Data Protection Statement

Last updated: July 2026

1. Introduction

At Lilli's Place, we are committed to protecting your personal data and respecting your privacy. This Data Protection Statement explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Lilli's Place is the data controller responsible for your personal data. If you have any questions about this statement or how we handle your data, please contact us at [your contact email].

3. What Data We Collect

We may collect and process the following personal data:

Name and contact details (email address, postal address, phone number)
Order and transaction information
Payment information (processed securely via our payment provider)
Browsing behaviour and preferences on our website
Communications you send to us

4. How We Use Your Data

We use your personal data to:

Process and fulfil your orders
Communicate with you about your orders or enquiries
Send marketing communications (where you have given consent)
Improve our website and services
Comply with our legal obligations

5. Legal Basis for Processing

We process your data on the following legal bases:

Contract: To fulfil orders you have placed with us
Legitimate interests: To improve our services and prevent fraud
Consent: For marketing communications
Legal obligation: To comply with applicable laws

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

7. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request erasure of your data
Object to or restrict processing
Data portability
Withdraw consent at any time

To exercise any of these rights, please contact us at [your contact email].

8. Sharing Your Data

We do not sell your personal data. We may share it with trusted third parties who assist us in operating our website and business (such as payment processors and delivery partners), under strict confidentiality agreements.

9. Cookies

Our website uses cookies to enhance your browsing experience. Please see our Cookie Policy for more information.

10. Changes to This Statement

We may update this Data Protection Statement from time to time. Any changes will be posted on this page with an updated date.

11. Contact Us

If you have any concerns about how we handle your data, or wish to make a complaint, please contact us at [your contact email]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.