PRIVACY POLICY
PRIVACY POLICY · LILY LONDONThis Privacy Policy explains how Lily London collects, uses and protects your personal data when you use our website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Lily London |
1 · INFORMATION ON THE COLLECTION OF PERSONAL DATA & CONTACT DETAILS OF THE CONTROLLER
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the UK General Data Protection Regulation (UK GDPR) is Lily London. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the string "https://" and the padlock symbol in your browser bar.
2 · DATA COLLECTION WHEN VISITING OUR WEBSITE
When you use our website purely for information purposes — i.e. if you do not register or otherwise transmit information to us — we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
The website visited
The date and time of access
The amount of data sent in bytes
The source/referrer from which you reached the page
The browser used / The operating system used
The IP address used (where applicable: in anonymised form)
The processing is carried out in accordance with Article 6(1)(f) UK GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
3 · COOKIES
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies).
When cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual basket for a later visit to the website). Where individual cookies implemented by us also process personal data, the processing is carried out in accordance with Article 6(1)(b) UK GDPR for the performance of the contract, or in accordance with Article 6(1)(f) UK GDPR to protect our legitimate interests in the best possible functionality of the website.
We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies may also be stored on your device when you visit our website (third-party cookies).
| Please note: You can set your browser to inform you about the setting of cookies and to decide individually about their acceptance, or to exclude the acceptance of cookies in certain cases or generally. Each browser differs in the way it manages cookie settings. Please note that the functionality of our website may be limited if cookies are not accepted. |
Browser cookie settings
Internet Explorer: support.microsoft.com/help/17442
Firefox: support.mozilla.org/kb/cookies-erlauben-und-ablehnen
Chrome: support.google.com/chrome/answer/95647
Safari: support.apple.com/kb/ph21411
Opera: help.opera.com/en/latest/web-preferences/#cookies
4 · CONTACT
When you contact us (e.g. via the contact form or by email), personal data is collected. The data collected in the case of a contact form is evident from the relevant contact form. This data is stored and used exclusively for the purpose of responding to your enquiry, or contacting you, and the associated technical administration.
The legal basis for the processing of the data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) UK GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6(1)(b) UK GDPR. Your data will be deleted after the final processing of your enquiry, provided there are no statutory retention obligations to the contrary.
5 · DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT & CONTRACT PERFORMANCE
In accordance with Article 6(1)(b) UK GDPR, personal data will continue to be collected and processed when you provide it to us for the performance of a contract or when opening a customer account. The data collected is evident from the relevant input forms.
Deletion of your customer account is possible at any time and can be carried out by sending a message to the controller's address stated above. We store and use the data you provide for the performance of the contract. After full performance of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after the expiry of those periods, unless you have expressly consented to further use of your data.
6 · USE OF YOUR DATA FOR DIRECT MARKETING
| 6.1 — Subscribing to the email newsletter |
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. To send the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter after you have expressly confirmed that you consent to receiving newsletters.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) UK GDPR. When you subscribe to the newsletter, we store your IP address assigned by your internet service provider (ISP) as well as the date and time of subscription. You can unsubscribe from the newsletter at any time via the link provided in the newsletter. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list.
| 6.2 — Email newsletter to existing customers |
If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. We do not need to obtain separate consent from you for this. The data processing is carried out solely on the basis of our legitimate interest in personalised direct marketing in accordance with Article 6(1)(f) UK GDPR. You are entitled to object to the use of your email address for advertising purposes at any time with effect for the future.
7 · DATA PROCESSING FOR ORDER FULFILMENT
7.1 The personal data we collect will be passed on, within the scope of contract performance, to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. The legal basis for the transfer of the data is Article 6(1)(b) UK GDPR.
| 7.2 — Payment service providers |
When paying by credit card (AMEX, Mastercard, Maestro, Visa), Apple Pay, Google Pay or Shop Pay, your payment data is only passed on to the relevant payment service provider insofar as this is necessary for payment processing. These providers may process your data in accordance with their own privacy policies. Payments are processed in a secure, SSL-encrypted environment.
8 · REVIEW REMINDER
We use your email address for a one-off reminder to submit a review of your order for the review system we use, provided that you gave us your express consent in accordance with Article 6(1)(a) UK GDPR during or after your order. You can withdraw your consent at any time by sending a message to the controller responsible for data processing.
9 · USE OF SOCIAL MEDIA: SOCIAL PLUGINS
| 9.1 — Facebook plugins (Shariff solution) |
Our website uses so-called social plugins of the social network Facebook, operated by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. To increase the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins, but only using an HTML link. This ensures that no connection is established with Facebook's servers when you access a page of our website that contains such buttons. When you click the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins.
| 9.2 — Google+ plugins (Shariff solution) |
Our website uses social plugins of the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For data protection, the same Shariff HTML link solution is used, which ensures that no direct connection is established with Google's servers until you actively click the button.
| 9.3 — Instagram plugin (Shariff solution) |
Our website uses social plugins of the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. The same Shariff HTML link solution applies, which ensures that no connection is established with Instagram's servers until you actively click the button.
10 · ONLINE MARKETING
| 10.1 — DoubleClick by Google |
This website uses the online marketing tool DoubleClick by Google (Google LLC). DoubleClick uses cookies to display relevant advertisements to users, improve campaign performance reports or prevent a user from seeing the same advertisements more than once. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) UK GDPR. According to Google, DoubleClick cookies do not contain any personal information.
| 10.2 — Google AdWords conversion tracking |
This website uses the online advertising programme Google AdWords and its conversion tracking. We use Google AdWords to draw attention to our attractive offers on external websites. The conversion tracking cookie is set when a user clicks on a Google AdWords advertisement. These cookies generally expire after 30 days and are not used for personal identification. The processing is carried out on the basis of our legitimate interest in accordance with Article 6(1)(f) UK GDPR.
11 · WEB ANALYSIS SERVICES
| Google (Universal) Analytics |
This website uses Google Analytics, a web analysis service provided by Google LLC. Google Analytics uses cookies that enable an analysis of your use of the website. This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures the anonymisation of the IP address by truncation and excludes a direct personal reference.
Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity and provide further services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. A unique, permanent and anonymised ID is assigned on the first visit to the page and set across devices. The user ID does not contain any personal data and does not transmit such data to Google. You can object to the collection and storage of data via the user ID at any time with effect for the future.
12 · RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING
| Facebook Custom Audience (Pixel) |
This website uses the "Facebook Pixel" from Meta Platforms Inc. With express consent, user behaviour can be tracked after users have seen or clicked on a Facebook advertisement. This procedure serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected is anonymous to us. However, the data is stored and processed by Facebook. The processing is carried out only with express consent in accordance with Article 6(1)(a) UK GDPR. Consent to the use of the Facebook Pixel may only be given by users over the age of 13.
| Google AdWords Remarketing |
Our website uses the functions of Google AdWords Remarketing. Google sets a cookie in the browser of your device that automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. The processing is carried out on the basis of our legitimate interest in accordance with Article 6(1)(f) UK GDPR. Further data processing only takes place if you have consented to Google linking your internet and app browsing history to your Google account.
13 · RIGHTS OF THE DATA SUBJECT
13.1 Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data:
Right of access (Article 15 UK GDPR): Right to obtain information about your processed personal data, the purposes of processing, the categories, recipients, planned storage period and more.
Right to rectification (Article 16 UK GDPR): Right to the immediate rectification of inaccurate data and/or completion of incomplete data stored by us.
Right to erasure (Article 17 UK GDPR): Right to request the erasure of your personal data where the conditions of Article 17(1) UK GDPR are met.
Right to restriction of processing (Article 18 UK GDPR): Right to request the restriction of the processing of your personal data.
Right to notification (Article 19 UK GDPR): Right to be informed of all recipients to whom personal data has been disclosed.
Right to data portability (Article 20 UK GDPR): Right to receive your personal data in a structured, commonly used and machine-readable format.
Right to withdraw consent (Article 7(3) UK GDPR): Right to withdraw consent at any time with effect for the future.
Right to complain (Article 77 UK GDPR): Right to lodge a complaint with a supervisory authority.
| 13.2 — Right to object |
| Right to object: Insofar as we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation. If you exercise your right to object, we will cease processing the data concerned. However, further processing remains reserved if we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims. |
| Direct marketing: Where your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you exercise your right to object, we will cease processing the data concerned for direct marketing purposes. |
14 · DURATION OF STORAGE OF PERSONAL DATA
The duration of storage of personal data is based on the respective statutory retention period (e.g. commercial and tax retention periods). After the expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its further storage.
15 · COMPLAINTS
If you have a complaint about the way we handle your personal data, please contact us first at info@lilylondon.uk. If you are not satisfied with our response, you can lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk/.
16 · CONTACT
If you have any questions or wish to exercise your rights, please contact us at:
📧 info@lilylondon.uk
lilylondon.uk