At LilAura UK, we take your privacy seriously. This Privacy Notice explains how we collect, use, and share your personal information when you visit lilaura.uk, use our WhatsApp Concierge, or make a purchase through our verified Etsy storefront. We process all personal data in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who Is the Data Controller?
For the purposes of data collected directly via our website inquiries and styling services, LilAura UK acts as the Data Controller. For data processed during a transaction, we act as a joint independent Data Controller alongside Etsy, who processes your secure payment and passes us only the details required to fulfill your order.
2. What Information We Collect
We minimize the data we collect to only what is strictly necessary. The information we process depends on how you interact with us:
- Website Inquiries: When you use our contact form (powered securely by Web3Forms), we collect your name, email address, and the contents of your message.
- WhatsApp Concierge: If you utilize our styling service, we collect your phone number and any preferences or images you voluntarily share with us to assist with your request.
- Order Fulfillment: When you purchase via our Etsy shop, Etsy shares your name, delivery address, and email address with us so that we can dispatch your jewellery. We never see, collect, or store your credit card or payment details.
- Local Device Data: Our website uses your browser's local storage to remember items in your cart, your wishlist, and recently viewed products. This data lives purely on your device and is not transmitted to our servers.
3. Our Lawful Basis for Processing
Under UK GDPR, we must have a valid lawful basis to process your data:
- Contractual Necessity: We process your shipping and contact details because it is necessary to fulfill the contract of sale and deliver your items.
- Legitimate Interests: We process your inquiry data to provide customer support, and we may retain purchase history to operate our Treats Loyalty Scheme.
- Legal Obligation: We are required by UK law (HMRC) to retain basic sales and tax records for up to 7 years.
4. Information Sharing & Third Parties
We do not sell your personal data to data brokers or third-party marketers. We only share information with trusted third parties necessary to operate our business:
- Etsy: To process your orders and handle financial transactions securely.
- Web3Forms: To securely route your website contact form submissions to our support email.
- Meta (WhatsApp): To facilitate direct, end-to-end encrypted concierge communication.
- Delivery Partners: Such as Royal Mail or designated couriers, solely to deliver your package.
5. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this notice. General customer service emails and WhatsApp chats are periodically deleted once the inquiry is resolved. Statutory tax and transaction records are securely retained for 7 years to comply with UK law.
6. Your Data Protection Rights
Under UK law, you possess absolute rights over your personal data. You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete information.
- Erasure (Right to be Forgotten): Request that we delete your personal data (subject to our legal obligations to retain tax records).
- Restriction: Ask us to restrict the processing of your information.
To exercise any of these rights, please contact us directly at shop@lilaura.uk. We will respond to all requests within 30 days.
7. Changes to This Notice
We may update this Privacy Notice periodically to reflect changes in our practices or legal requirements. The most current version will always be posted on this page.