Your Data, Your Rights

Privacy Policy

We take your privacy seriously. This policy explains how we collect, use, and protect your personal information

Last Updated: October 2025

Quick Navigation

1. Data Controller 2. Information We Collect 3. How We Use Your Data 4. Legal Basis 5. Data Sharing 6. Data Security 7. Data Retention 8. Your Rights 9. Cookies 10. Contact Us

Data Controller

The data controller responsible for your personal information is:

Lippy UK
Trading as: Lippy
Address: Capstone Crescent, Devon, EX34 9BT, United Kingdom
Email: hello@lippyuk.com
Phone: +44 7917 870198

We are committed to protecting your personal data and respecting your privacy. This policy applies to all personal information collected through our website, orders, and communications.

Information We Collect

We collect information you provide directly to us, such as when you:

Type of Data	Examples
Identity Data	Name, username, date of birth (if provided)
Contact Data	Email address, telephone number, delivery address, billing address
Transaction Data	Order details, payment information (processed by third parties), purchase history
Technical Data	IP address, browser type, device information, time zone
Usage Data	How you use our website, products viewed, pages visited
Marketing Data	Preferences for receiving marketing, communication preferences

Note: We do not collect or store sensitive personal data such as race, religion, health information, or full payment card details.

How We Use Your Data

We use your personal information for the following purposes:

Order Processing: To process and deliver your orders, including custom and upcycled items
Customer Service: To respond to your enquiries and provide support
Account Management: To manage your account and provide personalised features
Marketing: To send promotional emails about new products and offers (with your consent)
Legal Compliance: To comply with legal obligations, including tax and accounting requirements
Fraud Prevention: To detect and prevent fraudulent transactions
Website Improvement: To analyse usage and improve our website and services
Custom Orders: To create and fulfil personalised products

Legal Basis for Processing

Under UK GDPR, we process your personal data under the following legal bases:

Contract Performance: Processing necessary to fulfil your orders and provide our services
Legal Obligations: Processing necessary to comply with UK laws (e.g., tax records)
Legitimate Interests: Processing for business purposes that don't override your rights (e.g., fraud prevention, customer service)
Consent: Where you've given clear consent for processing (e.g., marketing emails)

Marketing Communications: We will only send you marketing emails if you have opted in. You can unsubscribe at any time by clicking the link in any marketing email or contacting us directly.

Data Security

We implement appropriate technical and organisational measures to protect your personal data:

SSL encryption for all data transmission
Secure password requirements for accounts
Regular security updates and monitoring
Limited access to personal data (need-to-know basis)
PCI DSS compliant payment processing
Regular data protection training for our team

Important: While we take security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any breaches as required by law.

Data Retention

We retain your personal data only for as long as necessary:

Type of Data	Retention Period
Order Information	6 years (UK tax requirements)
Account Data	Until account deletion request
Marketing Lists	Until you unsubscribe
Customer Service Records	3 years from last interaction
Website Analytics	26 months

After the retention period, data is securely deleted or anonymised.

Your Rights Under UK GDPR

Your Data Protection Rights

Right to Access

Request a copy of your personal data we hold

Right to Rectification

Request correction of inaccurate personal data

Right to Erasure

Request deletion of your personal data

Right to Restrict

Request restriction of processing

Right to Portability

Receive your data in a portable format

Right to Object

Object to processing based on legitimate interests

To exercise any of these rights, please contact us at hello@lippyuk.com. We will respond within 30 days.

Complaints: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we handle your data.

Cookies & Tracking

We use cookies and similar technologies to improve your shopping experience:

Essential Cookies: Required for the website to function (e.g., shopping cart)
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how you use our site (Google Analytics)
Marketing Cookies: Used to show relevant ads (only with consent)

Cookie Control: You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. We'll ask for your consent for non-essential cookies when you first visit our site.

Contact Us & Updates

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us:

Data Protection Officer

Company: Lippy UK

Email: hello@lippyuk.com

Phone: +44 7917 870198

Address: Capstone Crescent, Devon, EX34 9BT, United Kingdom

Response Time: We aim to respond to all privacy requests within 30 days

Children's Privacy: Our services are not directed to individuals under 18. We do not knowingly collect personal data from children.

International Transfers: Your data may be transferred to countries outside the UK/EEA. We ensure appropriate safeguards are in place for such transfers.

Policy Updates: We may update this policy from time to time. We'll notify you of significant changes via email or website notice.