Privacy Policy

Last updated: 10/22/2025

Who are we?

Our website address is: https://lbylilo.com.

In compliance with Law 34/2002 (LSSICE), this website is owned by L BY LILO, S.L. (hereinafter, the “Provider”), with registered office at C/ Av. Vía Augusta, 15, Edificio A1, Planta 1, Despacho 16, Sant Cugat, Barcelona, Spain, CIF B06811749, telephone +34 662 143 584 and email info@lbylilo.com.

We process data in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), and LSSICE. We have implemented technical and organizational measures to ensure the confidentiality, integrity, and availability of information.

Legal basis for processing

Contract performance: management of orders, payments, shipments, returns, and after-sales service.
Consent: newsletter subscription; marketing communications via email/SMS/WhatsApp; use of non-essential cookies. You can withdraw it at any time.
Legitimate interest: fraud prevention, service improvement, internal statistics, and soft opt-in (Art. 21.2 LSSICE) to send communications about similar products/services to customers. You can object at any time.
Legal compliance: commercial, tax, and consumer obligations.

Purposes and data categories

We use your data to:

Respond to inquiries and provide support.
Process purchases: collections, billing, logistics, and after-sales service.
Send promotional communications (if authorized) and cart reminders.
Personalize content, perform analytics, and measure performance.

Data categories we may process: identification and contact (name, email, phone), shipping/billing addresses, transactional data (products, amounts), logistical data (tracking), technical/usage data (IP, cookie identifiers, pages visited), preferences, and interaction metrics (opens/clicks). We do not store your full card details: these are managed by the corresponding payment provider.

Sources: directly from you; your use of the website; and third parties involved in the process (payments, courier services, analytics, marketing platforms).

The provision of data marked as mandatory is necessary to fulfill your request; if not provided, it may be impossible to provide the requested service.

Retention periods

Customers and billing: up to 6 years due to commercial and tax obligations.
Marketing (email/SMS/WhatsApp): until you withdraw consent or object; periodic inactivity reviews.
Support/inquiries: up to 24 months after closure.
CVs: 12 months.

After these periods, we will delete or anonymize the data with appropriate security measures.

Recipients and processors

We do not sell your data. We share it with providers who act as data processors and only according to our instructions, for:

E-commerce platform (e.g., Shopify) and hosting.
Payment gateways and anti-fraud.
Logistics and courier services.
Customer service and CRM.
Email/SMS marketing (e.g., Klaviyo and SMS/WhatsApp providers).
Analytics, measurement, and advertising (tags/pixels).

International transfers

If any provider offers services outside the EEA (e.g., USA), we use appropriate safeguards: Standard Contractual Clauses (SCCs) and, where applicable, adherence to the EU-US Data Privacy Framework (DPF), with assessments and complementary measures.

Commercial communications (email, SMS, and WhatsApp)

Consent is never a condition of purchase.
We always include an immediate unsubscribe mechanism (link or instructions).
We maintain proof of consent (date, source, method) and unsubscribes (logs).

Abandoned cart SMS

You may receive reminders if you started a purchase and did not complete it.

Purpose: to facilitate order completion, inform about availability or incidents.
Frequency: limited and proportionate (e.g., 1–3 reminders per event).
Unsubscribe: reply STOP to cancel; send AYUDA/HELP for support.
Cost: standard charges from your operator may apply.
Sender identification: “L BY LILO” or an equivalent ID.

Location-based services and web tracking

We may use your approximate location and technologies such as cookies, pixels, and tags to personalize your experience, measure performance, and show you relevant recommendations or advertisements. You can manage your preferences from the cookie banner or your browser. More information in our Cookie Policy.

Profiling and automated decisions

We perform segmentations (by purchase history, interaction with emails/SMS, browsing, or carts) to personalize communications and offers. We do not make decisions with legal effects without human intervention. You can object to profiling for marketing purposes by writing to info@lbylilo.com.

Minors

Our services are not intended for minors under 16 years of age. If we detect an erroneous registration, we will diligently delete the data after verification.

Your rights

You can exercise your rights of access, rectification, deletion, objection, restriction, and portability by sending an email to info@lbylilo.com with the subject “LOPD – Rights” and a copy of an identification document.

You can also withdraw your consent at any time and file a complaint with the Spanish Data Protection Agency (AEPD).

Security

We apply measures commensurate with the risk: in-transit encryption, access controls, activity logging, retention policies, and, where applicable, pseudonymization/anonymization.

Web content and links

L BY LILO reserves the right to update, modify, or delete information on the website, and may limit or prevent access. We are not responsible for the content of linked third-party sites; the links are for informational purposes.

CV submission

If you send us your CV, we will use it for selection processes for a maximum of 12 months, after which it will be deleted with confidentiality guarantees. You can update your data by sending us a notification.

Social media

Data provided through social media will be processed to manage inquiries and interactions. It will not be communicated to third parties except as required by law, nor will international transfers be made without adequate safeguards. You can exercise your rights under the terms indicated in this Policy.

Legislation and jurisdiction

The relations between L BY LILO and users are governed by Spanish law. For the resolution of conflicts arising from the use of the site, the parties submit to the Courts and Tribunals of Barcelona, unless otherwise stipulated by mandatory rule.

Changes to this policy

L BY LILO may modify this Policy to adapt it to new legislative or jurisprudential developments. We will publish the current version with its update date.