Privacy policy

Last updated: May 14, 2026


Article 1 — Identity of the Data Controller

The data controller for personal data is:

  • LILYSFINDS SAS
  • 14 Boulevard de la République, Village St Pierre, 06510 CARROS
  • SIRET: 83350689200011
  • Represented by: ESPANOL MIRANDA Alison, in her capacity as Managing Director
  • Email: Contact@lilysfindsboutique.fr
  • Website: lilysfindsboutique.fr

Article 2 — Data Collected

Personal data refers to any information relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to a name, an identification number, or to one or more specific elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

The personal data collected on this site are as follows:

  • Account creation: last name, first name, email address, phone number, mailing address
  • Login: last name, first name, login data, usage data, location data, and payment-related data
  • Profile: address and phone number
  • Payment: financial data related to the user’s bank account or credit card
  • Communication: data from exchanges between users, stored temporarily
  • Cookies: browsing data collected automatically (see Article 8)

Article 3 — Purposes of Processing

The purpose of collecting personal data is to provide the website’s services, improve them, and maintain a secure environment. The purposes are as follows:

  • User access to and use of the website
  • Management of the website’s operation and optimization
  • Establishment of terms of use for payment services
  • Verification, identification, and authentication of transmitted data
  • Personalization of services according to user preferences
  • Prevention and detection of fraud and malware, and management of security incidents
  • Management of disputes with users
  • Sending commercial and advertising information according to user preferences
  • Management of the terms of use for payment services

The legal basis for the processing is the performance of the contract between the user and LILYSFINDS.

Article 4 — Data Retention

LILYSFINDS retains your data for as long as necessary to provide you with its services or support. To the extent reasonably necessary or required to comply with legal or regulatory obligations, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may also retain certain of your information if necessary, even after you have closed your account or we no longer need to provide you with our services.

Article 5 — Sharing Data with Third Parties

Personal data may be shared with third-party companies exclusively within the European Union in the following cases:

  • When the user uses payment services, the site interacts with third-party banking and financial companies with which it has entered into contracts
  • When the user posts information in the site’s open comment sections, such information is publicly accessible
  • When the user authorizes a third-party website to access their data
  • When the site uses service providers to provide user support, advertising, and payment services. These providers have limited access to the data, within the scope of performing these services, and are contractually obligated to use it in accordance with applicable regulations
  • If required by law, the site may transfer data to address claims filed against the site and to comply with administrative and judicial proceedings
  • In the event of a merger, acquisition, or asset sale, users will be notified prior to any transfer of their personal data to a third party

Article 6 — Security and Confidentiality

LILYSFINDS implements organizational, technical, software, and physical measures regarding digital security to protect personal data against alteration, destruction, and unauthorized access. However, the internet is not a completely secure environment, and LILYSFINDS cannot guarantee the security of the transmission or storage of information over the internet.

Article 7 — Personal Data Breach

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, LILYSFINDS undertakes to notify you as soon as possible via email to the address used during your registration or order. This notification will specify the nature of the breach, the data involved, the likely consequences, and the measures taken to address it, in accordance with Article 34 of the General Data Protection Regulation (GDPR).

Article 8 — Cookies

A cookie is an electronic file stored on a device (computer, tablet, smartphone, etc.) and is created, for example, when visiting a website, reading an email, or installing or using software or a mobile app.

The website may automatically collect standard information. All information collected indirectly will be used solely to track the volume, type, and configuration of traffic using this website, to improve its design and layout, and for administrative and planning purposes.

Where applicable, cookies from the website publisher and/or third-party companies may be stored on your device, with your consent. When you first visit the site, a banner explaining the use of cookies will appear. You may accept or decline cookies at any time.

Cookie retention period: 13 months.

For more information on cookies: https://www.cnil.fr/fr/cookies-traceurs-que-dit-la-loi

Article 9 — Commercial Offers

You may receive commercial offers from LILYSFINDS. If you do not wish to receive them, please click on the following link: Contact@lilysfindsboutique.fr

Your data may be used by the publisher’s partners for marketing purposes. If you do not wish to receive such communications, please click on the following link: Contact@lilysfindsboutique.fr

Article 10 — User Rights

In accordance with the regulations applicable to personal data (GDPR and the amended French Data Protection Act of January 6, 1978), users have the following rights:

  • Right of access: to know what personal data is held about them
  • Right to rectification: to request the correction of inaccurate information
  • Right to erasure: to request the deletion of their data
  • Right to restriction of processing: to limit the processing of their data
  • Right to object: to object to the processing of their data
  • Right to data portability: to retrieve their data to transfer it to a new platform

To exercise these rights, the user may contact LILYSFINDS:

  • By mail: 14 boulevard de la République, Village St Pierre, 06510 CARROS
  • By email: Contact@lilysfindsboutique.fr

All requests must be accompanied by a photocopy of a valid, signed ID and must include the address at which the publisher can contact the requester. A response will be sent within one month of receiving the request. This one-month period may be extended by two months if the complexity of the request and/or the number of requests so require.

Users may also file a complaint with the CNIL: https://www.cnil.fr

Article 11 — Governing Law

This Privacy Policy is governed by French law. In the event of a dispute, the French courts shall have jurisdiction, subject to any specific jurisdiction provisions arising from a particular law or regulation.

This privacy policy has been drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Law No. 78-17 of January 6, 1978 on information technology, files, and civil liberties.