Privacy Policy

This Privacy Policy sets out how Lily & Luce ("the Site", "we", "us", or "our") collects, uses, and shares personal information when you visit our website, use our services, or buy something through our online store.

Throughout this policy, "you" and "your" mean any person who visits our site, uses our services, gets in touch with us, or purchases from our store.

By using our website and services, you confirm that you've read and understood this Privacy Policy and agree to your information being collected and used as described here. If you don't agree with it, please don't use our website or services.

Updates to This Privacy Policy

From time to time we may revise this Privacy Policy to reflect changes in how we operate, in the law, or in the way we handle data.

When we make changes, the updated version goes live on this page with a new revision date. Where the law requires it, we'll take extra steps to let users know about significant updates.

Collection and Use of Personal Information

To run our store and provide our services, we gather personal information from a range of sources. Exactly what we collect depends on how you engage with our website.

We may use that information to:

Provide products and services
Process orders and payments
Stay in touch with customers
Improve how our website and services work
Meet our legal obligations
Keep our website and its users secure

Types of Personal Information We Collect

What we collect may include details that identify you directly, or information that can reasonably be linked to you.

Information You Provide Directly

As you use our website or services, you might share things like:

Full name
Email address
Phone number
Billing address
Shipping address
Payment confirmation details
Account login details
Messages with our support team

Some features only work if certain details are provided. Choosing not to share them may limit what you can do on the site.

Automatically Collected Information

When you browse our site, some information is gathered automatically through technologies like cookies, pixels, and similar tools.

This can include:

Device information
Browser type
IP address
Network connection details
How you use the website
How you interact with pages and services

This helps us understand how the site is performing and make the experience better.

Information Received from Third Parties

We may also receive information about you from partners or service providers who help us run things.

These can include:

E-commerce platforms such as Shopify
Payment processors handling transactions
Marketing and analytics providers
Logistics and fulfilment partners
Social media platforms such as Instagram, where you interact with our profile or ads

Payment providers collect payment details (such as card or bank information) directly in order to process transactions and complete orders.

Anything we receive from third parties is handled in line with this Privacy Policy.

How We Use Your Personal Information

Your information may be used for a few operational reasons, including:

Providing Products and Services

We use personal data to process purchases, manage accounts, ship orders, handle returns and exchanges, and communicate about transactions.

Shopify may also process certain information to support checkout and related services, under its own privacy policies.

Marketing and Advertising

Where your consent is required, we may send marketing messages by email, SMS, or other channels.

We may also use certain information to tailor advertising and improve campaigns on our own site or on third-party platforms.

Security and Fraud Prevention

We may use personal information to spot suspicious activity, look into fraud, or protect our services and users from unauthorized actions.

You're responsible for keeping your account login details confidential. If you think someone has accessed your account without permission, contact us straight away.

Customer Support and Service Improvement

We use personal information to answer questions, offer help, and improve what we do.

This keeps the customer experience reliable and helps us build a better relationship with the people who use our site.

Cookies and Tracking Technologies

Like most websites, ours uses cookies and similar tracking technologies.

Cookies help us:

Improve how the website works
Remember your preferences
Understand how the site is used
Boost performance and the overall experience

You can find more about Shopify-related cookies here:

https://www.shopify.com/legal/cookies

Most browsers accept cookies automatically, but you can change your settings to block or delete them. Keep in mind that turning cookies off may affect how parts of the site work.

Our website doesn't currently respond to "Do Not Track" browser signals.

For more on Do Not Track, you can visit:

http://www.allaboutdnt.com

Disclosure of Personal Information

In some situations, we may share personal information with third parties where it's needed to run our services.

This can include sharing with:

Payment processors
Shipping and fulfilment partners
Customer support providers
Data analytics providers
Marketing partners

We may also share information where the law, a legal process, or a regulator requires it. And information may be shared within our company structure or with affiliates where it's needed for business operations.

We do not sell your personal information for money. Where the sharing of information with advertising partners counts as a "sale" or "sharing" under certain state privacy laws, you can opt out on our Your Privacy Choices page.

Third-Party Websites

Our site may link to external websites or services we don't operate, including our Instagram profile.

If you follow a link to another site, we'd encourage you to read their privacy policy and terms. We're not responsible for the privacy practices or content of third-party websites.

Children's Privacy

Our services aren't aimed at children, and we don't knowingly collect personal information from anyone under 16.

If a parent or guardian discovers that a child has given us personal information, they can contact us to have it removed.

Data Security and Retention

We put appropriate security measures in place to guard personal information against unauthorized access, misuse, or loss.

That said, no system is ever completely secure, and we can't guarantee absolute protection for information sent over the internet.

We keep personal data only for as long as we need it to:

Maintain accounts
Provide services
Meet legal requirements
Resolve disputes
Enforce our agreements and policies

Your Privacy Rights

Depending on where you live, you may have certain rights over your personal data. For customers in the United States, these rights may arise under state privacy laws — such as the California Consumer Privacy Act (CCPA/CPRA) and similar laws in other states — and may include:

The right to access the personal information we hold about you
The right to request deletion of your personal information
The right to correct inaccurate data
The right to data portability in certain cases
The right to restrict processing of your information
The right to opt out of the sale or sharing of your personal information
The right to withdraw consent where consent is what we rely on
The right not to be discriminated against for exercising your privacy rights

You can also unsubscribe from marketing messages using the link in our emails.

Please note that essential messages about your orders or account may still be sent even after you opt out of marketing.

Exercising Your Rights

To exercise your privacy rights, get in touch using the contact details below.

To handle your request, we may need to confirm your identity by asking for certain information.

Where the law allows, an authorized representative can make a request on your behalf.

Complaints

If you believe your personal information hasn't been handled properly, please contact us directly.

Depending on where you live, you may also have the right to lodge a complaint with your state's attorney general or privacy regulator — in California, the California Privacy Protection Agency (CPPA).

Data Processing Location

Personal information collected through our website may be processed and stored in the United States and in other countries where our service providers operate.

By using our services, you acknowledge that your information may be transferred to and processed in those locations, in line with applicable laws and this Privacy Policy.