PRIVACY POLICY

PRIVACY POLICY – LILY AND MAEVE BELFAST

1) Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1

We take the protection of your privacy very seriously and appreciate your visit to our website. This Privacy Policy explains how Lily and Maeve Belfast collects, processes and protects your personal data when you visit our online store or make a purchase.

Personal data refers to any information that can be used to identify you as an individual.

1.2

The data controller responsible for processing personal data on this website (in accordance with the UK GDPR and EU GDPR, where applicable) is:

Lily and Maeve Belfast
Customer Service: info@lilyandmaeve.com

The data controller is the natural or legal person who determines the purposes and means of processing personal data.

1.3

This website uses SSL/TLS encryption for security purposes. You can recognise this by the “https://” in your browser’s address bar and the lock symbol.

2) Data Collection When Visiting Our Website

When you visit our website without registering an account or placing an order, we collect only the data transmitted by your browser to our server (server log files), including:

  • Pages visited

  • Date and time of access

  • Amount of data transferred

  • Referrer URL (how you found us)

  • Browser type and version

  • Operating system

  • IP address (anonymised where possible)

This processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in ensuring the stability, security and functionality of our website.

3) Cookies

We use cookies to improve user experience, enable website functionality and analyse website traffic.

  • Session cookies are deleted when you close your browser.

  • Persistent cookies remain until they expire or are manually deleted.

Some cookies are essential for the ordering process (e.g. saving items in your shopping cart).
We may also work with third-party providers for marketing and analytics purposes.

You can manage cookie settings via your browser (Chrome, Safari, Firefox, Edge, Opera).
Disabling cookies may limit certain website features.

4) Contact

If you contact us by email or contact form, the data you provide will be stored for the purpose of responding to your enquiry.

  • Legal basis: Article 6(1)(f) GDPR (legitimate interest)

  • If the enquiry relates to an order: Article 6(1)(b) GDPR

5) Customer Accounts and Order Processing

When you create a customer account or place an order, we collect and process personal data to:

  • Process and ship your order

  • Provide customer support

  • Fulfil legal obligations

After order completion, your data is retained in accordance with applicable tax and commercial laws.

6) Email Marketing

  • Newsletter: sent only with your explicit consent via a double opt-in process (Article 6(1)(a) GDPR).

  • Existing customers: we may send offers for similar products based on legitimate interest (Article 6(1)(f) GDPR).

You can unsubscribe at any time using the link provided in each email.

7) Data Sharing for Order Fulfilment

We only share your personal data where necessary to process and deliver your order, including with:

  • Shipping and delivery providers

  • Payment processors (e.g. PayPal, Klarna, credit/debit card providers)

  • Fraud prevention services

All partners process data in compliance with GDPR regulations.

8) Payment Service Providers

We offer payment via PayPal, Klarna and major credit/debit cards.
Each payment provider processes your data according to its own privacy policy, which we recommend reviewing.

9) Social Media Plugins

We use Shariff integration for social media platforms such as Facebook and Instagram.
No personal data is transferred unless you actively click on a social media button.

10) Online Marketing and Analytics

We use the following services, subject to consent where required:

  • Google Analytics (with IP anonymisation)

  • Facebook Pixel for advertising optimisation

  • Google Ads Conversion Tracking

You may opt out via your browser settings or the respective provider’s opt-out tools.

11) Your Data Protection Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Withdraw consent at any time

  • Object to direct marketing

  • Lodge a complaint with a data protection authority

To exercise your rights, contact: info@lilyandmaeve.com

12) Data Retention Period

We retain personal data only for as long as necessary:

  • For the purpose for which it was collected

  • To comply with legal or contractual obligations

  • Until consent is withdrawn (where applicable)

Once the retention period expires, your data is securely deleted.