Last updated September 28, 2026

 

At Lilytea, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal data when you visit lilytea.art, contact us, purchase our products or services, or otherwise interact with Lilytea.

 

1. Data Controller

The entity responsible for processing your personal data is:

Data Controller: Lilytea S.C.
Tax Identification Number: J22694335
Address: C/ Félix Alfaro Fournier, Vitoria-Gasteiz 01010 Álava, Spain
Email: lilytea.art@gmail.com

 

2. Personal Data We Collect

Depending on your interaction with Lilytea, we may collect:

• Name and surname
• Email address
• Postal address
• Telephone number
• Billing and invoicing information
• Payment-related information
• Information relating to orders, commissions or services requested
• Information provided by you through our customer forms or other communications
• Any other information necessary to provide the requested product or service
• Technical information collected through cookies and similar technologies, where applicable

We only collect personal data that is reasonably necessary for the purposes described in this Privacy Policy.

 

3. How We Collect Your Data

We may collect personal data when you:

• Contact us by email or through a contact form
• Request information about our products or services
• Place an order or commission an illustration or other artwork
• Provide information through our customer information forms
• Make or arrange a payment
• Communicate with us regarding an order or service
• Browse or interact with our website through cookies and similar technologies

4. Purposes of Processing

We may process your personal data for the following purposes:

• To respond to enquiries and requests
• To manage orders, commissions and other requested services
• To communicate with customers regarding their orders or services
• To prepare invoices and manage accounting and administrative matters
• To process and verify payments
• To comply with applicable tax, accounting and legal obligations
• To maintain records required by law
• To provide customer support
• To maintain and improve the website
• To ensure the security and proper functioning of the website
• To send promotional communications where you have specifically consented to receive them

 

5. Legal Basis for Processing

Depending on the purpose, the processing of your personal data is based on one or more of the following legal grounds:

Performance of a contract

We process the personal data necessary to manage orders, commissions, payments and other products or services requested by you.

Compliance with legal obligations

We may process and retain personal data where this is necessary to comply with legal obligations, including tax, accounting and invoicing requirements.

Where required by applicable law, relevant customer and transaction information may be communicated to the competent tax authorities, including the Alava Tax Authority (Hacienda Foral de Álava).

Consent

Where required, we will ask for your consent before processing your personal data for specific purposes, such as sending marketing communications.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

Legitimate interests

Where applicable, we may process personal data where this is necessary for our legitimate interests, provided that such interests do not override your rights and freedoms.

 

 6. Payment Processing

Payments may be processed through PayPal.

When you choose PayPal as your payment method, certain information may be processed by PayPal in accordance with its own terms and privacy policy.

Lilytea does not have access to or store your complete PayPal account credentials or full payment authentication information.

For more information about how PayPal processes personal data, please consult PayPal’s privacy policy.

 

7. Data Sharing and Recipients

We do not sell or rent your personal data.

Your personal data may be disclosed to third parties where this is necessary for the purposes described in this Privacy Policy, including:

PayPal, where you use PayPal to make a payment;
Tax authorities, including the Álava Tax Authority, where disclosure is necessary to comply with applicable tax and accounting obligations;
Service providers who assist us with hosting, website management, email, accounting, payment processing or other services necessary to operate the business;
Public authorities or other entities where disclosure is required by law.

Any such disclosure will be limited to the information necessary for the relevant purpose or required by applicable law.

 

8. International Data Transfers

Some service providers used by Lilytea may process personal data outside the European Economic Area (EEA).

Where this occurs, appropriate safeguards will be used in accordance with applicable data protection legislation, such as an adequacy decision, Standard Contractual Clauses or another legally recognised mechanism.

 

9. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected.

Where personal data is subject to legal, tax or accounting retention requirements, it will be retained for the period required by applicable law.

Once the applicable retention periods have expired, the data will be securely deleted or anonymised where appropriate.

 

10. Your Rights

Under applicable data protection legislation, you may have the right to:

• Access your personal data
• Request the correction of inaccurate or incomplete data
• Request the deletion of your personal data
• Request the restriction of processing
• Object to certain processing activities
• Request data portability, where applicable
• Withdraw consent where processing is based on consent

To exercise your rights, please contact us at:

Email: lilytea.art@gmail.com

You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if you believe that your personal data has been processed in breach of applicable data protection legislation.

 

11. Cookies

The website may use cookies and similar technologies for technical, analytical or other purposes.

For further information about the cookies used on this website and how to manage your preferences, please consult our Cookie Policy.

 

12. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

However, no method of transmission or storage over the internet can be guaranteed to be completely secure.

 

13. Third-Party Websites

Our website may contain links to third-party websites or services, including social media platforms and payment providers.

Lilytea is not responsible for the privacy practices or content of third-party websites. We recommend reviewing their respective privacy policies before providing them with personal information.

 

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, data processing activities or applicable legislation.

The latest version will always be available on this page, together with the date of the latest update.

 

15. Contact

If you have any questions about this Privacy Policy or how your personal data is processed, please contact us:

Data Controller: Lilytea S.C.
Tax Identification Number: J22694335
Address: C/ Félix Alfaro Fournier, Vitoria-Gasteiz 01010 Álava, Spain
Email: lilytea.art@gmail.com