Website terms of use

Last updated: 13 February 2026

Lymphae operates this shop and website, including all information, content, features, tools, products and related services, in order to give you as a customer a personalised shopping experience (the “Services”). This privacy policy explains how we collect, use and disclose your personal data when you access or use the Services, make a purchase or other transaction, or contact us in any other way. If there is any conflict between our terms of use and this privacy policy, this privacy policy prevails as regards the collection, processing and disclosure of your personal data.

Please read this privacy policy carefully. By accessing and using our Services you acknowledge that you have read it and that you understand the ways of collecting, using and disclosing data described here.

The personal data we collect or process

When we use the term “personal data” we mean information that can identify you, or that can reasonably be linked to you or another person. Personal data does not include information collected anonymously or made non-identifiable. We may collect or process the following categories of personal data, including any inferences drawn from them, depending on how you interact with the Services, where you live, and to the extent permitted or required by applicable law:

Contact details, including your name, address, billing address, delivery address, phone number and email address.
Financial data, including credit and debit card numbers and bank account numbers, payment card details, bank account details, transaction data, payment method, payment confirmation and other payment information.
Account details, including your username, password, security questions, settings and preferences.
Transaction data, including the products you view, add to your basket, add to your wishlist, buy, return, exchange or cancel, and your past transactions.
Your communications with us, including any information you include in them, for example when you send an enquiry to our customer support team.
Device data, including information about your device, your browser or your network connection, your IP address and other unique identifiers.
Usage data, including information about how you interact with the Services, in particular how and when you access them or engage with them.

Where the personal data comes from

We may collect personal data from the following sources:

Directly from you, including when you create an account, access or use the Services, contact us, or otherwise give us your personal data;
Automatically through the Services, including from your device, when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
From our providers, including when we use them to implement certain technologies and when they collect or process your personal data on our behalf;
From our partners or other third parties.

How we use your personal data

Depending on how you interact with us, or which Services you use, we may use your personal data for the following purposes:

Providing, personalising and improving the Services. We use your personal data to provide the Services, in particular to perform our contract with you, process your payments, handle your orders, remember your preferences and the products that interest you, send you notifications about your account, process purchases, returns, exchanges and other transactions, create, maintain and otherwise manage your account, arrange deliveries, handle any returns and exchanges, allow you to post reviews, and create a personalised shopping experience, for example by recommending products related to your purchases. This may include using your personal data to make the Services more relevant and to improve them.
Marketing and advertising. We use your personal data for marketing and promotional purposes, for example to send marketing, advertising and promotional messages by email, SMS or post, and to show online advertising within the Services or on other websites, including on the basis of products you have previously bought or added to your basket, or your other activity within the Services.
Security and fraud prevention. We use your personal data to authenticate your account, to provide a secure payment and shopping experience, to detect, investigate and prevent fraudulent, unlawful, dangerous or malicious activity, to protect public safety and to keep our services secure. If you choose to create an account, you are responsible for keeping your access details confidential. We strongly recommend that you do not share your username, password or other access details with anyone.
Communicating with you. We use your personal data to provide customer support, to answer your enquiries, to deliver effective services and to maintain our business relationship with you.
Legal reasons. We use your personal data to comply with applicable law, to respond to valid legal process — in particular requests from law enforcement or government bodies — to take part in civil discovery, in pending or potential disputes and other proceedings or investigations, and to enforce our terms or policies and investigate any possible breaches of them.

How we disclose personal data

In certain circumstances we may disclose your personal data to third parties for legitimate reasons, in line with this privacy policy. Those circumstances may include:

With service providers and other third parties who provide services on our behalf (for example IT support, payment processing, data analysis, customer support, cloud storage, processing and delivery).
With business and advertising partners, so that we can provide marketing services and show you targeted advertising. Our business and advertising partners use your data in accordance with their own privacy policies. Depending on where you live, you may have the right to ask us not to share your data for the purposes of targeted advertising and marketing content.
When you instruct us to, make a request of us, or otherwise consent to certain data being disclosed to third parties, for example to have products delivered, or when using social media widgets or login integrations.
With our affiliated companies and, more generally, within our group.
As part of a business transaction — for example a merger or insolvency proceedings — to comply with an applicable legal obligation (including responding to subpoenas, search warrants or similar requests), to enforce our terms of use or policies, and to protect the Services, our rights and the rights of our users or of third parties.

Third-party websites and links

The Services may contain links to third-party websites or other online platforms. If you follow links to sites not affiliated with or controlled by us, we suggest you review their privacy and security policies and their other general terms of use. We do not guarantee and accept no responsibility for the privacy or security of those sites, including the accuracy, completeness or reliability of the information found there. Data you share on public or semi-public spaces — such as social media platforms — may become visible to other users and/or to those platforms' users, without restriction. The presence of these links does not in itself imply endorsement of the platform's content, owner or operator, unless stated otherwise in the Services.

Children's data

The Services are not intended for children, and we do not knowingly collect personal data about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has given us personal data, you can contact us using the details below to ask for it to be deleted.

Keeping your data secure, and how long we hold it

Please note that no security measure is perfect or infallible, so we cannot guarantee “perfect security”. In addition, the data you send us is not necessarily secure in transit. We recommend you do not use unsecured channels to send sensitive or confidential information.

How long we keep your personal data depends on a number of factors, including whether we need to keep it to manage your account, provide the Services, meet our legal obligations, resolve disputes or enforce any other applicable contract or policy.

Your rights and choices

Depending on where you live, you may have some or all of the rights below in relation to your personal data. These rights are not unlimited: they only apply in certain circumstances, and in some cases we may refuse your request to the extent the law allows.

The right of access and the right to be informed. You can ask for access to the personal data we hold about you.
The right to erasure. You can ask us to delete the personal data we hold about you.
The right to have data corrected. You can ask us to correct inaccurate personal data we hold about you.
The right to data portability. In certain circumstances, and subject to certain exceptions, you may have the right to obtain a copy of the personal data held about you and to ask for it to be transferred to a third party.
Managing your communication preferences. We may send you promotional emails. You can unsubscribe at any time using the unsubscribe link in our emails. Even after unsubscribing, we may still send you non-promotional emails, for example about your account or your orders.

If you live in the United Kingdom or the European Economic Area, in addition to the rights above and subject to the exceptions and limits set by local law, you may also exercise the following:

Objecting to processing, and restricting processing: You can ask us to stop or restrict the processing of your personal data for certain purposes.
Withdrawing your consent: Where the processing of your data is based on your consent, you have the right to withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal on the basis of that consent.

You can exercise these rights through the relevant areas of the Services or using the contact details below. We will not penalise you for exercising your rights. Before we process your requests we may need to verify your identity, to the extent permitted or required by law. Under applicable law you may also appoint an authorised representative to exercise your rights on your behalf. We will only accept such a representative's request if the authority you have given them is evidenced, and we may where necessary also ask you directly to confirm your identity. We will respond to your request within the time allowed by applicable law.

Complaints

If you would like to complain about how we process your personal data, please contact us using the details below. Depending on where you live, you may have the right to challenge our decision using those same details, or to complain to the relevant data protection authority. In the United Kingdom that is the Information Commissioner's Office (ICO).

International data transfers

Please note that we may transfer, store and process your personal data outside the country where you live.

If we transfer your personal data outside the United Kingdom or the European Economic Area, we rely on recognised transfer mechanisms — in particular the UK International Data Transfer Agreement or Addendum issued by the ICO, or where relevant the European Commission's standard contractual clauses — unless the transfer is to a country recognised as providing an adequate level of protection.

Changes to this privacy policy

We may update this privacy policy at any time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will publish the revised privacy policy on this website, update the “Last updated” date and give notice in accordance with applicable law.

Contact us

If you have a question about our data practices or about this privacy policy, or if you would like to exercise one of your rights, please write to us at support@lymphae.com. For the purposes of applicable data protection law, we are the controller of your personal data.