LILY O’BRIEN’S PRIVACY NOTICE
Thank you for visiting the Lily O’Brien’s website, www.lilyobriens.ie. This website is owned and operated by Lily’s Ltd trading as Lily O'Brien's, company registration number 144234, having its registered business address at Green Road, Newbridge, Co. Kildare, Ireland.
Lily O'Brien's produces high quality chocolate in the form of chocolates/chocolate boxes/wedding favours/occasion specific treats and personalised gifts. Our goal is to ensure that our website is a secure environment to provide you with an easy to use and relevant shopping experience. This Privacy Notice tells you about your privacy rights and sets out how we, as a Data Controller, collect and process personal data about visitors to our website. This Privacy Notice should be read in conjunction with our Cookie Policy
Our website may, from time to time, contain links to and from other websites. If you follow a link to any of those websites, please note that those websites have their own privacy notices and we do not accept any responsibility or liability for those policies. Please check those policies before you submit any personal data to those websites.
Privacy & Data Protection
Lily O’Brien’s is committed to respecting your right to privacy and processing your personal data in accordance with the Data Protection Act 2018 and the General Data Protection Regulation (EU) 2016/679 (GDPR).
"Personal data" means any information concerning or relating to a living person who is either identified or identifiable. There are instances where we invite or request you to provide us with your personal data through our website, for example, where you wish to avail of our products. If you do not provide the requested information, we may not be able to provide you with our services or respond to any questions or requests you submit to us via our website.
In addition to the information you provide to us, we collect certain information when you visit our website, as explained in our Cookie Policy.
In providing our services, we may also receive personal data indirectly. The categories of such personal data are set out below- please see the "Who has access to your information section".
The Information We Collect & How We Use It
We will use your personal data for the purposes and according to the legal bases set out below.
Point of collection | Categories of personal data collected | Purpose(s) for Processing | Legal Basis |
---|---|---|---|
General website browsing | Technical Information • IP and logical address of the server • Domain name • Internal and external information related to website pages that you visit, clickstream information and geolocation data. |
• To provide you with access to our website. • To protect the security and integrity of our website, systems and services. • To optimise and enhance our website. |
• In pursuit of our legitimate interests in communicating with you, making our products and retail services available, and protecting the security and integrity of our services and systems (provided such interests are not overridden by your interests and rights. You have a right to object at any time). |
When you checkout as a Website Guest | Contact Data • Full name • Email Address • Telephone number for the sender (in case we need to query your order) • Telephone number for the recipient (in case the courier needs information to deliver your parcel) Order Data • Billing address • Shipping address • Payment method |
• To provide our products and retail services to you. • To fulfil and deliver your order(s). • To get in touch with you about delivery of your order(s). |
• To perform the contract we have with you for provision of our products and retail services. If you do not provide this data, then we may not be able to contract with you and provide you with our products and retail services. • In pursuit of our legitimate interests in communicating with you, making our products and retail services available, and protecting the security and integrity of our services and systems (provided such interests are not overridden by your interests and rights. You have a right to object at any time). |
When you create an Account on our website or checkout using your Account | Contact Data • Full name • Email address • (Optional) Date of birth • Telephone number for the sender (in case we need to query your order) • Telephone number for the recipient (in case the courier needs information to deliver your parcel) Order Data • Billing address • Shipping address • Payment method • Account data • Password reset facility |
• To provide our products and retail services to you. • To fulfil and deliver your order(s). • To get in touch with you about delivery of your order(s). • To improve your customer experience. |
• To perform the contract we have with you for provision of our products and retail services. If you do not provide this data, then we may not be able to contract with you and provide you with our products and retail services. • In pursuit of our legitimate interests in communicating with you, making our products and retail services available, and protecting the security and integrity of our services and systems (provided such interests are not overridden by your interests and rights. You have a right to object at any time). |
When you save addresses to your Account on our website | Order Data • Shipping address(es) |
• To speed up your transaction process. • To use our multiple shipping facility which enables you to send multiple items to multiple addresses with one transaction process. | • To perform the contract we have with you for provision of our products and retail services. If you do not provide this data, then we may not be able to contract with you and provide you with our products and retail services. • In pursuit of our legitimate interests in communicating with you and providing our multiple shipping service to you (provided such interests are not overridden by your interests and rights. You have a right to object at any time). |
When you order Personalised Wedding Favours | A personalised message you have uploaded, which may include your personal data. | • To provide our Personalised Wedding Favours service to you. | • To perform the contract we have with you for provision of our products and retail services. If you do not provide this data, then we may not be able to contract with you and provide you with our products and retail services. • In pursuit of our legitimate interests in providing our wedding favour personalisation service to you (provided such interests are not overridden by your interests and rights. You have a right to object at any time). |
When you place an order for a personalised photo box | • An image or images you have uploaded, which may include images of you. | • To provide our Personalised Photobox service to you. | • To perform the contract we have with you for provision of our products and retail services. If you do not provide this data, then we may not be able to contract with you and provide you with our products and retail services. • In pursuit of our legitimate interests in providing our personalised photobox service to you (provided such interests are not overridden by your interests and rights. You have a right to object at any time). |
When you enter a competition we are running | Contact Data • Name • Address • Email Address • Contact Telephone Number |
• From time to time, we may run competitions (e.g. to win a gift card). • These promotions are run in accordance with our competition Terms and Conditions. Please see https://wwwlilyobriens.ie for details. |
• Where you have entered our competition and consented to receive marketing and other promotion-related communications from us. • You can withdraw your consent and unsubscribe from these emails at any time by clicking the ‘unsubscribe’ link in any email, or update your email preferences in the My Details section of My Account. |
When you "Opt In" to our mailing list | Contact Data • Name • Address • Email Address • Contact telephone number |
• Throughout our website you will be given the option to “Opt-in” to our mailing list. • Opting in means that we will contact you with email updates of general Lily O’Brien’s news, special offers, promotions, competitions, new products and recipes. • We do not share your information with any external parties for marketing purposes. |
• Where we have collected your consent to receive marketing communications from us. • You can withdraw your consent and unsubscribe from these emails at any time by clicking the ‘unsubscribe’ link in any email, or update your email preferences in the My Details section of My Account. |
When you contact us via email or social media or through the "contact us" section of our website | Contact Data • Name • Address • Social media handle |
• By contacting us via email, telephone, or through our social media channels including Facebook, Twitter, Instagram, Pinterest, YouTube or Google you may be asked to provide contact details including name, email address, telephone number and order information. • This information is requested so our in-house and external customer service teams can investigate and respond to your query. | • In pursuit of our legitimate interests in providing customer support to you as part of our business operations and interactions (provided such interests are not overridden by your interests and rights. You have a right to object at any time). |
Please note:
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Who we share your information with
We use various carefully selected third parties that assist us operationally and help us improve and develop our online service and shopping experience. We may disclose your personal data to:
A third party who provides a service to us, including:
- insights tools which help us understand how visitors use and interact with our website;
- advertising services which help us to understand your advertising preferences so we can show you ads and products that are more relevant to you;
- customer service tools and research, which help us respond to reviews and customer enquiries;
- programmes to send our email campaigns;
- programmes which facilitate payment via our websites;
- programmes to run our affiliate campaigns; and
- couriers which allow us to deliver your orders.
- A prospective seller or buyer of any our business or assets;
- A third party where we are under a duty to disclose or share your personal data in order to comply with any legal obligation;
- A third party where it is necessary to protect the vital interests of the data subject or another natural person;
- A third party where necessary for our legitimate business interests to protect the rights, property, or safety of Lily O'Brien's, our customer(s), or others.
Your rights
You have the following rights under applicable law, subject to certain exceptions, with respect to your personal data:
- Right of Access. You may request a copy of the personal data that we process about you.
- Right to Rectification. You may ask us to correct any inaccurate or incomplete personal data.
- Right to Erasure. You may request that we delete the personal data that we have about you in certain circumstances, for example where it is no longer necessary for us to process it.
- Right to Restriction of Processing. You have the right to request that we restrict processing your personal data under certain circumstances.
- Right to Object. You have the right to object to your personal data being processed on the basis of our legitimate interests (or those of a third party). We will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims. Where we use your personal data for direct marketing purposes, you can always object and opt out of future marketing messages using the unsubscribe link in such communications.
- Right to Data Portability enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible.
When we process personal data you provide to us based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Where your personal data is processed on the basis of legitimate interests, you may object to such processing by contacting us using the contact details set out below.
You have the right to lodge a complaint with the Data Protection Authority, in particular in the Member State of your residence, place of work or place of an alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
If you wish to exercise any of these rights, please contact us (see Contact Us below). We will respond to your request within one month. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request. We may request proof of identification to verify your request. We have the right to refuse your request where there is a basis to do so in law, or if it is manifestly unfounded or excessive, or to the extent necessary for important objectives of public interest.
Marketing & Mailing Lists
Throughout our website you will be given the option to “Opt-in” to our mailing list. Opting in means that we will contact you with email updates of general Lily O’Brien’s news, special offers, promotions, competitions, new products and recipes.
You can unsubscribe from these emails at any time by clicking the ‘unsubscribe’ link in any email, or update your email preferences in the Newsletter Subscriptions section of My Account here -> https://lilyobriens.ie/newsletter/manage/
Security & Data Protection
We are committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access and use. As effective as modern security practices are, no physical or electronic security system is entirely secure. We cannot guarantee the complete security of our database, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet. We have implemented strict internal guidelines to ensure that your privacy is safeguarded at every level of our organisation. We will continue to revise policies and implement additional security features as new technologies become available.
Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website. Any transmission of personal data is at your own risk. Once we receive your personal data, we use appropriate security measures to seek to prevent unauthorised access or disclosure.
Data Retention
Lily O’Brien’s retains your personal data in accordance with our retention periods and for as long as necessary for the purposes of providing access to our website and related services to you; as required by law or regulatory guidance to which we are subject, and for the exercise or defence of legal claims that may be brought by or against us.
Transfers of personal data outside of the EEA
We may transfer your personal data outside of the European Economic Area (EEA). Whenever we transfer your personal data outside of the EEA to a third country which has not been determined by the European Commission to provide an adequate level of protection of personal data, we will ensure appropriate safeguards are in place. You may contact us via e-mail, letter or telephone in case you wish to find out more or to obtain a copy of the appropriate safeguards
Automated decision-making and profiling
We do not subject any of your personal data to automated decision-making or profiling.
Contact us
Questions, comments, requests and complaints regarding this Privacy Notice and the personal data we hold should be addressed to our Data Protection Officer by emailing privacy@lilyobriens.ie. All requests will be dealt with promptly and efficiently. If our Data Protection Officer cannot answer your question, you have the right to contact your local data protection supervisory authority.
For further information on any of the information provided on this page please feel free to contact us by email at privacy@lilyobriens.ie or by telephone on 00 353 45 486800.
Changes to this Privacy Notice
We reserve the right to change this Policy from time to time at our sole discretion. If we make any changes, we will post those changes here and update the “Last Updated” date at the bottom of this Policy. Please review this Policy periodically for updates.
We keep our Privacy Notice under regular review. This Privacy Notice was last updated on 5th October 2023.