Privacy Policy
Privacy Policy of www.lilmilan.com
This Privacy Policy describes how Firgun House S.r.l. collects, uses and shares your personal data when you visit www.lilmilan.com (the "Site"), make a purchase or communicate with us. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR").
1. Data Controller
Firgun House S.r.l.
Via F.lli Cervi, Res. Sorgente SNC, 20054 Segrate (MI), Italy
VAT no. IT10322340968
Email: contact@lilmilan.com, Certified email: firgunhousesrl@pec.it
2. Data we collect
- Data you give us: name, email, phone, billing and shipping address, customer account details, the content of your messages (email, WhatsApp, chat, contact forms, LIL House appointment bookings, return requests), engraving texts.
- Back-in-stock alerts and wishlist: your email address, the product with the chosen variant and the Site language when you ask for a back-in-stock alert; the products you save to your wishlist, linked to your account if you are logged in.
- Payment data: processed by payment providers (Shopify Payments, PayPal and the other methods available at checkout). We never store your full card number.
- Usage and device data: IP address, browser type, pages and products viewed, identifiers collected through cookies and similar technologies (see Cookie Policy).
- Data from third parties: information from social networks or advertising platforms when you interact with our ads, delivery status from carriers.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing orders, payments, shipping, returns, warranty and customer care | Performance of a contract (Art. 6.1.b GDPR) |
| Tax, accounting and legal obligations | Legal obligation (Art. 6.1.c) |
| Email and SMS marketing (newsletter, news, LIL House events) if you subscribed or consented | Consent (Art. 6.1.a), withdrawable at any time |
| Communications about products similar to those you purchased | Legitimate interest (Art. 6.1.f), with right to object |
| Site usage statistics and experience improvement | Consent to analytics cookies (Art. 6.1.a) |
| Personalised advertising and remarketing on Google, Meta, TikTok and other platforms | Consent to marketing cookies (Art. 6.1.a) |
| Fraud prevention, Site security, defence of our rights | Legitimate interest (Art. 6.1.f) |
| Virtual assistant "Stella" answering your questions | Pre-contractual measures (Art. 6.1.b) |
| Sending you an alert when a sold-out product is back in stock, if you ask for it | Pre-contractual measures taken at your request (Art. 6.1.b) |
| Saving your wishlist | Pre-contractual measures taken at your request (Art. 6.1.b) |
| Analysing back-in-stock requests and wishlists in aggregate form to understand which products are most requested and plan production | Legitimate interest (Art. 6.1.f) |
4. Who we share data with
- Shopify International Ltd. (Ireland): e-commerce platform, hosting, checkout, Shopify Payments.
- Payment providers: PayPal (Europe) S.à r.l., card networks and the other methods shown at checkout.
- Klaviyo Inc. (USA): email and SMS marketing, subscription management, back-in-stock alerts and the products you save to your wishlist.
- Google Ireland Ltd.: Google Analytics 4, Google Tag Manager, Google Ads.
- Meta Platforms Ireland Ltd.: Meta Pixel, Custom Audiences, Facebook and Instagram ads.
- TikTok Technology Ltd. (Ireland): TikTok Pixel.
- Hotjar Ltd. (Malta): behaviour analytics (heatmaps, anonymised recordings).
- Teticum: "Stella" virtual assistant.
- Skimlinks Ltd. (UK): affiliate link tracking.
- Shopify apps: Wishlist Hero (wishlist), Tipo Appointment Booking (LIL House appointment bookings).
- Carriers: UPS and the other carriers listed on the shipping page.
- Tax and legal advisors, public authorities when required by law.
We do not sell your personal data.
5. International transfers
Some providers (Klaviyo, Google, Meta, TikTok, Hotjar) may process data in the USA or other non-EU countries, on the basis of the EU-US Data Privacy Framework adequacy decision for certified providers or the Standard Contractual Clauses approved by the European Commission.
6. Retention
- Orders and invoices: 10 years from the order date.
- Customer account: until you request deletion or after 5 years of inactivity.
- Back-in-stock requests and wishlist: until you request deletion or after 5 years of inactivity.
- Newsletter and SMS subscription: until you withdraw consent or unsubscribe.
- Customer care requests: 24 months after closure.
- Cookies: durations listed in the Cookie Policy.
7. Your rights
You may at any time access, rectify or erase your data, restrict processing, object to processing based on legitimate interest, request portability and withdraw consent. Write to contact@lilmilan.com. You can unsubscribe from emails via the link in every message and from SMS by replying STOP. Cookie preferences can be changed at any time via the "Cookie preferences" link in the Site footer. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of the EU country where you live.
8. Children
The Site is not intended for children under 16 and we do not knowingly collect their data.
9. Changes
We may update this policy. The current version is always published on this page with its last-updated date.