You are here

Privacy Policy

Lily O’Brien’s Privacy Policy

Thank you for visiting Lily O’Brien’s www.lilyobriens.ie. This website is owned by Lily’s Ltd trading as Lily O’Brien’s.Our goal is to ensure that our website is a securely protected environment to provide you with an easy to use and relevant shopping experience.

The purpose of this privacy policy is to clearly describe how we collect, use, manage and store your personal information. In order to fully understand your rights, we encourage you to read this Privacy Policy. By using this website, you signify your express acceptance of this policy. We are not responsible for the content or privacy practices of other websites. If you do not agree with or you are not comfortable with any aspect of the Privacy Policy, your only remedy is to discontinue use of the website. We reserve the right to modify this Policy at any time. Each time you use this website you shall be bound by the then current Privacy Policy and accordingly you should review the it each time you use this website.

For further information on any of the information illustrated on this page please feel free to contact us by email at privacy@lilyobriens.ie or by telephone on 00 353 45 486800

Privacy & Data Protection

Lily O’Brien’s fully respects your right to privacy and will not collect any personal information about you on this website without your clear knowledge and permission. Any personal information which you provide to Lily O’Brien’s will be treated strictly in accordance with the Data Protection Acts 1988-2018 (this includes the General Data Protection Regulation (EU) 2016/679). We do not require you to provide personal information unless you wish to avail of our products. Where data is submitted it will be used for the stated purpose and any reasonably incidental purposes only.

We do not sell or distribute your personal information to third parties for purposes of allowing them to market products and services to you. Communicating via the internet and sending information to you by other means necessarily involves your personal information passing through or being handled by third-parties.

About Us

We are Lily O’Brien’s. Lily O’Brien’s produces high quality chocolate in the form of chocolates/chocolate boxes/wedding favours/occasion specific treats and personalised gifts. We are registered in Ireland as Lily’s Ltd, number 144234. Our registered business address is Lily O’Brien’s, Green Road, Newbridge, Co. Kildare, Ireland. Our websites are:

​https://www.lilyobriens.ie​,

https://www.lilyobriens.co.uk​

https://www.lilyobriens.com​

 

The Information We Collect & How We Use It

For various reasons we may store your data for example; if you have visited one of our websites (https://www.lilyobriens.ie, https://www.lilyobriens.co.uk, https://www.lilyobriens.com), shopped with us online, created an account on our website, entered a competition, signed up to our mailing list or contacted us via email or social media.

 

  • Website Customer Accounts

When you visit our website (https://www.lilyobriens.ie, https://www.lilyobriens.co.uk, https://www.lilyobriens.com) you have the option to create an account. The information stored includes first and surname, email address, and date of birth (This information is optional, should you wish to share it we may send you special offers for your birthday).

Once you have created an account you can personalise it further, should you wish. The “My Account” section is designed to make the order process easy for you and contains the following sections and information;

 

  • My Orders: This section contains information on your previous orders including; order date, order number, order status, billing address, shipping address, products ordered, order value, payment method and the facility to download a VAT receipt.
  • My Details: This section contains your own information including; Full name, email address, date of birth (optional), email preferences and password reset functionality
  • My Addresses: This section contains information you choose to save for the purpose of shipping orders to your contacts. Information can be saved into your address section to speed up the transaction process and for the purpose of using our multiple shipping facility at the checkout which enables you to send multiple items to multiple addresses with one transaction process. We will never use information in your address book unless it is being used as shipping information.
  • My Saved Cards: This section contains credit card payment information you choose to save in order to speed up the transaction process. You have the option to save three cards. Lily O’Brien’s do not have access to this information. This data is not stored by Lily O’Brien’s but by our credit card provider Global Payments, please refer to their website for details about the privacy they provide https://www.globalpaymentsinc.com/en-ie/accept-payments/ecommerce/privacy
  • Website Guest / Transaction information: When you order online through our website using our Guest Checkout you will be asked to provide information for the purpose of processing and dispatching your order. This information will include Name, Address, Email Address and a contact telephone number for the sender (in case we need to query your order) and recipient (in case the courier needs information to deliver your parcel)
  • Personalised Products: When you place an order for a personalised photo box on our website, you will be asked to upload an image or images. These images are stored securely on our server using an encrypted URL for 30 days. This information is then deleted, and is never shared with any party for the use other than creating your personalised photo box.
  • Wedding Orders: When you order Personalised Wedding Favours through our website you will be given the option to add the names of the Bride and Groom and your Wedding Date or a personalised message to your favours box, this information will never be used for any other reason. You will also be asked to provide information for the purpose of processing and dispatching your order. This information will include Name, Address, Email Address and a contact telephone number for the sender (in case we need to query your order) and recipient (in case the courier needs information to deliver your parcel).

For general web-browsing certain statistical information is available to us via our internet service provider.  This information may include the IP and logical address of the server you are using, the top-level domain name from which you access the internet (for example .ie, .com, etc.), the type of browser you are using, the date and time you access our site and the internet address linking to our site. We may also use temporary “session” cookies which enable a visitor’s web browser to remember which pages on this website have already been visited. This information may be used to help us to improve, administer and diagnose problems with our server and website.

You have an opportunity to send us information via this website, such as through the “contact us” pages or any other area where you may send e-mails. You may also choose to provide us with personal data (e.g. name, e-mail, postal address or other contact details) in an e-mail message to the address listed on our site.  We use these details solely for the purpose for which you provided them (e.g. responding to your query).

Your rights

  • For processing activities for which we rely on consent as a basis for processing your data, you have the right to withdraw your consent at any time.
  • For processing activities which are based on a statutory or contractual requirement, you may request your data not be processed for that purpose. However, this is not an absolute right and may be over-ridden by our statutory obligations. In other cases, requesting that data should not be processed for a particular purpose may prevent us from executing a contract or delivering a service to you.

You have the right to request:

  • A copy of data we hold about you (Right of Access)
  • That any error in data we hold about you is corrected (Right of Rectification)
  • That data we hold about you be erased, unless we have a countervailing interest or legal obligation to retain it (Right of Erasure)
  • That we refrain from processing data for a specific purpose (Right to Restrict processing)
  • A copy of the data in a structured, commonly used and machine-readable form to enable you to reuse your personal data for your own purposes across different services (Right of Data Portability)
  • You have the right to amend or delete your account and related details at anytime. You can you this by accessing your account at ​https://lilyobriens.ie/customer/account/edit/

We will accede to any such valid requests within 30 calendar days of the receipt of a valid request in writing. Please send all requests in writing to privacy@lilyobriens.ie. We reserve the right to request you to provide additional information in order to enable us to identify your personal data and/or to verify your identity.

  • Customer Service & General Enquiries

By contacting us via email, telephone, or through our social media channels including Facebook, Twitter, Instagram, Pinterest, YouTube or Google you may be asked to provide contact details including name, email address, telephone number and order information.  This information is requested so our in-house and external customer service teams can investigate and respond to your query.        

 

Who we share your information with

We use various carefully selected third parties that assist us operationally and help us improve and develop our online service and shopping experience. Tasks include gaining insight into customer experience while using our website and obtaining customer reviews, managing our advertising, email marketing, payment processing, affiliate marketing, courier shipments. Further information on our third parties;

Service providers

We may need to share personal information with our service providers, such as where necessary to provide our services to you. If there has been a breach of our Terms of Use, we may also share personal information with our legal advisors. All of our service providers will be obliged to keep your personal information safe and secure.

  • User & Customer Insights

We use information on website users and customers to help us understand how visitors use and interact with our website. This information may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. We use tools such as but not limited to;

 

  • Advertising

We use information on user browsing data with advertising service providers such as but not limited to Google, Bing and Facebook. The information captured includes pages visited, device information and product purchase data. We capture this data to understand your advertising preferences so we can show you ads and products that are more relevant to you. We use tools such as but not limited to; Google Adwords, DoubleClick Bid Manager, The Trade Desk, Bing Ads, Facebook, Twitter, Instagram, Pinterest, Google+, YouTube.

 

  • Customer Service Tools, Feedback, Reviews and Market Research

We use information to help us respond to reviews and customer enquiries such as name, email address and telephone number. We use tools such as but not limited to ZenDesk and Trust Pilot;

 

  • Email Marketing

We use programmes to send our email campaigns such as but not limited to;

 

  • Payments

We use programmes to facilitate payment via our websites, including Global Payments (formerly Realex) and Paypal;

 

  • Affiliates

We use programmes to run our affiliate campaigns such as but not limited to Rakuten and AWIN;

 

  • Couriers

We use external courier services for the purpose of delivering your orders. Information transferred to our couriers is for the sole purpose of delivering your order. These couriers include, GLS, DHL and UPS.

Consent

We will share your information with a third party where you have allowed us to do so.

Business [Transfer]

Where some or all of our company and/or its assets may potentially be or have been acquired, we may need to transfer your personal information to the new or prospective owners.

Legal and safety

In certain instances, we may share information where we reasonably believe that it is necessary for legal reasons, to defend our legal rights, to enforce our Terms of Use or to protect our rights, property, users, customers or the safety of any person. For example, we may provide personal information where ordered by a court to do so.

Marketing & Mailing Lists

Throughout our website you will be given the option to “Opt-in” to our mailing list. Opting in means that we will contact you with email updates of general Lily O’Brien’s news, special offers, promotions, competitions, new products and recipes.

You can unsubscribe from these emails at any time by clicking the ‘unsubscribe’ link in any email, or update your email preferences in the My Details section of My Account here -> https://lilyobriens.ie/customer/account/edit/

We will never share your information with any external parties for marketing purposes.

 

Who has access to your information?

1. Website Customer Accounts​ / ​Transaction information: 

Lily O’Brien’s may share your information with our internal and external customer service teams, dispatch teams and couriers for the purpose of processing and dispatching your order or to contact you regarding a query relating to your order. We will never use or share your personal information for any other reason.

2. Customer Service & General Enquiries

In order to provide the best level of customer service possible your information may be shared with our in-house customer service team for reason such as but not limited to; contacting you relating to a query you have sent us or regarding a query we have regarding your order for example, if the courier is having problems delivering your order, if we have a question regarding a product you ordered, a delivery date etc.

3. Third Parties

Lily O’Brien’s Marketing & Digital teams have access to the information our third parties collect. We also provide our trusted external suppliers with this information to help us understand information such as, but not limited to, how visitors use and interact with our website.

4. Marketing & Mailing Lists

Lily O’Brien’s Marketing & Digital teams have access to our mailing list data to communicate with you via consented marketing emails about special offers, news, new products or recipes etc. We also work with trusted external suppliers to gain insights into our mailing list recipients such as insights into purchase patterns and preferences which allow us to tailor our communications and make them more relevant to you, for example, special offers on products of interest to you. We will never share or use your information for any other reason.

5. Cookies and Tracking

Lily O’Brien’s Marketing & Digital teams have access to the information our cookies collect. We also provide our trusted external suppliers with this information to help us understand information such as, but not limited to, how visitors use and interact with our website.

 

Where is your information stored?

1. Website Customer Accounts / Transaction information

CTI Global, our IT providers, function as ‘Data Processors’ for Lily O’Brien’s and are registered with the Data Protection Commission of Ireland and are subject to the security responsibilities under the Data Protection Act. All data is stored within multiple ISO27001 certified data centres in Dublin and never ever leaves the Irish jurisdiction.

2. Customer Service & General Enquiries

Information relating to Customer Services queries is stored in a secure password encrypted document accessible by our customer service teams and deleted within 2 months.

 

Security & Data Protection

At Lily O'Brien's Chocolates, online security is our priority. All transactions processed on our site are processed using the highest levels of online security by external transaction processing companies with outstanding records in internet security. Our website operates on a secure server and all confidential information is encrypted and protected to make our websites secure and safe shopping environments.

CTI Global as ‘Data Processors’ for Lily O’Brien’s are registered with the Data Protection Commission of Ireland and are subject to the security responsibilities under the Data Protection Act. These responsibilities include the necessity to keep personal data secure from unauthorised access, disclosure, destruction or accidental loss.

All CTI Global services are ISO27001:2013 certified by Certification Europe reference 2011/1388. All data is stored within multiple ISO27001 certified data centres in Dublin and never ever leaves the Irish jurisdiction. 

CTI Global will apply best-practice in terms of process, hardware & back-up software selection to ensure the provision of a secure data solution and mitigate risk of data loss. These include initial server hardening, disaster-recovery testing & nightly back-ups to a location within the EU.

CTI Global confirms that the data will not be moved outside the EEA (the European Economic Area, which includes the 27 EU member states, and Lichtenstein, Iceland, and Norway).

CTI Global confirms that the data placed in the Lily O’Briens-specific virtual dedicated cloud (primary & remote) will be available always to Lily O’Briens and ownership of the data will always reside with Lily O’Briens.

 

Data Retention

Lily O’Brien’s retains personal data about individuals for a range of periods. The basis for our retention periods is based on our contractual obligations. We commit to not keeping personal data for longer than is necessary and review records on an annual basis.

How long do we store your data?

Website Customer Accounts: We will store your account information for as long as you wish to keep your customer account active. If you have not accessed your customer account for 18 months we will deactivate it and delete your details. Before any account is deleted we will notify you before any action is taken with instruction for you to keep your account active.

Website Guest Transactions:  When you place an order via our website you will have the option to activate a customer account with us. Unactivated accounts will be del​eted after 12 months.

Controlling your information: You have the right to amend or delete your account and related details at anytime. You can you this by accessing your account at ​https://lilyobriens.ie/customer/account/edit/

Customer Service & General Enquiries: By contacting us via email, telephone, or through our social media channels your information will be stored until your query has been resolved and deleted within 2 months.

Marketing & Mailing Lists: If you have Opted-in to our mailing list your information will be stored until you choose to unsubscribe. You can unsubscribe from these emails at any time by ​clicking the ‘unsubscribe’ link in any email, or update your email preferences in the My Details section of My Account here: https://lilyobriens.ie/customer/account/edit/

 

Cookies Policy

This cookies policy describes how Lily O’Brien’s use “cookies” and other similar technologies, such as pixels and tags, in connection with our websites.

 

Do the Lily O’Brien’s websites use cookies? 

Yes. Please read this cookies policy carefully to ensure that you fully understand how and why we use cookies and related technologies. If you use our website with your browser set to accept cookies, you consent to our use of cookies as described in this policy. You also consent to our use of pixel tags if you choose to sign up to our newsletter.

What is a cookie? 

A cookie is a small file consisting of letters and numbers that is placed on your computer or other device. Cookies enable our systems to recognize your device. Such recognition is necessary to for the efficient operation of our site.

Do I have to agree to Lily O’Brien’s use of cookies? 

No.

If you do not consent to our use of cookies, you can set your browser settings to reject cookies. These settings are usually found in the “options” or “preferences” menu of your web browser. You can find more details about how to control cookies here. Alternatively, you can use the “Help” option in your web browser get more details.

A number of features of our services may not work or will be curtailed from working effectively without cookies. As a result, changing your browser settings to reject cookies may have a negative impact on your ability to use our website.

If you use our website with your web browser set to accept cookies, you consent to our use of cookies as described in this cookies policy. If you do not accept our use of cookies, you should either (a) immediately stop using our services or (b) use the settings described above to reject cookies. To withdraw your consent to our use of cookies, you should either (a) cease using our website or (b) delete our cookies using your web browser’s settings and set your browser to reject future cookies. You can find out more about deleting and blocking cookies here and using your web browser’s “Help” option.

Who drops cookies when I use Lily O’Brien’s website?

Many of the cookies dropped when you use our services are “first party cookies” (meaning cookies placed and read by Lily O’Brien’s directly).

A number of our partners also drop cookies when you use our services. These specialist “third party cookies” are not set by Lily O’Brien’s but are rather set by companies such as Google for website analytics and font purposes with our permission. Please read our partners’ privacy policies to ensure that you’re comfortable with the manner in which they use cookies:

 

What types of cookies are used on Lily O’Brien’s website?

We use both “session” and “persistent” cookies. A session cookie is used to identify a particular visit to our site. These cookies expire after a short time, or when you close your web browser after using our services.

A persistent cookie will remain on your devices for a set period of time specified in the cookie. We use these cookies where we need to identify you over a longer period of time.

 

Necessary Cookies

Name

Provider

Purpose

Expiry

Type

 

rc::a

Google

This cookie is used to

distinguish between humans

and bots. This is beneficial for

the website, in order to make

valid reports on the use of

their website.

Persistent

HTML

 

rc::c

Google

This cookie is used to

distinguish between humans

and bots.

Session

HTML

 

CookieConsent

Cookiebot

Stores the user's cookie

consent state for the current

domain

1 year

HTTP

 

frontend

lilyobriens.ie

Stores a random ID which

ensures that a user can be

uniquely identified as a guest

or logged-in user. Functions

such as "Items last viewed"

or retention of the logged-in

state are connected with this

cookie.

41 days

HTTP

 

frontend_cid

lilyobriens.ie

Stores a random ID which

ensures that a user can be

uniquely identified as a guest

or logged-in user on

encrypted pages. Functions

such as "Items last viewed"

or retention of the logged-in

state are connected with this

cookie.

41 days

HTTP

 

has_js

lilyobriens.ie

Registers whether or not the

user has activated JavaScript

in the browser.

Session

HTTP

 

external_no_

cache

lilyobriens.ie

This cookie is set to

determine if the cache is

enabled or disabled - a cache

is used by the website to

optimize the response time

between the visitor and the

website. The cache is usually

stored on the visitor’s

browser.

1 day

HTTP

 

History.store

lilyobriens.ie

Contains an visitor ID - This

is used to track visitors'

navigation and interaction on

the website for internal

website-optimization.

Session

HTML
             

 

Statistics & Analytics Cookies

Name

Provider

Purpose

Expiry

Type

collect

Google

Used to send data to

Google Analytics about the

visitor's device and

behavior. Tracks the visitor

across devices and

marketing channels.

Session

Pixel

_dc_gtm_UA-

#

Google Tag

Manager

Used by Google Tag

Manager to control the

loading of a Google

Analytics script tag.

1 day

HTTP

_ga

Google

Registers a unique ID that

is used to generate

statistical data on how the

visitor uses the website.

2 years

HTTP

_gat

Google Tag

Manager

Used by Google Analytics

to throttle request rate

1 day

HTTP

_gid

Google

Registers a unique ID that

is used to generate

statistical data on how the

visitor uses the website.

1 day

HTTP

 

Marketing Cookies

Name

Provider

Purpose

Expiry

Type

IDE

Google

Used by Google DoubleClick

to register and report the

website user's actions after

viewing or clicking one of the

advertiser's ads with the

purpose of measuring the

efficacy of an ad and to

present targeted ads to the

user.

1 year

HTTP

test_cookie

Google

Used to check if the user's

browser supports cookies.

1 day

HTTP

ads/ga-audie

nces

Google

Used by Google AdWords to

re-engage visitors that are

likely to convert to customers

based on the visitor's online

behaviour across websites.

Session

Pixel

_gaexp

lilyobriens.ie

This cookie is used by

Google Analytics to

determine if the visitor is

involved in their marketing

experiments.

15 days

HTTP

_gcl_au

Google Tag

Manager

Used by Google AdSense for

experimenting with

advertisement efficiency

across websites using their

services.

3 months

HTTP

VISITOR_IN

FO1_LIVE

YouTube

Tries to estimate the users'

bandwidth on pages with

integrated YouTube videos.

179 days

HTTP

YSC

YouTube

Registers a unique ID to

keep statistics of what videos

from YouTube the user has

seen.

Session

HTTP

yt-remote-ca

st-installed

YouTube

Stores the user's video

player preferences using

embedded YouTube video

Session

HTML

yt-remote-co

nnected-devi

ces

YouTube

Stores the user's video

player preferences using

embedded YouTube video

Persistent

HTML

yt-remote-de

vice-id

YouTube

Stores the user's video

player preferences using

embedded YouTube video

Persistent

HTML

yt-remote-fas

t-check-perio

d

YouTube

Stores the user's video

player preferences using

embedded YouTube video

Session

HTML

yt-remote-se

ssion-app

YouTube

Stores the user's video

player preferences using

embedded YouTube video

Session

HTML

yt-remote-se

ssion-name

YouTube

Stores the user's video

player preferences using

embedded YouTube video

Session

HTML

pagead/1p-u

ser-list#

Google

Pending

Session

Pixel

 

Why are cookies used by Lily O’Brien’s? 

We use cookies for the following purposes:

  • Analytics – we use cookies to learn how you, and other users, use our services and how well they perform. This allows us to identify errors, learn how our services perform, and improve and develop our services over time.
  • Marketing – we use pixel tags to track and improve the effectiveness of our marketing emails. For example, we may use such technologies to identify if you read an email we sent to you.
  • Website Optimization – we use cookies to improve the operation and presentation of our website. This includes tracking our use of fonts, caching pages and identifying potential errors.
  • Advertising – we use advertising tracking technologies from Doubleclick and Bing which may present you with advertisements when you visit other sites.

Security

We take our security responsibilities seriously, employing the most appropriate physical and technical measures. We review our security policy regularly.

Governing Law and Jurisdiction

This legal notice and all issues regarding this website are governed exclusively by Irish law and are subject to the exclusive jurisdiction of the Irish courts.

General

Delay or failure on our part in enforcing any of our rights shall not constitute a waiver by us of our rights and remedies. If any part of this Privacy Policy is held to be invalid or unenforceable, the validity or enforceability of the remainder will not be affected.

Contact us

Our Data Protection Officer can be contacted by emailing privacy@lilyobriens.ie. If our Data Protection Officer cannot answer your question, you have the right to contact your local data protection supervisory authority.

This website is owned by Lily’s Ltd trading as Lily O’Brien’s. We are registered in Ireland as Lily’s Ltd, number 144234. Our registered business address is Lily O’Brien’s, Green Road, Newbridge, Co. Kildare, Ireland.

Changes to this privacy Policy

We keep our Privacy Policy under regular review. This Privacy Policy was last updated on 30 May 2018.