Privacy policy

Last updated: April 7, 2025

This Privacy Policy describes how Lilofant Design (the site, we, us or our) collects, uses and shares your personal information when you visit, use our services or make purchases from lilofant.se (the site) or otherwise communicate with us regarding the Site (collectively, the Services). The use of you/your (etc.) in this Privacy Policy refers to you as a user of the Services, whether you are a customer, website visitor or other person about whom we have collected information in accordance with this Privacy Policy.

We recommend that you read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect new procedures or for other operational, legal or regulatory reasons. The revised Privacy Policy will be posted on the Website, as indicated by the date under “Last Updated”, and we will take any other steps required by applicable law.

How we collect and use personal information

To provide the Services, we collect your personal information from a variety of sources as described below. The information we collect and use will vary depending on how you interact with us.

In addition to the specific purposes set out below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal requirements, enforce any applicable terms of service, and protect the Services, our rights, and the rights of our users and others.

What personal information we collect

The types of personal information we collect about you depend on how you interact with our Website and use our Services. When we use the term personal information, we mean information that identifies, relates to, describes, or can be linked to you in some way. The sections below describe the categories and specific types of personal data we collect.

Information we collect directly from you

Information that you submit to us through our Services may include:

  • Contact information, such as your name, address, phone number, and email address.
  • Order information, such as your name, billing address, shipping address, payment confirmation, email address, and phone number.
  • Account information, such as your username, password, security questions, and other information used to protect your account.
  • Customer support information, such as information you choose to share when you communicate with us, such as when you send a message through the Services.

Certain features of the Services may require you to directly provide us with certain information about yourself. You may choose not to share such information, but if you do, you may not be able to use or access those features.

Information we collect about your usage

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). For this purpose, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including information about your device, browser, network connection, IP address, and other information about your interaction with the Services.

Information we receive from third parties

Finally, we may also receive information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

  • Companies that support our Site and Services, such as Shopify.
  • Our payment processors who collect payment information (e.g., bank account, credit or debit card information, billing address) for the purpose of processing your payment in order to distribute your orders and deliver the products or services you have requested, in order to fulfill our contract with you.
  • When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we or third parties we partner with may automatically collect certain information using online tracking technologies such as: pixels, web beacons, SDKs, third-party libraries and cookies.

Any information we receive from third parties will be treated in accordance with this Privacy Policy. Please also read the section below, Third-Party Websites and Links.

How we use your personal information

  • Provide products and services. We use your personal information to provide you with the Services in order to fulfill our contract with you, including to process your payments, distribute your orders, send you communications related to your account, your purchases, returns, exchanges, or other transactions, to create, maintain, and otherwise manage your account, to arrange shipping, facilitate any returns and exchanges, and other features and functions related to your account. We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services that you may choose to use. In such cases, Shopify will process your information in accordance with its Privacy Policy and Consumer Protection Policy.
  • Marketing and Advertising. We may use your personal information for marketing and advertising purposes, such as to send you marketing, advertisements, and promotional communications via email, text message, or regular mail, and to show you advertisements for products or services. This may include using your personal data to better tailor the services and advertising on our website and other websites. If you are a resident of the EEA, the legal basis for this processing of personal data is our legitimate interest in selling our products, pursuant to Article 6 (1) (f) GDPR.
  • Security and fraud prevention. We use your personal data to identify, investigate or take action regarding any fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your login details secure. We strongly recommend that you do not share your username, password or other access information with anyone else. If you believe that your account has been compromised, please contact us immediately. If you are a resident of the EEA, the legal basis for this processing of personal data is our legitimate interest in keeping our website safe for you and other customers, pursuant to Article 6 (1) (f) GDPR.
  • Communicate with you and improve the service. We use your personal data to provide you with customer support and improve our services. This is a legitimate interest for us to be responsive to you, to provide you with effective services and to maintain our business relationship with you pursuant to Article 6 (1) (f) GDPR.

Cookies

Like many others, we use cookies on our website. For more information about the cookies we use to operate our store with Shopify, please visit https://www.shopify.com/legal/cookies. We use cookies to operate and improve our website and services (including to store information about your activity and preferences), to perform analytics and to better understand how users interact with the services (which is relevant to our legitimate interest in administering, improving and optimizing the services). We may also allow third parties and service providers to use cookies on our website to better tailor the services, products and advertising on our website and other websites.

Accepting cookies automatically is the default in most browsers, but you can change your browser settings to delete or reject cookies. Please note that your experience may be negatively affected if you delete or block cookies, and some services, such as certain features and general functionality, may stop working in whole or in part. In addition, blocking cookies may not completely prevent our sharing of information with third parties, such as our advertising partners.

How we share personal information

In certain circumstances, we may share your personal information with third parties for the purpose of performing contracts, for legitimate purposes and for other reasons covered by this Privacy Policy. Some examples of such circumstances include:

  • Data may be shared with suppliers or other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, distribution and delivery).
  • Data may be shared with business and marketing partners in order to deliver services and advertising to you. Our business and marketing partners will use your information in accordance with their privacy notices.
  • When you request or otherwise consent to us sharing certain information with third parties, for example to deliver products to you or when you use social media widgets or login-based integrations, we may also share your information.
  • Data may be shared with our affiliates or within our group as part of our legitimate interests in running a successful business.
  • Data may be shared in connection with a business event, such as a merger or bankruptcy, to comply with applicable legal obligations (for example, in response to subpoenas, search warrants), enforce applicable terms of use, and protect and defend the Services, our rights, and the rights of our users and others.

We share We share the following categories of personal data and sensitive user data for the purposes described above in How we collect and use your personal information and how we disclose personal information:

Category  Recipient Categories
  • Identifiers such as basic contact information and certain order and account information
  • Commercial information such as order, shopping and customer support information
  • Internet or other similar network activity, such as usage data
  • Geolocation data, such as locations determined via an IP address or other technical means
  • Suppliers and third parties who perform services on our behalf (e.g., internet service providers, payment processors, distribution partners, customer support partners, and data analytics providers)
  • Business and marketing partners
  • Affiliate partners

We do not use or disclose sensitive personal information without your consent or to draw conclusions about you.

With your consent, we share personal information for the purpose of conducting advertising and marketing activities as described below.

User-Generated Content

The Services may allow you to post product reviews and other user-generated content. If you choose to submit User-Generated Content to any public area of the Services, that content will be public and available to anyone.

We do not control who will have access to the information that you choose to make available to others and cannot ensure that those who have access to such information will respect your privacy or keep it secure. We are not responsible for the integrity or security of any information you make publicly available, nor for the reliability, use, or misuse of any information you share with or receive from third parties.

Third-party websites and links

Our website may provide links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with us or controlled by us, you should read their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the integrity or security of such websites, including whether the information on such websites is accurate, complete or reliable. Information that you provide in whole or in part to publicly accessible locations, including information that you share on third-party social networking platforms, may also be viewed by other users of the Services and/or those using such third-party platforms without any limitation on how it may be used by us or third parties. The mere fact that we include such links does not imply that we endorse the content on such platforms, nor their owners or operations, beyond what is expressly stated in the Services.

Information about children

The Services are not intended for use by children, and we do not knowingly collect personal information about children. If a child for whom you are a guardian has provided us with their personal information, you may contact us using the contact details below to request that it be deleted.

As of the effective date of this Privacy Policy, we are not aware of any “sharing” or “selling” (as defined in applicable law) personal information about anyone under the age of 16.

Security and storage of your information

Please note that no security measures are perfect or insurmountable, and we cannot guarantee their security. Additionally, any information you send to us may not be protected during transmission. We recommend that you do not use insecure methods to send us sensitive or confidential information.

How long we retain your personal information depends on various factors, such as whether we need it to manage your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your rights

Depending on where you live, you may have some or all of the rights below in relation to your personal data. However, these rights are not absolute and may only apply in certain circumstances, and the law allows us to refuse your request.

  • Right to access/knowledge: You may have the right to request access to the personal data we hold about you, including information about how we use and share your information.
  • Right to erasure: You may have the right to request that we delete the personal data we hold about you.
  • Right to rectification: You may have the right to request that we correct the personal data we hold about you if it is inaccurate.
  • Right to portability: You may have the right to obtain a copy of the personal data we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
  • Right to opt out of sale, sharing or targeted advertising: You may have the right to instruct us not to “sell” or “share” your personal information or to indicate that your personal information may not be used for purposes that are considered “targeted advertising,” as defined by applicable privacy laws. If you visit our website with the GPC signal enabled (depending on your location), we will automatically interpret this as a request to refuse the “sale” or “sharing” of information for the device and browser you use to visit the website.
  • Restrict processing: You may have the right to request that we no longer process your personal information or restrict our processing of it.
  • Withdraw consent: Where we rely on consent to process your personal information, you may have the right to withdraw your consent.
  • Appeal: If we deny your request, you may have the right to appeal our decision. You may do so by responding to our denial notice.
  • Manage your communication preferences: We may send you promotional emails, and you can opt out of receiving such emails by using the unsubscribe feature included in all of our communications to you. If you opt out of receiving such emails, we may still send you non-promotional communications, such as information about your account or orders.

You can exercise these rights where indicated on our website or by contacting us using the contact details below.

Your status with us will not be affected by your exercising your rights. We may need to collect information from you to verify your identity, such as your email address or account information, before we can provide a meaningful response to your request. Subject to applicable law, you may appoint a representative to make requests on your behalf to exercise your rights. Before we will accept such a request from a representative, that representative must provide evidence that you have authorized them to act on your behalf, and you may also be required to personally verify your identity with us. We will respond to your request within the time specified by applicable law.

Complaints

If you have a complaint about how we process your personal data, please contact us using the contact details below. If you are not satisfied with how we have handled your complaint, depending on where you live, you may have the right to appeal our decision by contacting us using the contact details below. You may also choose to send your complaint to the Data Protection Authority (DPA). Within the EEA, you can find a list of responsible data protection authorities here.

International Users

Please note that we may transfer, store and process your personal data outside the country where you live. Your personal data is also processed by staff and external service providers (third parties) and partners in these countries.

If we transfer your personal data outside of Europe, we will rely on recognised transfer mechanisms, such as the European Commission’s Standard Contractual Clauses, or equivalent agreements from the relevant competent authority in the UK (as applicable) unless the data transfer takes place to a country deemed to ensure an adequate level of protection.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please call or email us at info@lilofant.se.

For the purposes of applicable data protection legislation, and unless otherwise expressly stated, we are the data controller of your personal data.