Privacy policy

Privacy Policy

Last updated: 23 July 2025

At Lillybow ("we", "us", or "our"), protecting your privacy is our fundamental commitment. This Privacy Policy outlines how we collect, utilize, and safeguard your personal information when you visit or engage with our website — https://lillybow.com — or when you make purchases, explore our content, or communicate with us through any other means related to our website (collectively referred to as the "Services").

In this policy, "you" refers to any individual accessing or utilizing the Services, whether as a customer, visitor, or other user whose personal data we may process.

We strongly encourage you to read this Privacy Policy thoroughly to understand how your information is managed.

Updates to This Privacy Policy

Periodically, we may revise this Privacy Policy to reflect changes in our practices, legal updates, or operational requirements. When any changes occur, we will:

• Publish the updated policy on our website;
• Update the "Last updated" date shown above;
• Take additional action to notify you, where legally required (e.g. via email or prominent on-site notice).

What Personal Information We Collect & Why

To deliver and enhance our Services, we collect certain personal data about you from various sources depending on how you interact with us. These sources include:

• Information you provide directly (e.g. during checkout or customer support inquiries);
• Information collected automatically (e.g. through cookies and device tracking);
• Information received from third-party platforms (e.g. payment processors or delivery services).

We may use your personal information to:

• Process your orders and deliver our products to you;
• Provide customer service and support;
• Enhance and personalize your shopping experience;
• Comply with legal obligations;
• Enforce our Terms of Service;
• Protect our platform, users, and rights.

What Personal Information We Collect

The personal information we gather depends on how you interact with our website and utilize our services. When we refer to "personal information," we mean any data that can directly or indirectly identify you or be associated with you. Below we outline the categories and types of information we collect.

Information You Provide Directly

When you interact with us or use certain features of our services, you may provide personal details such as:

• Contact information — including your full name, postal address, email address, and telephone number.
• Order details — such as billing and shipping addresses, payment confirmation, and relevant contact details.
• Account credentials — including your chosen username, password, and security-related information for account protection.
• Customer support correspondence — any details you voluntarily share when you reach out to us, for instance, via our contact forms or email support.

Certain services or features may require you to provide this information. If you choose not to share these details, some functionalities of the website (like completing a purchase) may be unavailable to you.

Information We Collect Automatically

In addition to information you provide, we may automatically gather data about how you use our website and services ("Usage Data"). This may be collected through cookies, tracking pixels, or similar technologies. Usage Data may include:

• Device details (e.g., type of device or operating system).
• Browser information (e.g., browser type and version).
• IP address and general geolocation.
• Information about your network connection.
• Details of how you interact with our website, including pages visited, time spent, and navigation patterns.

Information We Receive from Third Parties

In some cases, we may collect personal data about you from third-party sources. This may include data shared with us by partners and service providers who support our operations, such as:

• Platform providers – such as Shopify, which powers our website and provides hosting and technical infrastructure.
• Payment processors – who handle your payment securely on our behalf (e.g. credit/debit card details, billing address) to complete your order and deliver the products or services you requested.
• Marketing or analytics partners – who may collect information when you visit our site, engage with our emails, or view our advertisements.

Any personal data we obtain from third parties will be handled in line with this Privacy Policy.

How We Use Your Personal Information

We use the personal information we collect to deliver and improve our services. Below is an overview of how we use your data and the legal bases that apply under the UK GDPR:

1. To Provide Products and Services

We use your information to fulfil our contract with you. This includes:

• Processing and confirming your orders
• Taking payments securely
• Delivering products
• Managing your account
• Handling returns and exchanges
• Sending you service-related notifications and updates

2. For Marketing and Advertising (with Consent or Legitimate Interest)

We may use your information to send marketing communications (e.g. newsletters, offers, updates) by email, SMS, or post. You can opt out at any time by using the unsubscribe link in our emails or by contacting us.

We may also personalize the marketing content and advertising you see on our website or elsewhere online, based on your browsing or order history.

3. To Ensure Security and Prevent Fraud

We use your information to detect, prevent, and investigate fraud, misuse, or other suspicious activity on our Site.

If you register for an account, you are responsible for keeping your login details secure. If you believe your account has been compromised, please contact us immediately.

4. To Improve Our Website and Customer Support

We use your data to enhance your experience and to provide efficient and personalized support. This includes reviewing interactions with customer service, analyzing website usage, and using feedback to improve our offerings.

Cookies

Like many websites, Lillybow uses cookies and similar technologies to enhance your experience on our Site. Cookies are small data files placed on your device that help us operate, analyze, and personalize our services.

We use cookies for purposes such as:

• Enabling core website functionality (e.g., remembering items in your cart)
• Improving your browsing experience by remembering your preferences and settings
• Understanding website usage through analytics tools
• Delivering relevant advertising, both on our Site and elsewhere online

For detailed information about the specific cookies used by our platform provider, Shopify, please visit: https://www.shopify.com/legal/cookies

Managing Cookies

Most internet browsers accept cookies automatically, but you can manage or disable them at any time through your browser settings. Please note that disabling cookies may affect how certain parts of the website function. Some features may become limited or unavailable.

How We Share Your Personal Information

We take your privacy seriously and only share your personal data when necessary, and always in accordance with this Privacy Policy. Your information may be disclosed in the following situations:

1. To Trusted Service Providers

We share your data with third-party vendors who perform services on our behalf, such as:

• Payment processors
• Order fulfillment and shipping partners
• Cloud storage and web hosting providers
• Technical support and IT management
• Marketing and analytics partners

These third parties are only given access to the data they need and are required to handle it securely.

2. For Legal and Business Reasons

We may disclose your personal data:

• If we are involved in a business transfer, merger, acquisition, or restructuring
• To comply with legal obligations or government requests (e.g. subpoenas or court orders)
• To protect our rights, users, or others — including enforcing our terms or investigating potential fraud

Children's Privacy

Lillybow does not knowingly collect or store personal information from individuals under the age of 16. Our Services are not directed toward children, and we do not permit their use by anyone under the applicable age of consent.

If you believe that a child has provided us with personal data without parental consent, please contact us at sales@lillybow.com. We will promptly review and, if appropriate, delete such data in accordance with legal obligations.

Security and Retention of Your Information

At Lillybow, we are committed to safeguarding your personal information. However, no security system is completely foolproof. While we implement reasonable technical and organizational measures to protect your data, we cannot guarantee absolute security.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected. Once your information is no longer needed for these purposes, we securely delete or anonymize it.

Your Rights

Depending on your location and applicable data protection laws (such as the UK GDPR or EU GDPR), you may be entitled to one or more of the following rights:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: If any information we have about you is incorrect or incomplete, you can request that we correct or update it.
• Right to Erasure ("Right to Be Forgotten"): You may ask us to delete your personal information, subject to certain legal obligations.
• Right to Data Portability: Where applicable, you may request that your personal data be provided in a structured format.
• Right to Restrict Processing: You may request that we restrict how we use your data.
• Right to Object: You can object to certain uses of your data, such as profiling for marketing purposes.
• Right to Withdraw Consent: If we rely on your consent to process your personal information, you may withdraw it at any time.

Exercising Your Rights

You can submit any data rights request by emailing us at sales@lillybow.com. We may need to verify your identity before we act on your request.

We will respond to your request within the timeframes required by applicable law, and we will never discriminate against you for exercising your rights.

International Users

Please be aware that your personal information may be transferred to, stored in, and processed in countries outside of your country of residence. This includes transfers to and processing by staff, service providers, and partners located in countries where data protection laws may differ from those in your jurisdiction.

By using our Services, you acknowledge that your information may be transferred and processed in accordance with this Privacy Policy.