Last Updated: June 2026

Introduction

Welcome to Lilly Loves ("we", "our", "us"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, make a purchase, create an account, subscribe to our newsletter, or otherwise interact with us.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Information You Provide to Us

When you place an order, create an account, subscribe to our newsletter, contact us, or request a custom embroidery service, we may collect:

●       Full name

●       Billing address

●       Shipping address

●       Email address

●       Telephone number

●       Payment information (processed securely through our payment providers)

●       Account login details

●       Order history

●       Information relating to custom embroidery requests

●       Any information you voluntarily provide through contact forms or email communications

Information Collected Automatically

When you visit our website, we may automatically collect:

●       IP address

●       Browser type and version

●       Device information

●       Operating system

●       Referral source

●       Pages viewed

●       Time spent on pages

●       Website usage statistics

●       Cookie and tracking data

How We Use Your Information

We use your personal information to:

●       Process and fulfil orders

●       Provide customer support

●       Manage returns, exchanges, and refunds

●       Deliver personalised products and embroidery services

●       Communicate regarding orders and enquiries

●       Improve our products, services, and website performance

●       Send marketing communications where you have provided consent

●       Prevent fraud and maintain website security

●       Comply with legal and regulatory obligations

Legal Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

●       Performance of a contract

●       Compliance with legal obligations

●       Legitimate business interests

●       Your consent (for marketing communications and certain cookies)

Sharing Your Information

We may share your information with trusted third-party service providers including:

●       Payment processors

●       Shipping and delivery partners

●       Website hosting providers

●       Email marketing platforms

●       Analytics providers

●       Fraud prevention and security services

We only share information necessary for these services to operate and require all providers to protect your data appropriately.

We do not sell your personal information to third parties.

Payment Security

All payment transactions are processed through secure third-party payment providers. We do not store complete credit or debit card details on our servers.

Marketing Communications

If you subscribe to our newsletter or marketing communications, we may send you information about:

●       New product launches

●       Special offers

●       Promotions

●       Events

●       Company updates

You may unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly.

Cookies

Our website uses cookies and similar technologies to:

●       Enable website functionality

●       Remember user preferences

●       Analyse website traffic

●       Improve user experience

●       Support marketing and advertising activities

You can manage cookie preferences through your browser settings.

For more information, please refer to our Cookie Policy.

Data Retention

We retain personal information only for as long as necessary to:

●       Fulfil orders and contractual obligations

●       Meet legal and tax requirements

●       Resolve disputes

●       Enforce agreements

When information is no longer required, it is securely deleted or anonymised.

International Data Transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, appropriate safeguards are implemented to ensure your information remains protected in accordance with applicable data protection laws.

Your Rights

Under UK GDPR, you have the right to:

●       Access your personal data

●       Correct inaccurate information

●       Request deletion of your information

●       Restrict processing

●       Object to processing

●       Withdraw consent at any time

●       Request data portability

●       Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the details below.

Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, disclosure, or alteration.

However, no method of transmission over the internet can be guaranteed to be completely secure.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites. We encourage users to review the privacy policies of any third-party sites they visit.

Children's Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page along with an updated revision date.

Contact Us

If you have any questions regarding this Privacy Policy or how your information is handled, please contact:

Lilly Loves
Website: https://lillyloves.co.uk
Email: contact@lillyloves.co.uk
United Kingdom

If you are not satisfied with our response, you may contact the UK Information Commissioner's Office (ICO) at https://ico.org.uk.