Effective Date: September 9, 2025

Welcome to Lulu Lab! Your privacy is incredibly important to us. This Privacy Policy is designed to help you understand how we collect, use, and protect the personal information you provide to us when you use our website, lululab.cc, and any of our related educational services (collectively, the "Service").

Lulu Lab is an educational service provided by Piri Piri Co., a company registered in Hong Kong. This policy has been created to be transparent with our students, their parents, and all our users about our data practices.

By using our Service, you agree to the collection and use of information in accordance with this policy. We encourage you to read it carefully to make informed decisions.

We collect information in two main ways to provide and improve our services: information you give us directly and information that is collected automatically as you use our site.

Information You Provide to Us Directly

This is information you voluntarily provide when you interact with our site. This includes:

• Contact and Registration Data: Your name and email address when you fill out a contact form, register for our services, or book an appointment.

• Payment Data: Your payment information, which is securely handled by our payment processor (Stripe) when you make a purchase on our checkout pages.

Information We Collect Automatically

When you visit our website, we automatically collect certain technical information from your device. This data helps us understand how our site is being used and how we can improve it. This information includes:

• Your IP address, browser type, and device information.

• Your browsing activity on our site, such as which pages you visit and for how long.

This type of information is typically collected using cookies and similar tracking technologies.

Information We Do Not Collect

To protect your privacy, we want to be clear about what we don't collect. We do not collect or store sensitive personal information such as your bank account details, home address, or government-issued ID numbers.

We are committed to using your information responsibly and for specific purposes that allow us to provide and improve our services. We use the information we collect in the following ways:

• To Provide and Maintain Our Services: Your information is essential for us to deliver the services you have requested. This includes processing your payments, scheduling and managing your bookings for tutorial classes with Dr. Louis Wu, and maintaining your account with us.

• To Communicate With You: We use your contact information to communicate with you directly. This includes responding to your inquiries, providing customer support, sending confirmations and updates about your bookings, and delivering important service-related announcements. With your consent, we will also send you newsletters and other marketing communications that we believe may be of interest to you.

• For Security and Fraud Prevention: We use certain information to protect the security and integrity of our website, our services, and our users. This includes monitoring for and preventing fraudulent transactions, unauthorized access, and other illegal activities.

• To Comply with Legal Obligations: We may use and retain your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. This includes maintaining records for tax or accounting purposes as required by law.

• To Improve Our Website and Services: We analyze information about how you use our site to understand what we can do better and to develop new features and offerings that enhance your experience.

Like most websites, we use cookies to enhance your browsing experience. A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login details, language, and display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another.

What types of cookies do we use and why?

We use several types of cookies on our site, each with a specific purpose:

• Essential Cookies: These cookies are strictly necessary for the website to function correctly. They enable core functionalities such as page navigation, security, and remembering items in a shopping cart. You cannot opt out of these cookies as the website cannot work without them.

• Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to analyze site traffic, identify popular content, and improve our website's performance and user experience. For example, we use Google Analytics to see which articles are most read and where our visitors are coming from.

• Marketing Cookies (Future Use): While we may not use these extensively at launch, these cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user. Should we partner with advertising networks in the future, these cookies would help deliver personalized marketing content.

How can you manage your cookie preferences?

You have control over the cookies you accept. Most web browsers allow you to manage your cookie preferences through the browser settings. You can typically set your browser to block cookies, delete existing cookies, or notify you when a new cookie is sent to your device.

Please be aware that if you choose to block essential cookies, some parts of our website may not function correctly.

For more detailed information on how to manage cookie settings in your specific browser, please consult the help section of your browser or visit sites like www.aboutcookies.org. As our site grows, we may implement more granular cookie control tools and develop a separate, more detailed Cookie Policy.

Your trust is important to us, and we want to be transparent about how we handle your data. We do not sell your personal information to third parties. We only share your information with a limited number of third parties in the specific circumstances outlined below.

• Service Providers: We work with trusted third-party companies who provide services on our behalf. We only share the information necessary for them to perform these services.

  • Payment Processor: We use Stripe to securely process payments for any products or services you purchase. When you make a purchase, you provide your payment information (such as your credit card number and billing address) directly to Stripe. We do not have access to, nor do we store, your full financial details on our servers. We only receive information necessary to confirm your payment and fulfill your order, such as your name, email, and the item purchased.

  • Website Hosting: Our website is hosted with service providers (Google and EasyWP) who maintain our servers and ensure our site is secure and accessible.

• Analytics Partners: We use services like Google Analytics to help us understand how our visitors use the site. This service collects information such as which pages you visit and how much time you spend on them. This data is aggregated and anonymized and helps us improve our content and user experience.

• Legal Authorities: We may be required to disclose your information if compelled by law, such as in response to a court order, subpoena, or other legal process. We may also share information to protect our rights, property, and safety, or the rights, property, and safety of others.

We believe in transparency and giving you control over your personal information. Regardless of where you live, we are committed to providing you with the following rights concerning your personal data.

You have the right to:

• Access Your Data: You can inquire about and request a copy of the personal data we hold about you.

• Correct Your Data: If you believe any information we have on you is inaccurate or incomplete, you can request that we correct or supplement it.

• Request Deletion of Your Data: You can request that we delete your personal data from our systems. Please note that we may need to retain certain information for legal or legitimate business purposes, such as record-keeping.

• Stop or Restrict Processing: You have the right to request that we stop collecting, processing, or using your personal data in certain circumstances.

• Withdraw Consent: Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of the rights described above, please send your request to us at info@lululab.cc.

For your protection, we may need to verify your identity before we can fulfill your request. We will respond to all legitimate requests within a reasonable timeframe and in accordance with applicable data protection laws.

We take the security of your personal information very seriously and are committed to protecting it. We implement a variety of administrative and technical security measures to safeguard your data against unauthorized access, use, alteration, or disclosure.

One of the key measures we take is the use of SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption across our entire website. You can verify this by looking for the padlock icon in your browser's address bar. This ensures that any data you transmit to us, such as when you fill out a contact form or make a payment, is encrypted and kept private.

Furthermore, we partner with trusted, industry-leading service providers like Stripe, who maintain their own high standards of security for the data they process on our behalf.

While we strive to use commercially acceptable means to protect your personal data, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. However, we are dedicated to continually updating our security practices to protect your information to the best of our ability.

We will only retain your personal data for as long as it is necessary to fulfill the purposes for which we collected it, as outlined in this Privacy Policy.

The length of time we keep your information depends on the type of information and the reason we collected it. For example, we will retain your account information for as long as you maintain an active account with us to provide you with our services.

In some cases, we may be required to retain data for longer periods to comply with our legal, tax, or accounting obligations. For instance, we are required by law to keep basic information about our customers (including contact and financial transaction data) for a certain number of years for tax purposes.

Once your data is no longer needed for these purposes, we will securely delete or anonymize it.

Our services are accessible to a global audience. To make this possible, the information we collect may be transferred to, stored on, and processed by servers and service providers located in countries outside of your country of residence.

These countries may have data protection laws that are different from the laws in your own country.

However, we are committed to protecting your data regardless of where it is processed. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable laws. This includes working with trusted, industry-leading service providers who maintain high standards for data security and privacy.

Protecting the privacy of children is especially important to us. Our Service is intended for a general audience and is not directed at children.

We do not knowingly collect, use, or store any personal information from children under the age of 16 without the express consent of a parent or legal guardian. To register for our services, such as tutorial classes, we require that a parent or legal guardian provide their own contact and payment information on behalf of the student.

If you are a parent or guardian and you become aware that your child has provided us with personal information without your consent, please contact us immediately at info@piripir.cc.

If we become aware that we have inadvertently collected personal information from a child under the age of 16 without verifiable parental consent, we will take immediate steps to remove that information from our servers.

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

When we make changes, we will update the "Effective Date" at the top of this Privacy Policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

For any significant changes, we will provide a more prominent notice to our users. This may include posting a notification on our website or sending you an email to inform you of the new terms. Your continued use of our Service after any changes to this Privacy Policy will constitute your acceptance of such changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to contact us at: Email:  info@piripir.cc