Privacy Policy

Last Updated: 13 October 2026

This Privacy Policy explains how Lily Packard ("we", "us", or "our") collects, uses, stores, and protects your personal information when you visit www.lilypackard.com, make a purchase, or otherwise interact with our services (the "Services").

We operate this store using Shopify as our e-commerce platform and hosting provider. By using our Services, you acknowledge that you have read and understood this Privacy Policy.

  1. Data Controller and Business Information

Lily Packard, a sole proprietorship registered with the Dutch Chamber of Commerce (KVK) under number 90315626, is the data controller responsible for your personal information under the General Data Protection Regulation (GDPR) and applicable Irish and EU data protection legislation.

Shopify acts as our data processor and service provider.

  1. Information We Collect

A. Information You Provide Directly

We collect personal information that you provide when using our Services, including:

  • Name
  • Billing and shipping address
  • Email address
  • Phone number
  • Payment information, which is processed securely. We do not store full payment card numbers.
  • Order details, including purchases, returns, and customer support enquiries

B. Information Collected Automatically

Using cookies, analytics tools, and tracking technologies, we may collect:

  • IP address
  • Browser type and device information
  • Pages viewed and time spent on the website
  • Cart activity, including items added, removed, or abandoned

C. Information Received from Third Parties

We may receive additional information from:

  • Payment providers
  • Shopify
  • Advertising and marketing partners

We do not buy or sell personal information.

  1. Legal Basis for Processing

Under the GDPR, we process your personal information based on one or more of the following legal grounds:

  • Performance of a contract: to fulfil your orders and provide our Services
  • Legitimate interests: to improve our website, prevent fraud, and support our business operations, where these interests do not override your rights
  • Consent: for marketing communications and non-essential cookies, which you may withdraw at any time
  • Legal obligation: to comply with applicable tax, accounting, and regulatory requirements
  1. How We Use Your Information

A. Processing Your Orders

We may use your information to:

  • Create and manage your customer account
  • Process secure payments
  • Fulfil and deliver your order
  • Provide tracking and order status updates
  • Handle returns and exchanges

B. Providing Customer Support

We may use your information to:

  • Respond to questions, complaints, and product issues
  • Assist with delivery problems
  • Resolve account or payment-related enquiries

C. Improving and Personalising Our Services

We may use your information to:

  • Analyse website performance
  • Improve product offerings and website navigation
  • Display content and recommendations that may be relevant to you

D. Marketing and Advertising

With your consent, we may use your information to:

  • Send newsletters and promotional emails
  • Display personalised or general advertising on and off our website

You may withdraw your consent or unsubscribe at any time by using the unsubscribe link included in our emails or by contacting us.

We may create customer segments or behavioural profiles based on browsing and purchase activity.

You may opt out of profiling by contacting info@lilypackard.com.

E. Fraud Prevention and Security

We may use your information to:

  • Detect and prevent fraudulent transactions
  • Protect customer accounts
  • Maintain payment and website security

F. Legal Compliance

We may use or disclose your information to comply with:

  • Dutch and EU tax and accounting obligations
  • Consumer protection laws
  • Law enforcement or government requests, where legally required
  1. How We Share Your Information

We only share personal information where necessary to operate our business, provide our Services, or comply with legal obligations.

A. Shopify

Shopify hosts our online store and may provide payment processing, analytics, security, and fraud-detection services.

B. Service Providers

We may share limited personal information with:

  • Payment processors
  • Shipping and logistics partners
  • IT and analytics providers
  • Email and marketing platforms

These providers may only use your information to provide services on our behalf and are contractually bound to process your data in accordance with the GDPR.

C. Marketing Partners

We may share hashed or pseudonymised identifiers with advertising partners, such as Meta, so they can help us measure campaigns and display relevant advertisements.

These partners process information according to their own privacy policies.

D. Legal Obligations

We may disclose information to government authorities, regulators, courts, or law enforcement agencies where required by Irish, Dutch, or EU law.

We do not sell or trade personal information.

  1. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to:

  • Enable essential website features, including checkout, preferences, and login functions
  • Analyse website usage and performance
  • Support advertising, retargeting, and campaign measurement

You can control cookies through your browser settings or through our cookie consent banner when visiting www.lilypackard.com.

In accordance with the GDPR and the ePrivacy Directive, non-essential cookies are only placed with your consent.

Disabling certain cookies may affect the availability or functionality of parts of our website.

  1. Data Storage and Security

We use reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of electronic transmission or storage is completely secure.

Your personal information may be stored:

  • On secure servers within the European Economic Area (EEA)
  • By Shopify or its service providers in Canada, the United States, or other regions in accordance with Shopify's Data Processing Addendum, Standard Contractual Clauses, and other applicable international data transfer safeguards

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.

  1. International Data Transfers

Some of our service providers, including Shopify, payment providers, analytics providers, and advertising partners, may process personal information outside the EEA.

Where personal information is transferred outside the EEA, we rely on:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Shopify's international data-transfer protections
  • Other appropriate safeguards as required under the GDPR
  1. Your Rights Under the GDPR

Under the GDPR, you have the right to:

  • Access the personal information we hold about you
  • Request the correction of inaccurate or incomplete information
  • Request the deletion of your personal information ("right to be forgotten")
  • Restrict the processing of your personal information
  • Object to the processing of your personal information, including for direct marketing
  • Request the portability of your personal information to another service provider
  • Withdraw your consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at info@lilypackard.com.

We may ask you to verify your identity before processing your request. We will respond to your request within 30 days, as required by the GDPR.

If you believe that we have not handled your personal information correctly, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie or the Dutch Autoriteit Persoonsgegevens (AP) at www.autoriteitpersoonsgegevens.nl.

  1. Children's Privacy

Our Services are not intended for children under the age of 16.

We do not knowingly collect personal information from children. If you believe that a child has submitted personal information to us, please contact us so that we can investigate and delete the information where appropriate.

  1. Third-Party Links

Our website may contain links to external websites or third-party services.

We are not responsible for the content, security, availability, or privacy practices of third-party websites.

We recommend reviewing the privacy policies of third-party websites before providing them with any personal information.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The "Last Updated" date at the top of this Privacy Policy reflects the most recent version.

Where required by law, we will notify customers of significant changes.

  1. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using the details below:

Customer Service Hours: Monday to Friday: 9:00 AM – 6:00 PM Saturday and Sunday: 9:00 AM – 4:00 PM (IST/GMT)

Email: info@lilypackard.com

Customer support is provided from The Netherlands, with dedicated English-language assistance available for Irish customers.

We aim to respond to all enquiries within 24 hours on business days.