Privacy policy

Last updated: 10 July 2026


The purpose of this privacy policy is to set out our commitment to respecting the personal data and privacy of users of the / website (the “Website”). The Website is operated by [COMPANY NAME].

This privacy policy and the Website's terms and conditions of sale form a single contractual whole. Terms written with a capital letter in this privacy policy and not defined here are defined in the terms and conditions of sale.

In operating our Website we process your personal data in accordance with the UK GDPR and the Data Protection Act 2018, on the terms set out below.

Personal data means any information relating to an identified or identifiable individual. We collect and process personal data solely in order to provide our Services and to communicate about them, strictly in line with the UK GDPR.

We only collect personal data that is necessary, relevant and proportionate to the purpose of the processing. For that reason we never ask you for so-called “special category” personal data, such as data on racial or ethnic origin, political opinions or philosophical or religious beliefs.

By registering on the Website you consent to us processing your personal data in accordance with this privacy policy. If you do not accept the terms of this privacy policy, please do not use the Website or the Services.

1. When do we collect data, and what do we collect?

We may collect and store your personal data in the following cases:

  • when you browse the Website;
  • when you create an account, pay online, place an order or sign up to the newsletter;
  • when you get in touch with us (customer support).

We use your personal data to run and manage the Website's Services and to answer your enquiries. We also use it to improve our Services, our Website and our business. We use this information ourselves only, and it allows us to tailor our Services more closely to what you expect.

If you chose to receive emails and messages from us when you created your Account, you will get electronic messages about our products and offers. We use the personal data you gave when registering for this. You can unsubscribe from these newsletters at any time.

1.1 Browsing the Website

Connection data. Each time you connect to our Website we collect personal data such as your IP address and your computer's MAC address, the date and time of the connection, and information about the browser you are using.

Browsing data. We also record how you reach the Website, which pages you viewed and for how long. As part of this we may also use cookies.

1.2 Creating an account

To use some of our Services you may first need to create an Account. In that case, when the Account is created we ask for certain personal data, in particular your name, your postal address, your email address and your phone number.


1.3 Payment

Some of the Services available may be chargeable. For that purpose you agree that we may use external providers, who may collect personal data in order to process card payments or other payment methods and, where relevant, to deliver the products or services.

To complete your purchase you need to give us your billing details and your payment details — in the case of card payment, the card number, expiry date, security code and the cardholder's name.

We may also ask for the name of your mobile provider, the type of mobile you use and a valid mobile number, so that we can give you purchase instructions directly on your mobile.

We keep your payment details, along with the details of the purchases you have made with us. Transaction details are stored either in our own systems or with the external provider. We keep this data for internal purposes, in particular accounting, compliance and legal purposes, in line with section 5 of this privacy policy.


1.4 Signing up to our newsletter

When you create your Account you can agree in advance to receive newsletters about our news, new products, services and offers, as part of the Services.

You can also consent directly to receiving our newsletters by entering your email address in the fields provided on the Website.

You always have the right to withdraw your consent to receiving newsletters at any time, free of charge.


1.5 Getting in touch

To answer the enquiries you send our customer support team and to confirm your details, we may use your first name and surname, your email address and your phone number.

2. How do we protect your personal data?

We have put technical and organisational security measures in place to guarantee the security, integrity and confidentiality of all your personal data, preventing it from being altered, damaged or accessed by unauthorised third parties. Taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of the processing, as well as the likelihood of risk, we ensure an appropriate level of security.

We should point out, though, that no security measure is infallible, and so we cannot guarantee absolute security for your personal data.

It is also your responsibility to keep the password to your Account confidential. Don't share it with anyone. If you're using a shared computer, remember to log out before leaving the Service.

3. When do we share your personal data?

3.1 Sharing your personal data with third parties

While you browse the Website, your personal data may also be passed to external providers. These third parties provide services on our behalf and for our benefit, so that card payments and the other Services work properly.

Your personal data may also be transferred to countries outside the European Union in order to fulfil your order.

Under the UK GDPR, any transfer of data outside the United Kingdom and/or to a country not covered by UK adequacy regulations is made under cross-border transfer agreements based on the International Data Transfer Agreement or Addendum issued by the ICO.

Other transfers of data may go to the United States, and take place under transfer mechanisms with appropriate safeguards.

Except where a third party asks you to accept its own privacy policy and terms of use, the third parties with access to your personal data have undertaken to process it solely in order to deliver our Services.

We never share your personal data with third parties for marketing and/or commercial purposes without your prior consent.

3.2 Sharing with public authorities

We may also disclose your personal data to administrative or judicial authorities where this is necessary to identify, pursue or bring proceedings against someone who may be infringing our rights, the rights of other users or the rights of third parties. Finally, we may be required to disclose your personal data under a legal obligation, in which case we cannot refuse.

4. How long do we keep your personal data?

We keep your personal data for 5 years. That period allows us to handle the processing of your order, as well as return or refund requests beyond the statutory guarantee period.

The legal basis for processing is your consent, or the performance of the sales contract.

5. Cookies: how we use them

5.1 What is a cookie?

A cookie is a text file that can be stored on your device when you use an online service through a browser. The cookie file allows whoever issued it to recognise that device, for as long as the cookie is valid, each time the device accesses digital content containing cookies from the same issuer.

Cookies placed on your device with your consent are deleted in all cases 13 months after they are set.

5.2 What are the cookies we set on our Website for?

The cookies we issue ourselves allow us to:

  • to compile statistics and data on visits to and use of the different parts of our Website (sections and content visited, browsing path), so that we can make the Website and, where relevant, our products and services more useful and more interesting;
  • to adapt how our Website is displayed to your device's display settings (language, resolution, operating system and so on) during your visits, depending on your device's hardware and software;
  • to remember the details you fill in on forms on our Website (registration or access to your Account), and the products, services or information you have selected (service ordered, basket contents and so on);
  • to give you access to the personal and restricted areas of our Website, such as your Account, based on any identifiers or details you have provided, and to apply security measures, for example when you have to sign in again to reach content or a service after a certain time.

While you browse the Website, social media cookies may also be set, in particular through the sharing buttons, and these collect personal data.

On your first visit, a cookie banner appears on the home page. A link gives you more information about what the cookies are for and how they work, pointing to this privacy policy. Continuing to browse other pages of the Website, or selecting an element of the Website (an image, text, a link and so on), means you accept those cookies being placed on your device.

5.3 How to control the cookies we use

You can set your browser at any time to store cookies on your device or, conversely, to refuse them (either systematically or depending on who issued them). You can also set your browser to ask you each time whether to accept or refuse a cookie before it is stored on your device.

Please note: any setting may change how you browse and the conditions under which you can access certain services that require cookies. We accept no responsibility for problems caused by cookies you have refused or deleted that are necessary for our services to work properly. This may be the case if you try to reach content or services of ours that require identification. The same applies where we (or our providers) cannot, for reasons of technical compatibility, recognise your device's browser type, its language and display settings, or the country from which your device appears to be connecting to the internet.

5.4 How to set up your browser

Managing cookies and your choices works differently in each browser. Your browser's help menu explains how to change your cookie settings. Below you'll find information for the most common browsers.

Internet Explorer / Edge

In Internet Explorer, click the Tools button and then Internet Options.
On the General tab, under History, click Settings.
Click to show the files.

Firefox

  • Go to the Tools tab in your browser, then choose the Settings menu
  • In the window that opens, choose Privacy and then click to show cookies

Safari

  • Go to Settings from the browser menu (Safari > Settings)
  • Click Privacy.

Google Chrome

  • Go to Settings from the button next to the address bar, or from the browser menu (Chrome > Settings).
  • Choose Advanced settings
  • Click Content settings and then Cookies.

For more information about cookies, please see the website of the relevant data protection authority.

6. What rights do you have?

The data we hold has been given to us by you alone, through the Website. You have rights over your personal data. Under data protection law, in particular Articles 15 to 22 of the UK GDPR, once your identity has been verified you have the right to ask us for access to the personal data we hold about you, and for it to be corrected or erased.

Within the limits set by law, you also have the right to object to processing, to have it restricted, to decide what happens to your data after your death, to withdraw your consent at any time, and the right to portability of the personal data you have given us.

To exercise your rights, you can contact our data protection officer at the following email address: support@lymphae.com

7. Can we change this privacy policy?

We reserve the right to change this privacy policy at any time. We therefore suggest you check it regularly. If we make changes, we will publish them on this page and anywhere else we judge appropriate, depending on the subject and importance of the changes.

Using the Website after any change means you accept that change. If you do not accept a material change to this privacy policy, you should stop using the Website.

We would remind you that you have the right to complain to the relevant data protection authority; in the UK that is the Information Commissioner's Office (ICO).