PRIVACYPOLICY

Lemon Gorilla EU operates this store and is the controller of the personal data described below. For anything to do with your data, email support@lemongorilla.eu.

• Order data — your name, delivery and billing address, email, telephone number if you give one, and what you ordered
• Account data — if you create an account, your login details and order history
• Payment data — we accept bank transfer and cash on delivery only. We do not take card payments and never see or store card numbers. For a transfer we see the payment reference arriving in our account; for cash on delivery the carrier collects the money
• Correspondence — emails you send us and our replies
• Newsletter — your email address, if you subscribe
• Technical data — IP address, browser type and pages viewed, through cookies and server logs

• To fulfil your order — performance of our contract with you
• To handle returns, refunds and support — performance of our contract, and our legitimate interest in resolving queries
• To meet accounting and tax obligations — compliance with a legal obligation
• To send the newsletter — your consent, which you can withdraw at any time
• To keep the store secure and working — our legitimate interest in running the service

We set the cookies the store needs to function — your basket, your session, your login and the security tokens that protect checkout. These cannot be switched off without breaking the shop. Anything beyond that is optional and only set with your consent. You can clear cookies in your browser at any time; doing so will empty your basket and sign you out.

Only what is needed to run the shop: the carrier delivering your order, our hosting and IT providers, our email provider, and our accountants or advisers where required. We do not sell your personal data and we do not share it for anyone else’s marketing. We may disclose data where the law requires it.

Our systems are hosted in the European Union. If a processor ever needs to handle data outside the EEA, the transfer is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

• Order and invoice records — as long as tax and accounting law requires
• Account data — until you close the account, then deleted or anonymised
• Newsletter consent — until you withdraw it
• Support email — while needed to deal with your query and any follow-up
• Technical logs — a short rolling window, then deleted

Under the GDPR you can ask us to:

• give you a copy of the data we hold about you
• correct anything that is wrong
• delete your data, where we have no obligation to keep it
• restrict or object to how we use it
• send it to you, or to another provider, in a portable format
• withdraw consent you gave earlier, without affecting what we did before you withdrew it

Email support@lemongorilla.eu and we will respond within one month.

If you think we have handled your data badly, tell us first so we can put it right. You also have the right to complain to the data protection supervisory authority of your own country of residence.

We may update this policy. The date shown on this page is when it last changed.