Privacy Policy
We take your privacy seriously. Here’s exactly what we collect, why, and how we protect it.
Last updated: March 2026
1. What We Collect
Account & Purchase Data
When you place an order or create an account, we collect your name, email address, delivery address, phone number, and payment details (processed securely by Stripe — we never store full card numbers).
Website Interactions
Pages visited, clicks, search queries, and session data via Google Analytics. This is anonymised and used only to improve the site.
Device Information
IP address, browser type, device type, and approximate location to ensure the site works correctly and securely.
2. How We Use It
- Process and fulfil your orders
- Send order confirmations, shipping updates and support responses
- Improve our products and website experience
- Send marketing emails — only if you’ve opted in, unsubscribe any time
- Prevent fraud and maintain security
- Comply with UK legal obligations
3. Legal Basis (UK GDPR)
- Contract — processing your order and delivering it
- Legitimate interests — fraud prevention, analytics, improving the site
- Consent — marketing emails and optional cookies
- Legal obligation — tax records, regulatory compliance
4. Who We Share It With
We do not sell your data. We share only what’s necessary with trusted third parties:
- Stripe — payment processing
- Royal Mail / DPD — order fulfilment and delivery
- Google Analytics — anonymised site analytics
- Syncee — dropshipping supplier management
- Mailchimp — email marketing (opted-in subscribers only)
5. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability — receive your data in a portable format
- Withdraw consent at any time (e.g. unsubscribe from marketing)
To exercise any of these rights, email hello@lilybella.co.uk. We’ll respond within 30 days.
6. Data Retention
Order data is retained for 7 years (UK tax law). Marketing consent records are kept until you unsubscribe. Analytics data is retained for 26 months then automatically deleted.
7. Cookies
We use essential, analytics and (optionally) marketing cookies. See our full Cookie Policy for details and how to manage your preferences.
8. Contact
Data controller: Lily Bella Ltd. Questions or requests: hello@lilybella.co.uk. You also have the right to lodge a complaint with the ICO.