Privacy Policy

Privacy Policy

Last updated: 2026

Introduction

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit or make a purchase from lilysam.com.

Personal Data We Collect

We collect the following categories of personal data:

Data provided directly by the user

  • First name and last name

  • Email address

  • Shipping and billing address

  • Telephone number

  • Payment information, handled exclusively by certified third-party payment providers

Data collected automatically

  • IP address

  • Device and browser type

  • Cookie information

  • Browsing activity on the website, including pages viewed and visit duration

How We Use Your Data

We use your personal data to:

  • Process and complete orders and payments

  • Provide customer support

  • Improve the performance of the website

  • Personalise the user experience, only with your consent

  • Prevent fraudulent activity

  • Manage transactional communications, such as order confirmations and shipping updates

Data Sharing

We do not sell your personal data.

We only share information with partners that are necessary for the operation of our services, including:

  • Payment providers, such as Shopify Payments, Stripe, PayPal or Mollie

  • Carriers and shipping service providers

  • Email and notification service providers

  • Hosting and security platforms

All partners comply with Regulation (EU) 2016/679, also known as the General Data Protection Regulation (GDPR), or apply equivalent data protection measures.

Legal Basis for Processing under Article 6 GDPR

We process your personal data on the following legal bases:

  • Performance of a contract, for example when purchasing products

  • Legal obligations, such as invoicing and accounting

  • Consent, for example for newsletters and non-essential cookies

  • Legitimate interest, such as website security and fraud prevention

User Rights

In accordance with the GDPR, you have the right to:

  • Access your personal data

  • Request correction of your personal data

  • Request deletion of your personal data, also known as the “right to be forgotten”

  • Restrict the processing of your personal data

  • Object to the processing of your personal data

  • Request data portability

  • Withdraw your consent at any time

  • Lodge a complaint with the competent data protection authority

To exercise your rights, you can contact us by email at support@lilysam.com.

Data Retention

We retain:

  • Order-related data for 10 years, in accordance with legal tax obligations

  • Marketing data until consent is withdrawn or for a maximum period of 24 months

  • Technical data, such as cookies and logs, for the period necessary for the purposes stated in this Privacy Policy

Cookies

We use technical, analytical and marketing cookies.

You can manage your cookie preferences through the cookie banner or through your browser settings.

Transfer of Data Outside the EU

Any transfers of personal data outside the European Union are carried out only to countries that have:

  • An adequacy decision from the European Commission; or

  • Standard Contractual Clauses, also known as SCCs

Contact

For any privacy-related request, you can contact us at:

📧 support@lilysam.com
🌐 lilysam.com

Data Controller

The data controller responsible for the processing of personal data is:

Lily & Sam

Lily & Sam is responsible for the processing of personal data collected through lilysam.com, in accordance with Regulation (EU) 2016/679, also known as the General Data Protection Regulation or GDPR.