Privacy Policy

Last updated: July 7, 2026

This privacy notice for LiSA Retail Innovation GmbH ("Company", "we", "us", or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services, such as when you visit our website at www.hello-lisa.com, or engage with us in sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you still have questions, contact us at info@hello-lisa.com.

Summary of key points

• Personal information we process: only what you provide (name, email, job title, contact preferences) plus device/usage data collected automatically.
• Sensitive personal information: we do not process it.
• Third-party data: we do not receive personal information from third parties.
• How we use your data: to provide, improve, and administer our services, communicate with you, ensure security, and comply with law.
• Your rights: depending on your region, you may have rights to access, correct, delete, restrict, or port your data — and to withdraw consent.

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information you voluntarily provide when you request information, participate in activities on the services, or contact us. This typically includes:

• contact preferences
• email addresses
• names
• job titles

We do not process sensitive information.

Information automatically collected

In short: Some information — such as your IP address and browser/device characteristics — is collected automatically when you visit our services.

• Log and usage data: service-related diagnostic and performance information our servers automatically collect (IP address, device info, browser type, timestamps, pages viewed, actions taken).
• Device data: information about the computer, phone, or tablet you use, including device identifiers, browser type, hardware model, ISP, and OS.
• Location data: approximate location derived from your IP address. You can opt out via your device settings.

2. How do we process your information?

In short: We process your information to provide, improve, and administer our services, communicate with you, and for security, fraud prevention, and legal compliance.

3. What legal bases do we rely on?

If you are located in the EU or UK, we rely on the following legal bases under the GDPR and UK GDPR:

• Consent — where you have given permission for a specific purpose (which you can withdraw at any time).
• Legal obligations — where processing is necessary to comply with the law.
• Vital interests — where processing is necessary to protect your or another person's vital interests.

LiSA Retail Innovation GmbH is generally the "data controller" of the personal information described in this notice. Where we act as a "data processor" on behalf of our customers, our customers are the controllers and their privacy policies apply.

4. When and with whom do we share your information?

In short: We share information only in specific situations described in this section.

• Business transfers: we may share or transfer your information in connection with any merger, sale of assets, financing, or acquisition.
• Service providers: we may share information with vendors that process data on our behalf under written contract, subject to the same protections.

5. Do we use cookies and other tracking technologies?

In short: Yes — we use cookies and similar technologies to collect and store information.

You can manage your cookie preferences at any time via our cookie preferences.

6. How long do we keep your information?

We keep personal information only as long as necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law. No purpose in this notice will require keeping your personal information for longer than 6 months. When we no longer need it, we delete or anonymise it, or securely isolate it until deletion is possible.

7. How do we keep your information safe?

We have implemented appropriate technical and organisational security measures to protect your personal information. However, no electronic transmission or storage technology can be guaranteed 100% secure.

8. Do we collect information from minors?

We do not knowingly collect data from or market to children under 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable steps to delete such data. Contact philippe@hello-lisa.com if you become aware of any such data.

9. What are your privacy rights?

In some regions (EEA, UK, Switzerland, Canada), you have rights under applicable data protection laws — including the right to access, rectify, erase, restrict processing, data portability, and to object. You can exercise these rights by contacting us using the details below. If you believe we are unlawfully processing your data, you have the right to complain to your local supervisory authority (EU list).

10. Controls for Do-Not-Track features

No uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals. If a standard is adopted, we will update this notice.

11. California residents

Under California Civil Code Section 1798.83 ("Shine The Light"), California residents may request information about categories of personal information disclosed to third parties for direct marketing. Under the CCPA, you have the right to know, delete, correct, and opt out of the sale/sharing of your personal information. We do not sell personal information.

12. Virginia residents

Under the Virginia CDPA, you have rights to access, correct, delete, obtain a copy of, and opt out of certain processing of your personal data. We do not sell personal data. To appeal a decision, email info@hello-lisa.com.

13. Do we make updates to this notice?

We may update this privacy notice from time to time. The updated version is indicated by an updated "Revised" date and is effective as soon as accessible.

14. How can you contact us?

If you have questions or comments about this notice, you may contact our Data Protection Officer, Philippe Frères, by email at philippe@hello-lisa.com, or by post:

15. How can you review, update, or delete your data?

You may request access to the personal information we hold about you, change it, or delete it — email info@hello-lisa.com and we will respond in accordance with applicable law.