Privacy Policy

Privacy Policy

Last Updated: June, 23^rd 2026

 

Who are we?

We are Lalibelo LLC d/b/a lemlem (“we”, “us,” or “lemlem”), an artisan-driven brand of beautiful resort wear made entirely and responsibly in Africa with a core mission of preserving the local art of weaving in Ethiopia and inspiring economic growth on the continent. We offer our products through our website at lemlem.com and through other retailers and stores around the world.

What does this Policy cover?

This Privacy Policy explains our use of personal information processed through the website where this Privacy Policy is referenced or found, in email and text messages to you, and in our offline interactions where this Privacy Policy is referenced. By “personal information,” we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or, under some laws, household. This is sometimes referred to as personal data.

What personal information do we collect and why do we use it?

We (and the vendors and other parties we use to perform services on our behalf) collect personal information about you from various sources, including directly from you, automatically through the use of cookies and other technologies, and from other sources, including, for example, our affiliates, business partners, service providers, online social media networks and other third parties, or from publicly available sources. The table below explains who we collect personal information about, what that personal information is, and the purpose we process it for. The last column sets out the ‘lawful basis’ we rely on for processing that personal information which is a requirement of UK and European data protection rules when we process the personal information of individuals based there. 

 

Individual	Personal information	Source and Purpose	Lawful Basis for Processing
Customers	Contact, purchase, and delivery details, such as name, email address, phone number, mailing address, account details, credit or debit card information and purchase choices.	This information is given to us by you in order to provide account-related functionality and process or fulfill orders and transactions.	When you create an account, you consent to us administering and maintaining your account, provide account-related functionalities, and communicate with you about your account or use of the website  Fulfilment of the purchase contract with you. Compliance with consumer and accounting and tax laws.
Customers and potential customers	Contact and purchase information, including email address, telephone numbers, and order history.	This information is given to us by you. We use it for marketing purposes, including to send you email and SMS promotions and updates. For example, we use your information to tailor and send you information about new products and special offers.	We will only send such emails and SMS with your consent.
Individuals who contact us with general queries	Contact details provided and correspondence.	This information is given to us by you. It is used to respond to the query and keep a record of it. It may also be used for quality and training purposes.	Our legitimate interests as a business in responding to and keeping a record of correspondence.
Website visitors	Information from cookies and other technologies, such as IP address, device identifiers, browser and operating system details, and your interactions with our website and other content. We may collect and record page interaction information and other electronic communications and content from your use of the site (such as content entry, mouse movements, screen captures, the date, time, and location of your visit, what areas of the websites you visit and for how long, what search terms or other data you enter, and what products or content or links you view and click on), and methods used to browse to and away from the page. For more details see later in this Privacy Policy.	This information is collected from your devices via technologies such as cookies when you use our website. We may also embed technologies (which may include, for example, web beacons, tags, and pixels) in the emails and other communications we or our vendors send to you to help us understand how you interact with those messages, such as whether and when you opened a message or clicked on any content within the message. We use this information to enable website functionality, for analytics, to improve our sites and services, and to tailor and serve you ads about products and offers.	Our legitimate interests as a business to better serve you and market our products.  Performing our contract to you, including providing the website, products, and services to you.
Suppliers and contractors	Contact details, such as name, business email, title, and provided correspondence.	This information is given to us by you or from publicly available information (for example on your website). It is used for us to fulfil contracts and engage in business discussions.	Our legitimate interests as a business in responding to and keeping a record of correspondence. Some information is also necessary for us to perform our contract – for example certain contact details.

Although the personal information above describes examples of purposes in collecting your personal information, in many situations we have more than one purpose. For example, when you use our services, we may collect your personal information as described above to perform our contract with you, but also collect your personal information as we have a legitimate interest in maintaining your personal information to assist you in case an issue or problem should arise with the services or website. As a result, our collection and processing of your personal information is based in different contexts based on your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business. If consent is used as the legal bases for the collection of your personal information, and you refuse to consent, certain aspects of the website and/or services may not be available to you.

For UK/EU consumers, where we have indicated in the table above that we rely on legitimate interests for processing of personal information, we carry out a ‘balancing’ test to ensure that our processing is necessary and that your fundamental rights of privacy are not outweighed by our legitimate interests, before we go ahead with such processing. You can contact us for more details using the contact details below.

For Canadian consumers, we typically collect personal information with your consent. Depending on the type of personal information and applicable law, your consent may be express or implied. You understand and agree that by providing your personal information to us in any manner, you agree that we may collect, use, disclose or otherwise process your personal information in accordance with this policy and any applicable laws in Canada. If you choose not to provide consent, or if you withdraw your consent, certain features of the website and some of our services or products may not be available to you. 

In addition to the purposes described above, we (and the vendors and other parties we use to perform services on our behalf) may use your personal information to:

 •    Perform services, including maintaining or servicing accounts, providing customer service, verifying customer information, processing payments, providing analytics services, providing storage, or providing similar services;
•    Conduct advertising and marketing;
•    Complete audits, including relating to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
•    Provide non-personalized advertising shown as part of a current interaction with us;
•    Maintain security and prevent fraud;
•    Undertake activities to verify or maintain the quality or safety of our services;
•    Debug to identify and repair errors;
•    Conduct business analysis;
•    Conduct research and development and improve our products and services; and
•    Fulfill our legal function or obligations.

We (and the vendors and other parties we use to perform services on our behalf) may use automated, machine learning, and artificial intelligence technologies in furtherance of certain uses of personal information described above. 

Some of the information we collect may be considered “sensitive” under certain laws. We collect the following categories of sensitive personal information: account log-in and password. This information is to comply with laws, manage our business, perform services on your behalf, or prevent fraud.

We need to collect personal information to provide certain services. For example, we need your contact information to respond to your inquiries or take steps that you request prior to signing up for our emails and SMS or prior to making a purchase. If you purchase any of our products, we need your payment information to process your payment and to fulfill your purchase request. If you do not provide or allow us to collect the information requested, we may not be able to provide you with requested services.

How long do we keep your personal information for?

We keep your information for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For example, we may keep your information to comply with our legal or regulatory obligations, to resolve disputes, to enforce our agreements, to comply with actual or anticipated investigation or litigation, or as otherwise permitted by law. We use a number of criteria for determining the retention period including obligations under law, our need to defend or bring contractual claims within the statutory limitation period and consideration of the original purpose we collected it for.

How do we secure your personal information?
The Internet is not 100% secure. We cannot promise that your use of our sites will be completely safe. We encourage you to use caution when using the Internet. This includes not sharing your passwords. If we experience a security incident and your personal information is implicated, we may contact you where permitted or required by law.

Links to Third-Party Websites
We may link to other sites or outside party services on platforms we do not control. If you click on a link to an outside party site, you will be taken to websites or platforms we do not control. This Privacy Policy does not apply to the privacy practices of that website or platform. Read the privacy policies of other websites and companies carefully. We are not responsible for these outside party practices.

Who do we share your personal information with?

Data may be shared in the following circumstances:
•    With professional advisors;
•    With a corporate buyer or potential corporate buyer in the event of a sale or potential sale of the company or its assets;
•    With suppliers, contractors, and third-party service providers;
•    With business partners, marketing companies, advertising networks, operating systems and platforms, and data analytics providers;
•    With other companies in our group such as corporate affiliates;
•    If required to do so by law or regulation, or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process, such as law enforcement requests or court order; (b) protect and defend the rights or property of lemlem; or (c) act under exigent circumstances to protect the personal safety of users of lemlem or the public; and
•    With your consent, as context requires.

 

What happens if you do not provide us with the information we request or ask that we stop processing your information?

If you do not provide personal information which is necessary, we may not be able to respond to your query or provide our products to you. In the case of email and SMS marketing, you can choose to refuse or stop the processing at any time. Note that after unsubscribing from promotional emails or SMS messages, you may still receive transactional messages, including information related to orders you place with us.

Do we use cookies or other similar technologies?

Yes, we and other parties use cookies and other technologies on our website for a variety of purposes including to help ensure the website and ecommerce functions work, as well as for analytics and advertising. Some advertising cookies collect personal information over time and across websites. You can find out more about the specific cookies we use through our cookie management solution on our website. This is presented to you when you first visit the site or visit in incognito mode. 

Your browser may give you the ability to control cookies. How you do so depends on the type of cookie. Certain browsers can be set to reject browser cookies. 

We may use Google Analytics and Microsoft Clarity to collect information about how visitors use our website or interact with content. For example, details are collected about the site where the visitor has come from and the total number of times a visitor has been to our website or engaged with certain content. This may be collected through behavioral metrics, heatmaps, and session replay using first and third-party cookies and other tracking technologies. We may also use Google Analytics Advertising Features or Microsoft Clarity for advertising and marketing purposes. You can learn about Google Analytics’ currently available opt-outs at https://tools.google.com/dlpage/gaoptout. To review Google Analytics’ privacy policy visit: https://support.google.com/analytics/answer/6004245?hl=en. For more information about how Microsoft collects and uses your data, please visit: https://privacy.microsoft.com/en-us/privacystatement.  

Do we transfer your data overseas?

We are a US based company and will process your personal information in the US. From time to time, we may also use suppliers and fulfilment providers who are based in other countries. We require that appropriate contractual protections are in place with such third parties in line with applicable law including appropriate EU/UK standard contractual clauses where necessary. Please contact us if you would like more details about our safeguards for data transfers.

How we respond to do-not-track signals?

Some browsers have “do not track” features that allow you to tell a website not to track you. These features are not all uniform. We do not currently respond to those signals.

What rights do you have in relation to the data we hold on you?

You can opt-out of receiving our marketing emails and text messages. To stop receiving our promotional emails, follow the instructions in any promotional message you get from us. If you receive a text message from us that contains promotional information, you can opt-out of receiving future text messages by replying “STOP.” Even if you opt-out of getting marketing messages, we will still send you transactional messages, such as responses to your questions.

Depending on your jurisdiction of residence, by law, you have a number of additional rights when it comes to your personal information. Further information and advice about your rights can be obtained from the data protection regulator in your country. The rights you have depend on the jurisdiction in which you are based as further described in the “Additional Rights for Individuals in Canada, the European Union (EU), and United Kingdom (UK)” section.

For all rights, we usually act on requests and provide information free of charge, but, where allowed under the law, may charge a reasonable fee to cover our administrative costs of providing the information for:
•    baseless or excessive/repeated requests, or
•    further copies of the same information.
Alternatively, we may be entitled to refuse to act on the request in some circumstances.

Additional Rights for Individuals in Canada, the European Union (EU), and United Kingdom (UK)

Some jurisdictions give you a right to make some of the following choices regarding your personal information, and we honor those rights when required by law. These jurisdictions include, but may not be limited to: Canada, the EU, and the UK. Generally, we’ll respond within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know. 

Rights	What does this mean?
The right of access/confirmation of processing	You may request confirmation of whether we are processing your personal information. You have the right to obtain access to your information (if we are processing it), and certain other information (similar to that provided in this Privacy Policy).
The right to rectification	You are entitled to have your information corrected if its inaccurate or incomplete. Note that we may keep historical information in our backup files as permitted by law.
The right to erasure	This is also known as the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it, subject to certain exceptions. If required by law we will grant a request to delete information, but you should note that in certain situations, we may be required or permitted by law to keep your personal information.
The right to restrict processing	In certain limited cases, you may request that we restrict our processing of personal information.
The right to data portability	You may also obtain a copy of any personal information that we hold about you in our records in a format compatible and structure to allow you to exercise your right to data portability when the processing is based on your consent or on the performance of a contract between you and us.
The right to object to processing	You have the right to object to certain types of processing, including processing for direct marketing or where we are relying on our legitimate interests for processing (e.g. if you no longer want to be contacted with potential role opportunities.
The right to lodge a complaint	You have the right to lodge a complaint with your local data protection supervisory authority.
The right to withdraw consent	If you have given your consent for the processing of your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful).

 

The privacy rights described above are not absolute and each is subject to certain exceptions or qualifications. Please note that in some circumstances, we may not be able to fully comply with your request.

Exercising the rights above 

If you would like to exercise one or more of the above rights, please contact us by email to privacy@lemlem.com or click here. As required by law, we may need you to provide additional information to verify your request, such as providing certain data elements so that we can confirm they match the personal information already maintained by us.  

 

Additional Rights for Individuals in Nevada 

Nevada law gives Nevada consumers the right to request that a company not sell their personal information for monetary consideration to certain other parties. This right applies even if their personal information is not currently being sold.  If you are a Nevada consumer and wish to exercise this right, please send an email with the subject line “Nevada Resident Do Not Sell Request” to privacy@lemlem.com.