Privacy Policy

Last updated: 23rd January, 2026

1. Data Controller

The data controller for https://lochan.com.fj (the “Site”) is Defy Technologies Pte Limited (“we”, “us”, “our”). You can contact us at christine@lochan.com.fj or 9991689 regarding any privacy matters.

2. Scope

This Privacy Policy applies to all users of the Site, including visitors, account holders, and customers making purchases via WooCommerce, M-PAiSA, or BSP Bank Transfer.

3. Information We Collect

3.1 Information You Provide

Full name
Email address
Phone number
Billing and shipping addresses
Account login credentials
Order and transaction details

3.2 Social Login Information

If you log in via Facebook or Google, we receive:

Name
Email address
Profile picture

We do not receive or store your social media passwords.

3.3 Newsletter

When subscribing, we collect your email and optionally your name. Marketing communications are sent only with consent, and you may unsubscribe at any time.

3.4 Payment Information

Payments are processed via third parties:

M-PAiSA (Vodafone Fiji): Only confirmation, transaction ID, amount, and timestamp are received.
BSP Bank Transfer: Only amount received, date, and payment narration/reference are visible. No bank account or sensitive details are stored.

3.5 Automatically Collected Information

IP address and approximate location (MaxMind)
Browser and device information
Pages visited and usage data
Cookies and similar tracking technologies (including Google Analytics)

4. Cookies

Cookies are used for functionality, analytics, login services, and preferences. Disabling cookies may limit site functionality. By using the Site, you consent to cookie usage as described in our cookie banner.

5. How We Use Information

We use personal data to:

Provide and manage accounts
Process orders and payments
Provide customer support
Send marketing communications with consent
Analyze and improve the Site
Comply with legal, tax, and regulatory obligations

6. Legal Basis

We process data based on:

User consent
Contractual necessity (e.g., order fulfillment)
Compliance with legal obligations
Legitimate interests (e.g., site security, analytics)

7. Sharing and Third-Party Services

We do not sell or rent personal data. Data may be shared with:

Vodafone Fiji (M-PAiSA payments)
BSP Bank (bank transfers)
Google and Facebook (login and analytics)
Email/newsletter service providers
Website and technical service providers

These parties are contractually obligated to protect data and use it only for intended purposes.

8. International Transfers

Data may be stored or processed outside Fiji by third-party services. We rely on their safeguards for adequate protection.

9. Data Retention

Personal data is retained only as long as necessary for business, legal, or tax purposes. Data no longer needed is securely deleted or anonymized.

10. Data Security

We implement reasonable administrative, technical, and organizational measures to protect data. No system is completely secure; we cannot guarantee absolute security.

11. Your Rights

Subject to applicable law, you may:

Access your personal data
Correct inaccuracies
Request deletion
Withdraw consent for marketing

Requests are handled within a reasonable timeframe. Contact us at christine@lochan.com.fj.

12. Data Breaches

In case of a data breach that risks your personal information, we will notify affected users and the relevant authorities in accordance with applicable law.