubscribe» link: tap it and confirm to leave the list whenever you want.
• The stamp passport and the cart are stored only in your browser: they never reach us.
• We count visits anonymously and without tracking cookies: we don’t know who you are from visiting the site.

Who we share it with

We don’t sell your data. We only share what is needed with the services that run the store:

• the site hosting and the database where orders are stored;
• the service that sends the automatic emails about your order, our newsletters and the internal notices we receive when you place an order, subscribe or write to us as a business;
• the courier that delivers your order (name, address and phone).

Your payment

You pay by bank transfer or with Deuna from your own bank: you never give us your card details or your account passwords. From the receipt you send us on WhatsApp we only use what we need to verify the payment.

If you create an account

The account is optional: you can shop without one. If you create it, we keep your first name, your email and an encrypted fingerprint of your password (never the password itself), plus whatever you choose to add: last name, phone, language, country and city, your delivery addresses and your invoice details. We also record when you last signed in and, for security, failed sign-in attempts. We use this to show your orders in one place and fill in the checkout for you.

Your orders show up in the account only after you confirm your email with the link we send you: that way nobody can see someone else’s orders by creating an account with their email.

News and promotions: we only send them if you expressly accept by ticking the box (always unticked and separate from the terms) when you create the account, at checkout or in your account. We record when and where you accepted. You can withdraw it any time in “My account → Communications” or with the “Unsubscribe” link in every newsletter.

To delete your account, go to “My account → Delete my account” and confirm with your password. We delete the account and its data, withdraw your consent and unsubscribe you from our news. Your orders are kept, with no link to any account, for as long as tax law requires.

To keep you signed in we use a technical, necessary cookie with no tracking, which lasts at most 30 days or until you tap “Sign out”.

How long we keep it

Purchase data, for as long as Ecuadorian tax law requires for sales receipts. Messages from businesses, while we are in conversation. Your news email, until you unsubscribe with the link in every newsletter or ask us to remove it on WhatsApp. Your account, until you delete it.

Your rights

You can ask us to see the data we have about you, correct it, delete it, object to its use or receive it in a file to take elsewhere. Write to us on WhatsApp or by email and we will reply. Purchase data that the law requires us to keep will be kept only for that purpose.

Minors

Our plush toys are for all ages, but purchases are made by an adult.

Changes to this policy

If we change what we do with your data, we will explain it on this page and update the date below.