Last updated: 20 August 2026
The controller for the processing of personal data is LilliOli (Ivan Gurin PE), Tsentralna 5, 02890 Hostomel, Ukraine. We process your data in accordance with the General Data Protection Regulation (GDPR).
For privacy questions you can contact us at privacy@lillioli.com.
When ordering: name, address, email, phone, order details and payment information. Payment information is processed by our payment provider and not stored by us.
When browsing: technical data such as IP address, browser type, visit statistics (if you accepted analytics cookies).
When contacting us: the data you yourself fill in forms or emails.
When you have consented to analytics, we may count daily landing-page arrivals by path, UTM campaign fields, ad platform name and external referrer hostname. We do not store IP addresses, user agents, click identifiers or full referrer URLs in this aggregate.
We use your data to fulfil orders, provide customer service, keep you informed about your order, and improve the site. Marketing emails are sent only with explicit consent.
Legal bases include performance of contract (orders), legitimate interests (store operation and security), and consent (analytics and marketing).
We share data only where necessary with Shopify, payment and shipping providers, SkladUSA where assigned to fulfilment, Vercel, Neon, Resend, Judge.me and other approved service providers used to operate the store.
We never sell your data to third parties.
Order data is kept for 7 years in accordance with tax obligations. Marketing consent is kept until you withdraw it. Anonymous analytics are kept for a maximum of 26 months. Aggregate landing-arrival records are deleted after 90 days.
You have the right to access, rectification, erasure, restriction, portability and objection regarding your personal data. Send an email to privacy@lillioli.com.
You may also lodge a complaint with the data-protection authority competent for your habitual residence or for the relevant processing.
We take appropriate technical and organisational measures to protect your data. The site runs over an encrypted HTTPS connection. Payment data never passes through our server — it goes directly to our payment provider.
This privacy policy may be updated. We will inform you of significant changes via the site or by email. The latest version is always available here.
