Privacy Policy

1. Introduction

The Lilybank Agency ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and deliver our services
• To communicate with you about our services
• To respond to your inquiries and provide customer support
• To send you marketing communications (with your consent)
• To improve our website and services
• To comply with legal obligations
• To protect our legitimate business interests

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your data for specific purposes
• Contract: When processing is necessary for the performance of a contract with you
• Legal obligation: When we need to comply with legal requirements
• Legitimate interests: When necessary for our legitimate business interests

5. Data Sharing and Disclosure

We may share your personal information in the following circumstances:

• With trusted service providers who assist us in operating our business
• When required by law or to respond to legal process
• To protect our rights, property, or safety, or that of others
• In connection with a business transaction (merger, acquisition, etc.)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm, and our legal obligations.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data in certain circumstances
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to certain types of processing
• Rights related to automated decision-making: Protection from automated decisions

To exercise these rights, please contact us using the details provided below.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. For detailed information about our use of cookies, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

10. International Transfers

If we transfer your personal data outside the UK, we ensure appropriate safeguards are in place to protect your data, including adequacy decisions, standard contractual clauses, or certification schemes approved by the Information Commissioner's Office (ICO).

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date at the top of this page.

13. Contact Information