Privacy Policy

Last Updated: March 7, 2025
This Privacy Policy explains how LILY & LACE (the "Site," "we," "our," or "us") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase on lilyandlace.com (the "Site") or when you communicate with us about the Site (collectively, the "Services").

For the purposes of this Privacy Policy, "you," "your," and "yours" refer to the user of the Services, whether a customer, website visitor, or any other person whose information we have collected in accordance with this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last Updated" date, and take any other measures required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from various sources as described below. The information we collect and use depends on how you interact with us.

In addition to the specific uses listed below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce the terms of service, and protect or defend the Services, our rights, and those of our users or other individuals.

Personal Information We Collect

The types of personal information we obtain depend on your interaction with our Site and your use of our Services. When we use the term "personal information," we refer to data that allows us to identify you, describes you, or may be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You

The information you provide to us directly through our Services may include:

  • Contact Information: your name, address, phone number, and email address.
  • Order Information: name, billing address, shipping address, payment confirmation, email, and phone number.
  • Account Information: username, password, security questions, and other data used for account security.
  • Customer Service Information: any information you choose to include in your communications with us (e.g., messages sent through the Services).

Certain features of the Services require you to provide specific personal information. You may choose not to provide this information, but doing so may limit your access to these features.

Information We Collect About Your Use

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). For this, we may use cookies, pixels, and similar technologies ("Cookies").

Usage Data may include:

  • Your method of accessing the Site and your account.
  • Use of Site features.
  • Information about your device, browser, network connection, and IP address.

Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including vendors and service providers acting on our behalf, such as:

  • Companies that support our Site and Services, such as Shopify.
  • Our payment processors, who collect payment information (e.g., bank account details, credit card information, billing address) to process your payment and fulfill your orders.

When you visit our Site, open or click on the emails we send you, or interact with our Services or ads, we (or our third-party partners) may automatically collect certain information using online tracking technologies like pixels, web beacons, software development kits, third-party libraries, and cookies.

Any information obtained from third parties will be processed in accordance with this Privacy Policy. Please also review the "Website and Third-Party Links" section.

How We Use Your Personal Information

We use your personal information for several purposes, including:

Providing Products and Services:

  • Fulfilling your order, processing payments, organizing delivery, and facilitating returns or exchanges.
  • Managing your account and sending notifications related to your purchases and transactions.
  • Improving your user experience by allowing Shopify to link your account to other Shopify services.

Marketing and Advertising:

  • Sending you promotions and advertisements via email, SMS, or mail.
  • Displaying personalized ads on our Site and other sites.
  • If you reside in the EEA, this use is based on our legitimate interest under Article 6(1)(f) of the GDPR.

Security and Fraud Prevention:

  • Detecting and preventing fraudulent or malicious activities.
  • You are responsible for the security of your login information. Contact us immediately if you suspect any compromise.
  • This use is based on our legitimate interest under Article 6(1)(f) of the GDPR.

Communication and Service Improvement:

  • Providing customer support and improving our Services.
  • This is based on our legitimate interest under Article 6(1)(f) of the GDPR.

Cookies

Like many websites, we use cookies. For more information about the cookies used via Shopify, please refer to:
👉 Shopify Cookie Policy

You can configure your browser to refuse or delete cookies, but this may affect some features of the Site.

How We Share Your Personal Information

In certain circumstances, we may disclose your personal information to third parties, including:

  • Vendors and third-party service providers (e.g., IT management, data analytics, customer support, cloud storage, delivery).
  • Marketing partners to offer you services and advertisements.
  • Other third parties if you provide your consent to share your information.
  • Our affiliates or group companies, in our legitimate interest to manage our business.
  • In connection with a business transaction (e.g., merger, acquisition, bankruptcy).
  • To comply with legal obligations (e.g., responding to a subpoena, judicial investigation).

We have shared certain categories of personal information in accordance with the "How We Collect and Use Your Personal Information" and "How We Share Personal Information" sections.

Category | Categories of Recipients

  • Identifiers: basic contact information and certain order and account details.

    • Vendors and third parties providing services on our behalf (e.g., ISPs, payment processors, order processing partners, customer service partners, and data analytics providers).
    • Business and marketing partners.
    • Affiliates.

  • Commercial Information: order details, purchase information, and customer service data.

  • Internet or Similar Network Activity: usage data.

  • Geolocation Data: locations determined by an IP address or other technical measures.

We do not use or disclose sensitive personal information without your consent or for the purpose of inferring characteristics about you.

With your consent, we share personal information for advertising and marketing purposes, as described in the corresponding sections.

Third-Party Websites and Links

Our site may contain links to websites or other online platforms operated by third parties. If you follow these links to non-affiliated sites or sites outside of our control, you should review their privacy and security policies, as well as their terms of use. We do not guarantee or are responsible for the privacy or security of these sites, including the accuracy, completeness, or reliability of the information they contain. Any information you provide in public or semi-public spaces, including those shared on third-party social media platforms, may also be visible to other users of the Services and/or these third-party platforms, without restriction on our use or that of any third party. The inclusion of links to these sites does not necessarily imply endorsement of their content or their owners or operators, unless specifically mentioned in our Services.

Children's Data

Our Services are not intended for children, and we do not knowingly collect personal information from minors. If you are a parent or guardian of a child who has provided us with personal information, you can contact us using the details below to request the deletion of this information.
As of the effective date of this privacy policy, we are not aware of the "sale" or "sharing" (as defined by applicable law) of personal information concerning individuals under the age of 16.

Security and Retention of Your Data

Please note that no security measure is perfect or impenetrable, and we cannot guarantee "absolute security." Furthermore, any information you transmit to us may not be secure during its transmission. We advise against using unsecured channels to send us confidential or sensitive information.
The retention period of your personal information depends on several factors, including whether we need it to maintain your account, provide the Services, comply with our legal obligations, resolve disputes, or enforce our contracts and policies.

Your Rights

Depending on your place of residence, you may have the right to exercise all or some of the following rights regarding your personal information. However, these rights are not absolute and only apply under certain circumstances. We may refuse your request if the law allows us to do so.

  • Right of Access: You can request to view the personal information we hold about you, including details about how it is used and shared.
  • Right to Deletion: You can request the deletion of the personal information we hold about you.
  • Right to Correction: You can request the correction of inaccurate personal information we hold about you.
  • Right to Data Portability: You can request to receive a copy of your personal information and have it transferred to a third party, under certain conditions.
  • Right to Opt-Out of Sale, Sharing, or Targeted Advertising: You can request that we do not "sell" or "share" your personal information or refuse its processing for targeted advertising, in accordance with applicable laws. If you visit our site with the Global Privacy Control (GPC) option activated, depending on your location, we will treat it as an automatic request to opt-out of the "sale" or "sharing" of your information for the device and browser you are using.
  • Right to Restrict Processing: You can request that we stop or limit the processing of your personal information.
  • Right to Withdraw Consent: When the processing of your data is based on your consent, you can withdraw it at any time.
  • Right to Appeal: If we refuse your request, you have the right to challenge our decision by responding directly to us.
  • Communication Preferences Management: We may send you promotional emails, which you can opt-out of at any time by using the unsubscribe option in these emails. However, we will continue to send you non-promotional emails related to your account or orders.

You can exercise these rights by following the instructions on our site or by contacting us using the details below.
We will not discriminate against you for exercising your rights. For security reasons, we may ask you to verify your identity before responding to your request (e.g., email address or account details). Depending on the applicable law, you may designate an authorized representative to exercise these rights on your behalf. Before accepting a request from a representative, we will ask for proof of authorization and may require you to confirm your identity directly with us. We will respond to your request within the timeframes required by applicable law.

Complaints

If you have a complaint regarding the processing of your personal information, please contact us using the details below.
If our response is unsatisfactory, you may, depending on your place of residence, appeal our decision or file a complaint with the local data protection authority. For the European Economic Area (EEA), you can consult the list of competent authorities [here].

International Users

Your personal information may be transferred, stored, and processed outside of your country of residence, including by employees, service providers, and third-party partners located in other countries.
If we transfer your personal information outside of Europe, we will use recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses or an equivalent contract issued by the competent authority of the United Kingdom, unless the destination country is recognized as having an adequate level of protection.

Contact

If you have any questions about our privacy policy or wish to exercise your rights, please contact us:
📧 Email: contact@lilyandlace.com
📍 Postal Address: 2b Rue Choiseul, Ferney-Voltaire, 01210, France

Unless otherwise stated, we are the data controller for your personal information under applicable data protection laws.