Privacy policy

At LILLY SCHOENEN, we value your privacy. We process personal data carefully, securely, and in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.

This Privacy Policy explains which personal data we collect, why we process it, how long we retain it, with whom we share it, and what rights you have.

By using our website and placing an order, you acknowledge and agree to this Privacy Policy.

1. What personal data do we process?

When you visit our online store or place an order, we may process the following personal data, among other information:

  • First and last name

  • Billing and shipping address

  • Email address

  • Telephone number

  • Payment details (processed by our payment partners)

  • Order history

  • IP address

  • Browser information

  • Device information

  • Information about your use of our website

  • Correspondence with our customer service team

We only collect personal data that is necessary to provide our services.

2. Why do we process your personal data?

We process your personal data in order to:

  • process orders;

  • ship products;

  • process payments;

  • provide customer service;

  • respond to enquiries;

  • process returns and warranty claims;

  • prevent fraud;

  • improve our website;

  • analyse statistics;

  • display personalised advertisements (where you have given your consent);

  • comply with legal obligations.

3. Legal basis for processing

We only process personal data where there is a valid legal basis for doing so.

These legal bases include:

  • performance of a contract;

  • compliance with a legal obligation;

  • our legitimate interests;

  • your consent (for example, for marketing cookies).

4. Orders and payments

When you place an order, we process your personal data in order to fulfil the contract with you.

For payment processing, we use, among others:

  • Shopify Payments

  • PayPal

These payment providers process your payment details independently in accordance with their own privacy policies.

We never receive your full payment card details.

5. Dropshipping through third parties

Our online store operates according to the dropshipping model.

This means that products are shipped directly from our suppliers to you.

To fulfil your order, we only share the information that is necessary for this purpose, such as:

  • name;

  • shipping address;

  • telephone number (if required by the carrier);

  • email address (if necessary for delivery).

Our suppliers may only use this information to process and ship your order.

6. International transfers of personal data

Because we work with international service providers and suppliers, personal data may be processed outside the European Economic Area (EEA).

This may include:

  • Shopify

  • Google

  • Meta

  • PayPal

  • Suppliers

  • Logistics partners

Where personal data is processed outside the EEA, we aim to work only with parties that implement appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission or other legally permitted transfer mechanisms.

Despite these safeguards, privacy laws in some countries may differ from European regulations.

7. Google Analytics 4

Our website uses Google Analytics 4.

This service allows us to collect statistical information about the use of our website, such as:

  • pages visited;

  • duration of visits;

  • devices used;

  • browser information;

  • traffic sources.

This information helps us improve our online store.

Where possible, IP addresses are anonymised, and data is only processed where consent has been provided, insofar as required by law.

8. Meta Pixel

Our online store uses the Meta Pixel.

This enables us to:

  • measure advertising performance;

  • create audiences;

  • optimise advertisements;

  • show visitors more relevant advertisements on Facebook and Instagram.

Meta may link this data to your Meta account if you are logged in.

This processing only takes place where you have provided consent through our cookie banner.

9. Cookies

Our website uses cookies.

Cookies are small text files that are stored on your device.

We use, among others:

Functional cookies

These cookies are necessary for the proper functioning of our online store.

Analytical cookies

These cookies help us understand how our website is used.

Marketing cookies

These cookies are used for personalised advertising and remarketing.

Marketing and analytical cookies are only placed after you have given your consent, unless otherwise permitted by law.

You can delete or disable cookies at any time through your browser settings.

10. Newsletters

When you subscribe to our newsletter, we process your email address in order to send you marketing communications.

You can unsubscribe at any time by using the unsubscribe link at the bottom of each newsletter.

11. Data retention periods

We do not retain personal data for longer than necessary.

In general, the following retention periods apply:

  • Order data: As long as necessary to fulfil the contract and comply with our statutory record-keeping obligations.

  • Customer service correspondence: As long as necessary to handle your enquiry.

  • Marketing data: Until you withdraw your consent.

  • Analytics data: In accordance with the retention periods configured within Google Analytics.

When data is no longer required, it will be deleted or anonymised.

12. Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, or misuse.

These measures include:

  • secure SSL/TLS connections;

  • secure servers;

  • restricted access to personal data;

  • secure payment methods;

  • regular security updates.

Although we take reasonable steps to protect personal data, no method of transmitting data over the internet can guarantee complete security.

13. Sharing of personal data

We never sell your personal data to third parties.

We only share personal data where this is necessary to provide our services, for example with:

  • payment providers;

  • shipping and delivery services;

  • suppliers;

  • hosting and IT service providers;

  • marketing service providers;

  • analytics tools;

  • government authorities where we are legally required to do so.

All parties only receive the information necessary to provide their respective services.

14. Your rights

Under the GDPR, you have various rights.

These include the right to:

  • access your personal data;

  • have inaccurate data corrected;

  • have your data deleted;

  • restrict the processing of your data;

  • object to the processing of your data;

  • withdraw your consent;

  • receive and transfer your data (data portability).

We will generally respond to a request within one month.

15. Children

Our online store is not intended for individuals under the age of 16.

We do not knowingly collect personal data from minors without the consent of a parent or legal guardian.

If we become aware that personal data from a minor has been collected unlawfully, we will delete it as soon as reasonably possible.

16. External websites

Our website may contain links to third-party websites.

We are not responsible for the content or privacy practices of these websites.

We recommend that you always read the privacy policy of the relevant website.

17. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time.

The most current version will always be published on our website.

We recommend that you review this Privacy Policy regularly.

18. Contact

Do you have any questions about this Privacy Policy or about the processing of your personal data?

Please feel free to contact us at:

Email: klantenservice@lillyschoenen.nl

We aim to respond to enquiries as quickly as possible.