Skip to content

Free delivery across the UK

OEKO-TEX® certified wool

Ships from our EU, UK and US warehouses

Privacy policy

1. Controller

Argacom OÜ, Männimäe/1, Pudisoo küla, Kuusalu vald, 74626 Harjumaa, Estonia, email: support@lyhome.me. Data protection officer: Vladyslav Bazarov, at the same address.

2. What we process and why

Visiting the website

When you open our pages, our server records technically necessary data (IP address, date and time, page requested, browser, operating system, referring page) in log files so that we can provide the website and protect it against attacks. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). Log files are deleted after six weeks at the latest.

When you follow one of our links to Amazon, our server counts the click: the shop, the kind of page and the place of the link, the Amazon marketplace, and where your visit came from (for example an ad, a search engine or another website, the campaign and the first page visited). The count holds no IP address, cookie or other detail that identifies you (legitimate interest, Article 6(1)(f) GDPR). If you have agreed in our cookie banner, the click also goes to Google Analytics and Google Ads.

Orders and customer accounts

To process your order we use your name, address, email address, phone number (if given), order and payment details (Article 6(1)(b) GDPR). The phone number is optional; we use it only for questions about the delivery and pass it to the warehouse and the carrier where they need it to deliver. We keep invoices and accounting records for seven years because the law requires it (Article 6(1)(c) GDPR). We keep the data of a customer account until you ask us to delete the account.

With each order we also record which advertising campaign or website brought you to us (campaign parameters and click ID from the link you followed, referring website, first page visited) to measure how well our advertising works (legitimate interest, Article 6(1)(f) GDPR). We set no cookie of our own for this; the details come from the link you used to reach our site.

Contact form and email

We use your message and contact details only to answer your request (Article 6(1)(b) or (f) GDPR). To prevent spam, the form checks without any third-party service that a person filled it in (a hidden field and the time before sending) and accepts at most five messages an hour from one address; for this we keep a one-way hash of your IP address for at most 24 hours (Article 6(1)(f) GDPR).

Newsletter

You receive our newsletter (three welcome emails in the first three weeks, then about one a month on care, new colours and offers) only with your consent (Article 6(1)(a) GDPR). After you sign up we send you an email with a confirmation link; you are subscribed only once you confirm (double opt-in). As proof of your consent we keep the time and IP address of the sign-up and of the confirmation, and the text you agreed to (legitimate interest, Article 6(1)(f) GDPR). Sign-ups that are not confirmed are deleted after 30 days.

If you have not ordered from us before, you get a personal discount code for your first order, once, after you confirm. To check this, we compare your email address with our orders. If you subscribe with the box at checkout, you get no code. If you have subscribed and start an order without paying, we remind you by email after an hour and after a day; the link in it puts the items back in your basket.

We send the confirmation and welcome emails from our own server and the monthly newsletter with SendPulse (SendPulse Inc., New York, USA) as our processor. SendPulse holds your email address, your language, the shop where you signed up and your discount code. SendPulse records whether a newsletter was opened and which links in it were clicked, so that we can improve our emails.

You can unsubscribe at any time through the link in every email or by emailing support@lyhome.me. You then receive no more newsletters; we keep the proof of your consent for up to three years.

Back-in-stock notices

If you ask to be told when a sold-out item is back, we store your email address, the item and the shop, and write to you once from our own server when it is available again (Article 6(1)(b) GDPR). We delete the request 30 days after that email, and an unanswered request after six months at the latest.

After delivery: care tips and reviews

Five days after shipping we send you care tips for the items you bought, once (Article 6(1)(b) GDPR). About two weeks after shipping we ask you once by email for a review of your order; we tell you about this when you order (Article 6(1)(f) GDPR, our legitimate interest in feedback and reviews; in the UK, the soft opt-in of the PECR). You can object at any time, through the link in that email or by writing to us; we then keep only your email address on a block list, so that you get no such request again. If you write a review, we store its stars, text, the name you give, the date and the order it belongs to. After our check we publish the stars, text, name and date on the product page; the order stays internal and only shows that the review comes from a buyer. You can ask us to delete your review at any time.

Cookies and analytics

We set strictly necessary cookies, for example for your basket, session and language. In your browser's storage we also note whether you have closed the newsletter window or subscribed, so that it does not keep coming back. Google Tag Manager, and through it Google Analytics (statistics) and Google Ads (marketing), load only after you have agreed in our cookie banner (Article 6(1)(a) GDPR). We keep your choice for 180 days in the "lyh_consent" cookie. You can change it or withdraw your consent at any time under "Cookie settings" at the bottom of every page.

If you have agreed to statistics in our cookie banner, we also use Microsoft Clarity (Article 6(1)(a) GDPR), a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how you use our pages (clicks, taps, scrolling and mouse movements, together with the page content, your device and browser, and an approximate location derived from your IP address) and shows it to us as heatmaps and recordings of visits, so that we can find and fix what makes the shop hard to use. Input fields, numbers and email addresses are hidden before the recording leaves your browser, the checkout form is hidden as a whole, and Clarity does not run on your account pages, the contact and returns forms or the order confirmation. Clarity sets the cookies "_clck" (a pseudonymous Clarity ID) and "_clsk" (joins the pages of one visit); Microsoft may also set cookies of its own, such as "MUID". Microsoft keeps recordings for 30 days (those we mark, for up to 9 months) and click and heatmap data for 9 months. Microsoft may also use the data for its own purposes, including advertising; we do not give Microsoft consent for advertising. You can withdraw your consent at any time under "Cookie settings". Microsoft's privacy statement: privacy.microsoft.com/privacystatement

If you have agreed to marketing in our cookie banner, we also use the Meta pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It records which of our pages you view, what you put in your basket and what you buy, together with data about your browser and device and the cookies "_fbp" and "_fbc", so that we can measure our ads on Facebook and Instagram and show them to people who may be interested; Meta may also set cookies of its own. After an order, our server also tells Meta about the purchase (order number, amount and items), with your email address, phone number, name and address as a hash (SHA-256), your IP address and your browser's details (Meta's Conversions API), likewise only if you have agreed to marketing. We and Meta are jointly responsible for collecting and passing on these data (Article 26 GDPR; Meta's controller addendum: facebook.com/legal/controller_addendum); Meta then processes them on its own responsibility and may use them for its own purposes, as described in its privacy policy: facebook.com/privacy/policy. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time under "Cookie settings".

If you have agreed to marketing, after an order we also send Google your email address, phone number, name and street as a hash (SHA-256), together with your city, postcode and country, so that Google can match the purchase to an ad (enhanced conversions, Article 6(1)(a) GDPR).

If you have agreed to marketing, the order confirmation page also offers you Google Customer Reviews. For this the page passes Google your email address, the order number, the delivery country, the expected delivery date and the GTINs of the items you ordered; Google sends you a survey about your order only if you agree in Google's window (Article 6(1)(a) GDPR). Google is responsible for the survey on its own; you can withdraw at any time through the link in Google's email.

3. Recipients

  • Hosting: Hosting Ukraine LLC, Kyiv, Ukraine (the server of the website and shop)
  • Payment: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
  • Payment by card, Apple Pay and others: Stripe Payments Europe, Limited, Dublin, Ireland
  • Warehousing and delivery: our logistics partners and carriers such as DHL receive your name, delivery address and, if given, phone number
  • Order and stock management: Ysell
  • Newsletter: SendPulse Inc., New York, USA (data centres in the EU)
  • Email: Proton AG, Switzerland
  • Google Ireland Limited: only with your consent, Tag Manager, Analytics, Google Ads and Google Customer Reviews
  • Microsoft Ireland Operations Limited: only with your consent, Clarity
  • Meta Platforms Ireland Limited: only with your consent, the Meta pixel and the Conversions API

4. Transfers to other countries

The server of our website is located in Ukraine. There is no EU adequacy decision for Ukraine. The hoster only provides the server and does not access the data in normal operation. Switzerland (Proton) has an adequacy decision. Google may transfer data to the United States; Google is certified under the EU-US Data Privacy Framework. Microsoft may transfer data to Microsoft Corporation in the United States, which is certified under the same framework. Meta may transfer data to Meta Platforms, Inc. in the United States, which is certified under the same framework. Stripe may transfer data to the United States; Stripe, Inc. is certified under the same framework. SendPulse stores the data in data centres in the EU; where SendPulse Inc. in the United States accesses it, the European Commission's standard contractual clauses apply.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw your consent at any time with effect for the future. You can complain to a data protection authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), the UK Information Commissioner's Office or the authority where you live.

6. Contact

Please send questions about data protection to support@lyhome.me.

Last updated: October 2026