Privacy Policy

Lilika respects your privacy and is committed to protecting the personal data you provide to us. This Policy describes how we collect, use and protect information about you when you visit lilika.it or purchase our handcrafted European fabrics. Processing is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Italian law.

Data Controller

The Data Controller is Lilika, with registered office at Via Monte Napoleone 8, 20121 Milan, Italy (VAT: 00000000000). For any request regarding the processing of your personal data you can contact us at [email protected].

Data We Collect

We collect the following data:

• Contact data: name, email, phone, message when you fill out contact or sample request forms.
• Shipping and billing data: address, city, postal code, country, entered during checkout.
• Order data: cart contents, fabrics purchased, amount.
• Session tokens: authentication identifiers stored in your browser to allow you to complete a purchase and keep your cart.
• Technical data: IP address, browser type, pages visited, optionally collected through server logs.

Purpose of Processing

We process your data to:

• fulfil your orders and manage shipping;
• respond to your contact or sample requests;
• provide customer support;
• send marketing communications, only with your explicit consent;
• comply with legal obligations (invoicing, taxation, anti-fraud);
• improve the site and the quality of the service.

Legal Basis

Processing is based on:

• Performance of a contract (Art. 6.1.b GDPR) for order fulfilment;
• Consent (Art. 6.1.a GDPR) for marketing communications and non-essential cookies;
• Legal obligation (Art. 6.1.c GDPR) for accounting and tax requirements;
• Legitimate interest (Art. 6.1.f GDPR) for site security and fraud prevention.

Retention Periods

We retain data for the time strictly necessary for the purposes for which it was collected: order data is retained for 10 years, as required by Italian tax law. Data provided via the contact form is retained for 24 months from the last interaction. Marketing data is processed until consent is withdrawn.

Your Rights

As a data subject you have the right to:

• access your personal data (Art. 15 GDPR);
• request rectification (Art. 16 GDPR);
• request erasure (Art. 17 GDPR);
• restrict or object to processing (Art. 18 and 21 GDPR);
• request data portability (Art. 20 GDPR);
• withdraw consent at any time;
• lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Cookies

The site uses essential technical cookies (always on) and, subject to consent, functional, analytics and marketing cookies. For details and to manage your preferences see our Cookie Policy.

Contact

For any questions about this Policy or the processing of your personal data please contact us at [email protected] or write to Lilika, Via Monte Napoleone 8, 20121 Milan, Italy.