Last updated: 20 October 2026

This privacy policy explains how LilyAnne Stamps uses personal information when you visit lilyannestamps.com, place an order, create an account or contact us.

Who is responsible for your information?

LilyAnne Stamps is responsible for the personal information described in this policy.
Email: [email protected]
You can also contact us using our contact form.

What information do we collect?

Depending on how you use our website, we collect:

Contact and delivery details:
your name, email, billing and delivery addresses, and telephone number if supplied.

Order information:
products, quantities, prices, delivery instructions, order notes, transaction references, payment status, returns and refunds.

Account information:
your login details, account preferences and order history if you create an account.

Messages and reviews:
enquiries, correspondence, ratings, review text and any images or design details you choose to send.

Marketing choices:
subscription preferences, consent records and unsubscribe requests.

Technical information:
IP address, browser and device information, website activity, cookie identifiers and security logs, depending on the services enabled and your choices.

We obtain information directly from you, automatically through the website, and from payment and delivery providers about your transactions. If someone orders a gift for you, we may receive your delivery details from that person. Please only provide another person’s information where you are entitled to do so.

Why we use your information

To take and fulfil orders, arrange payment and delivery, and manage returns:
Necessary to enter into or perform our contract with you.

To answer requests before you buy:
Necessary to take steps at your request before entering into a contract. For general enquiries, we rely on our legitimate interest in providing helpful customer support.

To provide an account you request:
Necessary to provide the account service.

To maintain accounting records and meet applicable legal requirements:
Necessary to comply with legal obligations.

To protect the website, prevent misuse, manage disputes and administer reviews:
our legitimate interests in operating a secure shop, protecting the business and helping customers assess products, balanced against your rights.

To send marketing you subscribe to:
your consent. Where consent is required for optional analytics or advertising, it is also the applicable basis for that processing.

Some information is needed to process your order. Without essential payment, contact or delivery information, we may be unable to complete it. Creating an account or subscribing to marketing is optional. If you receive an order placed by someone else, our basis for using your delivery details is our legitimate interest in fulfilling that person’s order.

Payments and delivery

Payment information is handled by the payment provider you use at checkout. We receive information needed to confirm your payment, maintain order records, prevent fraud and process refunds. Please do not send full card details through our contact form or by email.

Our payment services include PayPal and WooPayments, which works with Stripe. Their notices explain their own processing, including fraud checks:

PayPal privacy statement (https://www.paypal.com/uk/legalhub/paypal/privacy-full)

Automattic / WooPayments privacy policy (https://automattic.com/privacy/)

Stripe privacy policy (https://stripe.com/privacy)

We share the recipient details needed to deliver your order with Royal Mail. See the Royal Mail privacy notice (https://www.royalmail.com/privacy-notice)

Who else receives information?

We use providers to host and maintain the website, send messages, protect it against spam and attacks, and support its operation. Relevant providers include:

Website hosting, backups and technical support:
providers that store and maintain the website and its records.

Website security and delivery:
Cloudflare, including Turnstile where used. See Cloudflare’s privacy policy (https://www.cloudflare.com/privacypolicy/)

Connected website services:
Automattic services such as Jetpack, according to the features enabled. See Automattic’s privacy policy (https://automattic.com/privacy/)

Email delivery and newsletters:
Providers that deliver our messages and administer subscriptions, where used.

Analytics and advertising:
Google and Meta, as described in the cookies section.

We may also share relevant information with professional advisers, or with authorities where required by law. Providers may act on our instructions or have their own responsibilities under data protection law, depending on the service.

Email marketing

If you subscribe, we use your email address and preferences to send product news, offers and updates with your consent. You can unsubscribe using the link in any marketing email or by contacting us. Withdrawing consent does not affect processing already carried out lawfully.

Unsubscribing from marketing does not stop order confirmations or other messages needed to fulfil your order. We may keep a minimal suppression record so we can respect your choice.

Reviews and photographs

If you submit a product review, your review, rating and display name may appear publicly. Your email address is not displayed with the review. Please avoid including private information in public reviews. We will ask permission before reusing a customer photograph for a separate promotional purpose.

Cookies, analytics and advertising

Cookies and similar technologies can remember your basket, maintain login sessions and help protect the shop. Other technologies analyse website use or measure advertising.

We use Google Analytics to understand visits and shopping activity. Meta tools support measurement of advertising and website interactions. Information processed through these tools can include device and cookie identifiers, pages visited and shopping events. The information shared depends on the integrations and features in use.

Read Google’s privacy policy (https://policies.google.com/privacy) and Meta’s privacy policy (https://www.facebook.com/privacy/policy/). Blocking cookies in your browser may affect basket or account functions and does not necessarily stop every other form of tracking.

International processing

Some service providers operate internationally and may process information outside the UK.
Our providers’ privacy notices explain their international processing arrangements. For information about transfers relevant to your personal information, including safeguards and how to obtain details, email [email protected].

Your rights

Depending on the circumstances, you can ask to access your personal information, correct inaccuracies, erase information, restrict its use, object to processing, or receive certain information in a portable format. Where we rely on consent, you can withdraw it at any time. You have the right to object to direct marketing.

These rights are subject to legal conditions. For example, we may need to retain accounting records even if you request erasure. Contact us using the details above. We normally respond within one month, subject to the rules on extensions, clarification and reasonable identity checks.

Questions and complaints

To ask a privacy question, exercise your rights or make a data protection complaint, email [email protected] or use our contact form. Please explain your concern and what you would like us to do.

We will acknowledge a data protection complaint within 30 days, investigate it appropriately and explain the outcome. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. See how to make a complaint to the ICO (https://ico.org.uk/make-a-complaint/)

Changes to this policy

We may update this policy when our services, providers or legal obligations change. The date at the top shows when it was last updated.