Lily O’Brien’s Privacy Policy
Thank you for visiting Lily O’Brien’s www.lilyobriens.ie. This website is owned by Lily’s Ltd trading as Lily O’Brien’s.Our goal is to ensure that our website is a securely protected environment to provide you with an easy to use and relevant shopping experience.
The purpose of this privacy policy is to clearly describe how we collect, use, manage and store your personal information. In order to fully understand your rights, we encourage you to read this Privacy Policy. By using this website, you signify your express acceptance of this policy. We are not responsible for the content or privacy practices of other websites. If you do not agree with or you are not comfortable with any aspect of the Privacy Policy, your only remedy is to discontinue use of the website. We reserve the right to modify this Policy at any time. Each time you use this website you shall be bound by the then current Privacy Policy and accordingly you should review the it each time you use this website.
For further information on any of the information illustrated on this page please feel free to contact us by email at privacy@lilyobriens.ie or by telephone on 00 353 45 486800
Privacy & Data Protection
Lily O’Brien’s fully respects your right to privacy and will not collect any personal information about you on this website without your clear knowledge and permission. Any personal information which you provide to Lily O’Brien’s will be treated strictly in accordance with the Data Protection Acts 1988-2018 (this includes the General Data Protection Regulation (EU) 2016/679). We do not require you to provide personal information unless you wish to avail of our products. Where data is submitted it will be used for the stated purpose and any reasonably incidental purposes only.
We do not sell or distribute your personal information to third parties for purposes of allowing them to market products and services to you. Communicating via the internet and sending information to you by other means necessarily involves your personal information passing through or being handled by third-parties.
About Us
We are Lily O’Brien’s. Lily O’Brien’s produces high quality chocolate in the form of chocolates/chocolate boxes/wedding favours/occasion specific treats and personalised gifts. We are registered in Ireland as Lily’s Ltd, number 144234. Our registered business address is Lily O’Brien’s, Green Road, Newbridge, Co. Kildare, Ireland. Our websites are:
https://www.lilyobriens.co.uk
The Information We Collect & How We Use It
For various reasons we may store your data for example; if you have visited one of our websites (https://www.lilyobriens.ie, https://www.lilyobriens.co.uk, https://www.lilyobriens.com), shopped with us online, created an account on our website, entered a competition, signed up to our mailing list or contacted us via email or social media.
- Website Customer Accounts
When you visit our website (https://www.lilyobriens.ie, https://www.lilyobriens.co.uk, https://www.lilyobriens.com) you have the option to create an account. The information stored includes first and surname, email address, and date of birth (This information is optional, should you wish to share it we may send you special offers for your birthday).
Once you have created an account you can personalise it further, should you wish. The “My Account” section is designed to make the order process easy for you and contains the following sections and information;
- My Orders: This section contains information on your previous orders including; order date, order number, order status, billing address, shipping address, products ordered, order value, payment method and the facility to download a VAT receipt.
- My Details: This section contains your own information including; Full name, email address, date of birth (optional), email preferences and password reset functionality
- My Addresses: This section contains information you choose to save for the purpose of shipping orders to your contacts. Information can be saved into your address section to speed up the transaction process and for the purpose of using our multiple shipping facility at the checkout which enables you to send multiple items to multiple addresses with one transaction process. We will never use information in your address book unless it is being used as shipping information.
- My Saved Cards: This section contains credit card payment information you choose to save in order to speed up the transaction process. You have the option to save three cards. Lily O’Brien’s do not have access to this information. This data is not stored by Lily O’Brien’s but by our credit card provider Global Payments, please refer to their website for details about the privacy they provide https://www.globalpaymentsinc.com/en-ie/accept-payments/ecommerce/privacy
- Website Guest / Transaction information: When you order online through our website using our Guest Checkout you will be asked to provide information for the purpose of processing and dispatching your order. This information will include Name, Address, Email Address and a contact telephone number for the sender (in case we need to query your order) and recipient (in case the courier needs information to deliver your parcel)
- Personalised Products: When you place an order for a personalised photo box on our website, you will be asked to upload an image or images. These images are stored securely on our server using an encrypted URL for 30 days. This information is then deleted, and is never shared with any party for the use other than creating your personalised photo box.
- Wedding Orders: When you order Personalised Wedding Favours through our website you will be given the option to add the names of the Bride and Groom and your Wedding Date or a personalised message to your favours box, this information will never be used for any other reason. You will also be asked to provide information for the purpose of processing and dispatching your order. This information will include Name, Address, Email Address and a contact telephone number for the sender (in case we need to query your order) and recipient (in case the courier needs information to deliver your parcel).
For general web-browsing certain statistical information is available to us via our internet service provider. This information may include the IP and logical address of the server you are using, the top-level domain name from which you access the internet (for example .ie, .com, etc.), the type of browser you are using, the date and time you access our site and the internet address linking to our site. We may also use temporary “session” cookies which enable a visitor’s web browser to remember which pages on this website have already been visited. This information may be used to help us to improve, administer and diagnose problems with our server and website.
You have an opportunity to send us information via this website, such as through the “contact us” pages or any other area where you may send e-mails. You may also choose to provide us with personal data (e.g. name, e-mail, postal address or other contact details) in an e-mail message to the address listed on our site. We use these details solely for the purpose for which you provided them (e.g. responding to your query).
Your rights
- For processing activities for which we rely on consent as a basis for processing your data, you have the right to withdraw your consent at any time.
- For processing activities which are based on a statutory or contractual requirement, you may request your data not be processed for that purpose. However, this is not an absolute right and may be over-ridden by our statutory obligations. In other cases, requesting that data should not be processed for a particular purpose may prevent us from executing a contract or delivering a service to you.
You have the right to request:
- A copy of data we hold about you (Right of Access)
- That any error in data we hold about you is corrected (Right of Rectification)
- That data we hold about you be erased, unless we have a countervailing interest or legal obligation to retain it (Right of Erasure)
- That we refrain from processing data for a specific purpose (Right to Restrict processing)
- A copy of the data in a structured, commonly used and machine-readable form to enable you to reuse your personal data for your own purposes across different services (Right of Data Portability)
- You have the right to amend or delete your account and related details at anytime. You can you this by accessing your account at https://lilyobriens.ie/customer/account/edit/
We will accede to any such valid requests within 30 calendar days of the receipt of a valid request in writing. Please send all requests in writing to privacy@lilyobriens.ie. We reserve the right to request you to provide additional information in order to enable us to identify your personal data and/or to verify your identity.
- Customer Service & General Enquiries
By contacting us via email, telephone, or through our social media channels including Facebook, Twitter, Instagram, Pinterest, YouTube or Google you may be asked to provide contact details including name, email address, telephone number and order information. This information is requested so our in-house and external customer service teams can investigate and respond to your query.
Who we share your information with
We use various carefully selected third parties that assist us operationally and help us improve and develop our online service and shopping experience. Tasks include gaining insight into customer experience while using our website and obtaining customer reviews, managing our advertising, email marketing, payment processing, affiliate marketing, courier shipments. Further information on our third parties;
Service providers
We may need to share personal information with our service providers, such as where necessary to provide our services to you. If there has been a breach of our Terms of Use, we may also share personal information with our legal advisors. All of our service providers will be obliged to keep your personal information safe and secure.
- User & Customer Insights
We use information on website users and customers to help us understand how visitors use and interact with our website. This information may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. We use tools such as but not limited to;
- Google Analytics https://policies.google.com/privacy
- Hotjar https://www.hotjar.com/legal/policies/privacy
- Advertising
We use information on user browsing data with advertising service providers such as but not limited to Google, Bing and Facebook. The information captured includes pages visited, device information and product purchase data. We capture this data to understand your advertising preferences so we can show you ads and products that are more relevant to you. We use tools such as but not limited to; Google Adwords, DoubleClick Bid Manager, The Trade Desk, Bing Ads, Facebook, Twitter, Instagram, Pinterest, Google+, YouTube.
- Google Adwords https://policies.google.com/privacy
- Bing Ads https://advertise.bingads.microsoft.com/en-us/resources/policies/privacy-and-data-protection-policies
- DoubleClick Bid Manager https://policies.google.com/privacy
- The Trade Desk https://www.thetradedesk.com/general/privacy
- Customer Service Tools, Feedback, Reviews and Market Research
We use information to help us respond to reviews and customer enquiries such as name, email address and telephone number. We use tools such as but not limited to ZenDesk and Trust Pilot;
- ZenDesk https://www.zendesk.com/company/customers-partners/privacy-policy/
- Trust Pilot https://uk.legal.trustpilot.com/end-user-privacy-terms
- Email Marketing
We use programmes to send our email campaigns such as but not limited to;
- Mailchimp https://mailchimp.com/legal/privacy/
- Payments
We use programmes to facilitate payment via our websites, including Global Payments (formerly Realex) and Paypal;
- Global Payments (formerly Realex) https://www.globalpaymentsinc.com/en-ie/accept-payments/ecommerce/privacy
- Paypal https://www.paypal.com/ie/webapps/mpp/ua/privacy-full
- Affiliates
We use programmes to run our affiliate campaigns such as but not limited to Rakuten and AWIN;
- Couriers
We use external courier services for the purpose of delivering your orders. Information transferred to our couriers is for the sole purpose of delivering your order. These couriers include, GLS, DHL and UPS.
- GLS: https://gls-group.eu/EU/en/privacy-policy-group
- UPS: https://www.ups.com/us/en/help-center/legal-terms-conditions/privacy-notice.page
- DHL: http://www.dhl.com/en/legal.html#privacy
Consent
We will share your information with a third party where you have allowed us to do so.
Business [Transfer]
Where some or all of our company and/or its assets may potentially be or have been acquired, we may need to transfer your personal information to the new or prospective owners.
Legal and safety
In certain instances, we may share information where we reasonably believe that it is necessary for legal reasons, to defend our legal rights, to enforce our Terms of Use or to protect our rights, property, users, customers or the safety of any person. For example, we may provide personal information where ordered by a court to do so.
Marketing & Mailing Lists
Throughout our website you will be given the option to “Opt-in” to our mailing list. Opting in means that we will contact you with email updates of general Lily O’Brien’s news, special offers, promotions, competitions, new products and recipes.
You can unsubscribe from these emails at any time by clicking the ‘unsubscribe’ link in any email, or update your email preferences in the My Details section of My Account here -> https://lilyobriens.ie/customer/account/edit/
We will never share your information with any external parties for marketing purposes.
Who has access to your information?
1. Website Customer Accounts / Transaction information:
Lily O’Brien’s may share your information with our internal and external customer service teams, dispatch teams and couriers for the purpose of processing and dispatching your order or to contact you regarding a query relating to your order. We will never use or share your personal information for any other reason.
2. Customer Service & General Enquiries
In order to provide the best level of customer service possible your information may be shared with our in-house customer service team for reason such as but not limited to; contacting you relating to a query you have sent us or regarding a query we have regarding your order for example, if the courier is having problems delivering your order, if we have a question regarding a product you ordered, a delivery date etc.
3. Third Parties
Lily O’Brien’s Marketing & Digital teams have access to the information our third parties collect. We also provide our trusted external suppliers with this information to help us understand information such as, but not limited to, how visitors use and interact with our website.
4. Marketing & Mailing Lists
Lily O’Brien’s Marketing & Digital teams have access to our mailing list data to communicate with you via consented marketing emails about special offers, news, new products or recipes etc. We also work with trusted external suppliers to gain insights into our mailing list recipients such as insights into purchase patterns and preferences which allow us to tailor our communications and make them more relevant to you, for example, special offers on products of interest to you. We will never share or use your information for any other reason.
5. Cookies and Tracking
Lily O’Brien’s Marketing & Digital teams have access to the information our cookies collect. We also provide our trusted external suppliers with this information to help us understand information such as, but not limited to, how visitors use and interact with our website.
Where is your information stored?
1. Website Customer Accounts / Transaction information
CTI Global, our IT providers, function as ‘Data Processors’ for Lily O’Brien’s and are registered with the Data Protection Commission of Ireland and are subject to the security responsibilities under the Data Protection Act. All data is stored within multiple ISO27001 certified data centres in Dublin and never ever leaves the Irish jurisdiction.
2. Customer Service & General Enquiries
Information relating to Customer Services queries is stored in a secure password encrypted document accessible by our customer service teams and deleted within 2 months.
Security & Data Protection
At Lily O'Brien's Chocolates, online security is our priority. All transactions processed on our site are processed using the highest levels of online security by external transaction processing companies with outstanding records in internet security. Our website operates on a secure server and all confidential information is encrypted and protected to make our websites secure and safe shopping environments.
CTI Global as ‘Data Processors’ for Lily O’Brien’s are registered with the Data Protection Commission of Ireland and are subject to the security responsibilities under the Data Protection Act. These responsibilities include the necessity to keep personal data secure from unauthorised access, disclosure, destruction or accidental loss.
All CTI Global services are ISO27001:2013 certified by Certification Europe reference 2011/1388. All data is stored within multiple ISO27001 certified data centres in Dublin and never ever leaves the Irish jurisdiction.
CTI Global will apply best-practice in terms of process, hardware & back-up software selection to ensure the provision of a secure data solution and mitigate risk of data loss. These include initial server hardening, disaster-recovery testing & nightly back-ups to a location within the EU.
CTI Global confirms that the data will not be moved outside the EEA (the European Economic Area, which includes the 27 EU member states, and Lichtenstein, Iceland, and Norway).
CTI Global confirms that the data placed in the Lily O’Briens-specific virtual dedicated cloud (primary & remote) will be available always to Lily O’Briens and ownership of the data will always reside with Lily O’Briens.
Data Retention
Lily O’Brien’s retains personal data about individuals for a range of periods. The basis for our retention periods is based on our contractual obligations. We commit to not keeping personal data for longer than is necessary and review records on an annual basis.
How long do we store your data?
Website Customer Accounts: We will store your account information for as long as you wish to keep your customer account active. If you have not accessed your customer account for 18 months we will deactivate it and delete your details. Before any account is deleted we will notify you before any action is taken with instruction for you to keep your account active.
Website Guest Transactions: When you place an order via our website you will have the option to activate a customer account with us. Unactivated accounts will be deleted after 12 months.
Controlling your information: You have the right to amend or delete your account and related details at anytime. You can you this by accessing your account at https://lilyobriens.ie/customer/account/edit/
Customer Service & General Enquiries: By contacting us via email, telephone, or through our social media channels your information will be stored until your query has been resolved and deleted within 2 months.
Marketing & Mailing Lists: If you have Opted-in to our mailing list your information will be stored until you choose to unsubscribe. You can unsubscribe from these emails at any time by clicking the ‘unsubscribe’ link in any email, or update your email preferences in the My Details section of My Account here: https://lilyobriens.ie/customer/account/edit/
Cookies Policy
This cookies policy describes how Lily O’Brien’s use “cookies” and other similar technologies, such as pixels and tags, in connection with our websites.
Do the Lily O’Brien’s websites use cookies?
Yes. Please read this cookies policy carefully to ensure that you fully understand how and why we use cookies and related technologies. If you use our website with your browser set to accept cookies, you consent to our use of cookies as described in this policy. You also consent to our use of pixel tags if you choose to sign up to our newsletter.
What is a cookie?
A cookie is a small file consisting of letters and numbers that is placed on your computer or other device. Cookies enable our systems to recognize your device. Such recognition is necessary to for the efficient operation of our site.
Do I have to agree to Lily O’Brien’s use of cookies?
No.
If you do not consent to our use of cookies, you can set your browser settings to reject cookies. These settings are usually found in the “options” or “preferences” menu of your web browser. You can find more details about how to control cookies here. Alternatively, you can use the “Help” option in your web browser get more details.
A number of features of our services may not work or will be curtailed from working effectively without cookies. As a result, changing your browser settings to reject cookies may have a negative impact on your ability to use our website.
If you use our website with your web browser set to accept cookies, you consent to our use of cookies as described in this cookies policy. If you do not accept our use of cookies, you should either (a) immediately stop using our services or (b) use the settings described above to reject cookies. To withdraw your consent to our use of cookies, you should either (a) cease using our website or (b) delete our cookies using your web browser’s settings and set your browser to reject future cookies. You can find out more about deleting and blocking cookies here and using your web browser’s “Help” option.
Who drops cookies when I use Lily O’Brien’s website?
Many of the cookies dropped when you use our services are “first party cookies” (meaning cookies placed and read by Lily O’Brien’s directly).
A number of our partners also drop cookies when you use our services. These specialist “third party cookies” are not set by Lily O’Brien’s but are rather set by companies such as Google for website analytics and font purposes with our permission. Please read our partners’ privacy policies to ensure that you’re comfortable with the manner in which they use cookies:
- www.google.com/analytics/learn/privacy.html
- www.fonts.com/info/legal/privacy
- https://www.hotjar.com/legal/policies/privacy
- https://policies.google.com/privacy
- https://advertise.bingads.microsoft.com/en-us/resources/policies/privacy-and-data-protection-policies
- https://www.facebook.com/full_data_use_policy
- https://twitter.com/en/privacy
What types of cookies are used on Lily O’Brien’s website?
We use both “session” and “persistent” cookies. A session cookie is used to identify a particular visit to our site. These cookies expire after a short time, or when you close your web browser after using our services.
A persistent cookie will remain on your devices for a set period of time specified in the cookie. We use these cookies where we need to identify you over a longer period of time.
Necessary Cookies
Name |
Provider |
Purpose |
Expiry |
Type |
|
|
rc::a |
|
This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website. |
Persistent |
HTML |
|
|
rc::c |
|
This cookie is used to distinguish between humans and bots. |
Session |
HTML |
|
|
CookieConsent |
Cookiebot |
Stores the user's cookie consent state for the current domain |
1 year |
HTTP |
|
|
frontend |
lilyobriens.ie |
Stores a random ID which ensures that a user can be uniquely identified as a guest or logged-in user. Functions such as "Items last viewed" or retention of the logged-in state are connected with this cookie. |
41 days |
HTTP |
|
|
frontend_cid |
lilyobriens.ie |
Stores a random ID which ensures that a user can be uniquely identified as a guest or logged-in user on encrypted pages. Functions such as "Items last viewed" or retention of the logged-in state are connected with this cookie. |
41 days |
HTTP |
|
|
has_js |
lilyobriens.ie |
Registers whether or not the user has activated JavaScript in the browser. |
Session |
HTTP |
|
|
external_no_ cache |
lilyobriens.ie |
This cookie is set to determine if the cache is enabled or disabled - a cache is used by the website to optimize the response time between the visitor and the website. The cache is usually stored on the visitor’s browser. |
1 day |
HTTP |
|
|
History.store |
lilyobriens.ie |
Contains an visitor ID - This is used to track visitors' navigation and interaction on the website for internal website-optimization. |
Session |
HTML |
||
Statistics & Analytics Cookies
Name |
Provider |
Purpose |
Expiry |
Type |
collect |
|
Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels. |
Session |
Pixel |
_dc_gtm_UA- # |
Google Tag Manager |
Used by Google Tag Manager to control the loading of a Google Analytics script tag. |
1 day |
HTTP |
_ga |
|
Registers a unique ID that is used to generate statistical data on how the visitor uses the website. |
2 years |
HTTP |
_gat |
Google Tag Manager |
Used by Google Analytics to throttle request rate |
1 day |
HTTP |
_gid |
|
Registers a unique ID that is used to generate statistical data on how the visitor uses the website. |
1 day |
HTTP |
Marketing Cookies
Name |
Provider |
Purpose |
Expiry |
Type |
IDE |
|
Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user. |
1 year |
HTTP |
test_cookie |
|
Used to check if the user's browser supports cookies. |
1 day |
HTTP |
ads/ga-audie nces |
|
Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor's online behaviour across websites. |
Session |
Pixel |
_gaexp |
lilyobriens.ie |
This cookie is used by Google Analytics to determine if the visitor is involved in their marketing experiments. |
15 days |
HTTP |
_gcl_au |
Google Tag Manager |
Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. |
3 months |
HTTP |
VISITOR_IN FO1_LIVE |
YouTube |
Tries to estimate the users' bandwidth on pages with integrated YouTube videos. |
179 days |
HTTP |
YSC |
YouTube |
Registers a unique ID to keep statistics of what videos from YouTube the user has seen. |
Session |
HTTP |
yt-remote-ca st-installed |
YouTube |
Stores the user's video player preferences using embedded YouTube video |
Session |
HTML |
yt-remote-co nnected-devi ces |
YouTube |
Stores the user's video player preferences using embedded YouTube video |
Persistent |
HTML |
yt-remote-de vice-id |
YouTube |
Stores the user's video player preferences using embedded YouTube video |
Persistent |
HTML |
yt-remote-fas t-check-perio d |
YouTube |
Stores the user's video player preferences using embedded YouTube video |
Session |
HTML |
yt-remote-se ssion-app |
YouTube |
Stores the user's video player preferences using embedded YouTube video |
Session |
HTML |
yt-remote-se ssion-name |
YouTube |
Stores the user's video player preferences using embedded YouTube video |
Session |
HTML |
pagead/1p-u ser-list# |
|
Pending |
Session |
Pixel |
Why are cookies used by Lily O’Brien’s?
We use cookies for the following purposes:
- Analytics – we use cookies to learn how you, and other users, use our services and how well they perform. This allows us to identify errors, learn how our services perform, and improve and develop our services over time.
- Marketing – we use pixel tags to track and improve the effectiveness of our marketing emails. For example, we may use such technologies to identify if you read an email we sent to you.
- Website Optimization – we use cookies to improve the operation and presentation of our website. This includes tracking our use of fonts, caching pages and identifying potential errors.
- Advertising – we use advertising tracking technologies from Doubleclick and Bing which may present you with advertisements when you visit other sites.
Security
We take our security responsibilities seriously, employing the most appropriate physical and technical measures. We review our security policy regularly.
Governing Law and Jurisdiction
This legal notice and all issues regarding this website are governed exclusively by Irish law and are subject to the exclusive jurisdiction of the Irish courts.
General
Delay or failure on our part in enforcing any of our rights shall not constitute a waiver by us of our rights and remedies. If any part of this Privacy Policy is held to be invalid or unenforceable, the validity or enforceability of the remainder will not be affected.
Contact us
Our Data Protection Officer can be contacted by emailing privacy@lilyobriens.ie. If our Data Protection Officer cannot answer your question, you have the right to contact your local data protection supervisory authority.
This website is owned by Lily’s Ltd trading as Lily O’Brien’s. We are registered in Ireland as Lily’s Ltd, number 144234. Our registered business address is Lily O’Brien’s, Green Road, Newbridge, Co. Kildare, Ireland.
Changes to this privacy Policy
We keep our Privacy Policy under regular review. This Privacy Policy was last updated on 30 May 2018.