Legal
Privacy Policy
What personal information we collect, why, and your rights.
Last updated 17 September 2026
This policy explains how personal information is collected and used when you visit lmwill.shop or buy from us, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is responsible for your data
LMWILL is the controller of personal information collected through this website. You can contact us about privacy at support@lmwill.shop.
What we collect
- Order information: name, delivery and billing address, email address, phone number if you give one, items ordered and order history.
- Payment information: payments are handled by our payment providers. We receive confirmation of payment and limited details such as the card type and last four digits, never your full card number.
- Account information: if you create an account, your email address, password (stored in hashed form) and saved addresses.
- Messages: what you send us by email, for example about a return.
- Technical information: IP address, browser type and pages requested, recorded in server logs for security and to keep the site working.
How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing, delivering and supporting your order, including returns and refunds | Performance of a contract |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping the website secure | Legitimate interests |
| Answering your questions | Legitimate interests, or contract where it concerns an order |
| Sending marketing emails, only if you have opted in | Consent, which you can withdraw at any time |
We do not currently send marketing emails, and we do not sell your personal information.
Who we share it with
- Fulfilment partners who prepare and dispatch your order, and carriers who deliver it. They receive your name, delivery address, and contact details needed for delivery.
- Payment providers who process your payment and help prevent fraud. They act under their own privacy policies, which are linked at checkout.
- Our website host and email provider, who store data on our behalf.
- Authorities such as HMRC or the police, where the law requires it.
International transfers
Because our fulfilment partners are outside the UK, the delivery details needed to send your order are transferred outside the UK. Where a country does not have UK adequacy regulations, we use safeguards recognised under UK law, such as the International Data Transfer Addendum to the EU Standard Contractual Clauses, and share only what is needed to deliver your order.
How long we keep it
- Order and transaction records: 6 years from the end of the financial year, for tax and accounting purposes.
- Account information: until you close your account, then deleted within 30 days except for order records above.
- Emails with customer service: 2 years after the issue is closed.
- Server logs: up to 30 days.
Your rights
You have the right to access your personal information, correct it, ask us to erase it, restrict or object to how we use it, and receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time. To use these rights, email support@lmwill.shop. We will respond within one month.
If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Cookies
We only use essential cookies. See our Cookie policy for the full list.
Changes
We will post any changes to this policy on this page and update the date at the top.