Privacy Policy
Privacy Policy
This policy explains what personal information Lily & Sam collects, how we use it, and the rights you have over it. It applies to lilysam.com and to any order placed through this site.
1. Who we are
The data controller is Collective Momentum, trading as Lily & Sam, Poelestraat 48T, 9712 KC Groningen, Netherlands. Company registration number (KVK) 42043867. VAT number NL005452854B82.
You can contact us about anything in this policy at support@lilysam.com
2. What we collect
Information you give us: name, email address, delivery and billing address, phone number, and order details. Payment card details are entered directly with our payment provider and are never stored by us.
Information collected automatically: device type, browser, operating system, IP address, referring site, and the pages you view on our store.
3. How we use it
We use your information to process and deliver your order, send order confirmations and delivery updates, handle returns and refunds, respond to your enquiries, detect and prevent fraud, and improve the store. Where you have opted in, we also use your email address for marketing.
4. Legal basis
We process your data to perform our contract with you (orders and delivery), to meet legal obligations (tax and accounting records), on the basis of our legitimate interests (fraud prevention and improving the store), and with your consent (marketing and non essential cookies).
5. Sharing your information
We share data only where necessary: with our payment provider to take payment, with our fulfilment partner and carriers to deliver your order, with our ecommerce platform to run the store, and with analytics and marketing providers where you have consented. We do not sell your personal data.
6. International transfers
Your order is processed by Collective Momentum in the Netherlands. Some of our providers process data outside the UK and the European Economic Area. Where that happens we rely on adequacy decisions or on standard contractual clauses so that your data keeps an equivalent level of protection.
7. How long we keep it
Order and transaction records are kept for 7 years to meet tax and accounting obligations. Marketing data is kept until you unsubscribe. Analytics data is kept for the period set by the relevant provider.
8. Cookies
We use essential cookies to run the basket and checkout, and analytics and marketing cookies where you consent. You can change your choices at any time through the cookie settings on the site, or by clearing cookies in your browser.
9. Your rights
You have the right to access your data, have it corrected, have it erased, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. To exercise any of these, email support@lilysam.com. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk if you are in the UK, or to the Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl in the Netherlands.
10. Security
The site runs over an encrypted connection and access to personal data is limited to those who need it to do their job. No system is completely secure, but we take reasonable steps to protect your information.
11. Children
Our store is not directed at children and we do not knowingly collect data from anyone under 16.
12. Changes
We may update this policy. The version on this page is always the current one.
13. Contact
Collective Momentum
Poelestraat 48T
9712 KC Groningen
Netherlands
Email: support@lilysam.com
Or use our contact page.