Privacy Policy | shoplotus

top of page

Lotus Web Services LLC

Toll Free +1-800-213-7490

Privacy Policy

Effective Date: 26th December 2025

This Privacy Policy (“Policy”) explains in detail how Lotus Web Services LLC (“Company,” “we,” “us,” or “our”) collects, uses, stores, protects, and discloses personal information when you access or use our website https://www.lotuswebservicesllc.com/ (the “Website”).

This Policy is intentionally drafted in a highly descriptive, enterprise-grade format to meet:

United States federal and state privacy and consumer protection laws
California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
Additional U.S. State Privacy Disclosures, Colorado, Texas, Virginia, Connecticut and Utah.
General Data Protection Regulation (GDPR) for EU/EEA users (where applicable)
Microsoft Advertising (Bing Ads) policies, including Universal

Event Tracking (UET) requirements

Enterprise data protection and supplier security expectations By using this Website, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

1. Company Information

Legal Entity Name: Lotus Web Services LLC

Registered Office: USA- 30 N Gould St STE R Sheridan, WY 82801, USA

Registered Office Canada-UNIT 10-1332 KHALSA DRIVE MISSISSAUGA , ON L5S 0A2

Contact Details:

Phone: +1-800-213-7490

Email: sales@lotuswebservicesllc.com

2. Scope and Applicability

This Privacy Policy applies to all visitors, customers, partners, and users who access, browse, interact with, or transact on our Website. It covers data collected online through the Website, email communications, customer support interactions, and lawful advertising technologies. This Policy does not apply to third-party websites, platforms, or services that may be linked from our Website. We are not responsible for the privacy practices of such third parties.

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our cookie usage, please see our Cookies Policy.

3. Categories of Information We Collect

Information You Voluntarily Provide

We may collect personal information that you choose to provide, including but not limited to:

Full name
Email address
Telephone number
Billing and shipping addresses
Order, transaction, and payment-related details
Communications with customer support

3.2 Information Automatically Collected

When you access the Website, certain information may be collected automatically:

Internet Protocol (IP) address
Browser type and version
Device identifiers and operating system
Pages viewed, session duration, and navigation patterns
Referring URLs and timestamps

4. Cookie Preferences & User Control

We respect your privacy and believe in complete transparency about how cookies are used on our Website. When you visit our Website, you are provided with clear options to manage your cookie preferences through our cookie consent banner. You may accept all cookies, decline non-essential cookies, or customize your preferences by category. The types of cookies used on our Website are outlined below:

4.1 Essential Cookies

These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies.

4.2 Functional Cookies

These cookies are required for:

Essential for the proper functioning of the Website
Enable core features such as page navigation and secure access
Store user preferences to improve usability
Without these cookies, certain Website services may not function correctly

4.3 Analytics Cookies

These cookies are required for:

Help us understand how visitors interact with the Website
Collect information such as pages visited and time spent on the site
Analyze user behavior patterns in an aggregated manner
Used only to improve Website performance, user experience, and content quality

4.4 Advertising Cookies

These cookies are required for:

Used to deliver relevant and personalized advertisements
Help ensure ads are aligned with user interests
May track browsing behavior across the Website for ad relevance purposes

4.5 Data Shared with Third Parties

These cookies are required for:

Some cookies may be set by trusted third-party service providers
Used to support analytics, advertising, or integrated services
Third parties are required to comply with applicable data protection and privacy regulations

5. How We Use Personal Information, We process personal information for legitimate business purposes,including:

Order fulfillment and account management
Customer support and communications
Website security and fraud prevention
Legal and regulatory compliance
Limited, consent-based marketing where permitted by law

5.1. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time via privacy right form.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way

For investigations and fraud detection and prevention

For business transactions provided certain conditions are met

If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim

For identifying injured, ill, or deceased persons and communicating with next of kin

If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse

If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province

If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records

If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced

If the collection is solely for journalistic, artistic, or literary purposes

If the information is publicly

6. Legal Bases for Processing (GDPR)

For EU/EEA users, processing is based on:

User consent
Contractual necessity
Legal obligations
Legitimate business interests

Users may withdraw consent at any time.

7. Enterprise Data Protection Standards

We adhere to enterprise-level data protection requirements frameworks, implementing 67 comprehensive security controls designed to safeguard personal information throughout its lifecycle. Our commitment includes:

End-to-end data protection measures Encryption standards including TLS 1.3 for data in transit and AES-256 for data at rest
Secure access controls and role-based permissions
Continuous monitoring and logging
Supplier and partner security alignment

8. Incident Response

We maintain documented incident response procedures aligned with enterprise-grade requirements, including:

Rapid identification and containment
Impact assessment
Regulatory notification where required
Remediation and preventive controls

9. Disclosure of Personal Information

We may disclose personal information to:

Authorized service providers
Payment processors
Shipping and logistics partners

10. Data Retention Personal information is retained only for as long as necessary to:

Fulfill contractual obligations
Meet legal and accounting requirements
Resolve disputes and enforce agreements

11. Data Security Safeguards

We implement administrative, technical, and physical safeguards to protect personal data. While we strive to use commercially acceptable means to protect information, no system is completely secure. Note that we cannot guarantee that unauthorized or unintended access to the data will not occur, and we cannot be held responsible for such cases. We make no warranty, express, implied, that we will be able to prevent such access. If you believe that your privacy rights has been mishandled, or if you become aware of any unauthorized attempt by a third party to access your Personal Data, please reach out to us by submitting Privacy Rights Form. In the event of a security incident involving your Personal Data, we will make reasonable efforts to notify you and, if required by applicable law, to the appropriate authorities.

12. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your jurisdiction. By using our services, you consent to the transfer of information to countries that may have different data protection laws than your country of residence.In such event, we will comply with the law requirements to ensure that your Personal Data receives an adequate level of protection upon its transfer. Notwithstanding the foregoing, where we transfer Personal Data that was collected within the, outside the EEA, we will take appropriate measures to protect the Personal Data and ensure that during the transfer sufficient safeguards are provided, such as pursuant with the EU standard contractual clauses as approved by the European Union (SCCs).

13. Your Privacy Rights

13.1 GDPR Rights (EU/EEA Users)

You have the right to:

Access personal data
Correct inaccuracies
Request deletion
Restrict or object to processing
Request data portability12.2 CCPA / CPRA Rights (California Residents)

California residents may:

Request disclosure of data collection practices
Access or delete personal information
Opt out of the sale or sharing of data
Limit use of sensitive personal information
Exercise rights without discrimination

13. 2 Third-Party Service Providers & Vendors (CCPA/CPRA Disclosure)

As required by California law, we disclose all third-party service providers who may process your personal information:

Payment Processing: Stripe Inc. - Processes credit/debit card payments and manages transactions

Shipping Partners: USPS, UPS, FedEx - Fulfills product deliveries (receives name/address only)

Live Chat INC, Live Chat for Customer inquiry, System Development, Operation, and Maintenance

(Cookie Banner)- Cookie Consent Management, Displays a customizable banner to inform users about cookies and get their explicit permission.: Allows users to accept, decline, or customize cookie categories (e.g., analytics, marketing).

13.3 State-Specific Privacy Rights

Virginia (VCDPA)

Virginia residents have rights under the Virginia Consumer Data Protection Act, including the right to access, correct, delete, and obtain a copy of personal information, and to opt out of targeted advertising and sales of personal data.

Colorado (CPA)

Colorado residents have rights under the Colorado Privacy Act, including similar rights to access, correct, delete personal data, and opt out of targeted advertising, sale of personal data, and certain profiling activities.

Connecticut (CTDPA)

Connecticut residents have rights under the Connecticut Data Privacy Act, including the right to confirm whether we process personal data, access personal data, correct inaccuracies, delete personal data, and opt out of processing for targeted advertising or sales.

Utah (UCPA)

Utah residents have rights under the Utah Consumer Privacy Act to access and delete personal data, and to opt out of the processing of personal data for targeted advertising or the sale of personal data.

Texas ( TDPSA)

Texas resident can request access, correction, deletion, and portability of their data, and opt-out of sales, targeted ads, and profiling

14. Sensitive Personal Information

We do not intentionally collect or use sensitive personal information

(including health data, political opinions, or biometric identifiers) for

advertising or profiling.

15. Children’s Privacy

We do not knowingly collect personal information from children.The Service and its content are not directed at children under the age of 13. Lotus Web Services LLC does not knowingly collect or solicit any information from anyone under the age of 13 or knowingly allow such persons to register as Users. In the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us using privacy rights form.

16. Personal Information Requests

I am submitting a request to:

Confirm whether my personal information is being processed
Access my personal information
Correct or update my personal information
Request deletion of my personal information
Restrict processing of my personal information
Ask a question about this Privacy Policy
Withdraw consent to data processing
Deny use of my data for direct marketing or profiling
Other (specified in the request)

Requests may be submitted via Privacy Rights Form.

17. Important Legal Links

18. Updates to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will take effect immediately upon posting. Users are encouraged to review this Policy periodically.This Privacy Policy exceeds standard compliance requirements and is suitable for enterprise partnerships, advertising approvals, and a Wix-powered e-commerce website.

bottom of page