Privacy-Policy

Last updated: 10 August 2026

Lila Rasa respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and protect your information when you visit www.lilarasa.co, make a purchase, create an account, subscribe to our communications or otherwise interact with us.

1. Who we are

Lila Rasa is a trading name of:

Rudram Market Development Services Ltd
Company number: 13512989
UK VAT registration number: GB 395 8087 41
Registered office:
12 Chichester Way
London
E14 3EG
United Kingdom

Rudram Market Development Services Ltd is the data controller responsible for the personal information collected through lilarasa.co.

For privacy enquiries or to exercise your data-protection rights, contact:

Email: we@lilarasa.co

2. Personal information we collect

Depending on how you interact with us, we may collect the following information.

Identity and contact information

This may include your:

  • Name
  • Billing and delivery addresses
  • Email address
  • Telephone number
  • Account username or login information
  • Gift recipient’s name and delivery details

Order and transaction information

This may include:

  • Products purchased, returned, exchanged or saved
  • Order numbers and order history
  • Payment status
  • Delivery method
  • Discount codes or gift cards used
  • Refunds, returns and customer-service history
  • Fraud-prevention and payment-verification results

We do not ordinarily receive or store your complete payment-card number. Payments are securely processed by Shopify and its authorised payment partners.

Payment information

Depending on the device, location and checkout options available, payments may be made using:

  • Visa
  • Mastercard
  • American Express
  • Diners Club
  • Discover
  • Maestro
  • UnionPay
  • Apple Pay
  • Google Pay
  • Shop Pay

When you use a payment method or digital wallet, the relevant provider may process your information under its own privacy policy.

Shop Pay Instalments are currently disabled. Klarna should be added to this policy only if and when it becomes active.

Account information

If customer accounts are enabled, we may collect:

  • Account login details
  • Saved addresses
  • Order history
  • Communication preferences
  • Products saved to a wishlist or basket, where available

Communications

We collect information you provide when you:

  • Contact customer care
  • Ask a product or delivery question
  • Request a return or refund
  • Submit a form
  • Respond to a survey
  • Enter a promotion or competition
  • Communicate with us by email or social media

This may include photographs of products, packaging or damage that you send to help us resolve an enquiry.

Marketing preferences

We may collect:

  • Whether you have subscribed to our newsletter
  • Your email-marketing preferences
  • Records of consent
  • Unsubscribe requests
  • Your engagement with our emails, such as opens and link clicks, where permitted

Technical and usage information

When you use our website, Shopify and other authorised technologies may collect:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Approximate location
  • Time zone
  • Pages and products viewed
  • Searches performed
  • Items added to a basket
  • Referral source
  • Website navigation and interaction information
  • Cookie and consent preferences

Non-essential analytics or advertising information will only be collected where permitted and, where required, after you have provided consent.

3. How we collect your information

We collect personal information:

  • Directly from you when you order, register, subscribe or contact us
  • Automatically through Shopify, cookies and similar technologies
  • From payment, fraud-prevention and delivery providers
  • From marketing platforms where you have interacted with our advertising
  • From social-media platforms when you contact or interact with us
  • From publicly available sources where legally permitted
  • From another person who purchases a gift and provides your delivery details

If you provide another person’s information, you should ensure that you have their permission to do so.

4. Why we use your information

We use personal information for the following purposes.

Purpose

Information used

Lawful basis

Processing and delivering orders

Identity, contact, payment and order information

Performance of a contract

Processing payments and refunds

Transaction and payment information

Performance of a contract

Managing returns, damage claims and customer service

Contact, order, communication and photographic information

Performance of a contract and legitimate interests

Managing customer accounts

Identity, contact and account information

Performance of a contract

Preventing fraud and securing our website

Payment, device, technical and transaction information

Legitimate interests and legal obligations

Maintaining financial and tax records

Order, payment and transaction information

Legal obligation

Sending service communications

Contact and order information

Performance of a contract

Sending newsletters and promotional communications

Contact, preference and engagement information

Consent or legitimate interests where legally permitted

Measuring and improving our website

Technical and usage information

Consent where required, or legitimate interests for strictly necessary analysis

Personalising website content and advertising

Usage, cookie and marketing information

Consent

Protecting our legal rights and resolving disputes

Relevant order, account and communication records

Legitimate interests and legal obligations

Complying with regulatory or legal requirements

Relevant personal information

Legal obligation

Where we rely on legitimate interests, we consider whether our business need is necessary and proportionate and whether it unfairly affects your rights.

5. Orders and fulfilment

We use your personal information to:

  • Confirm and process your order
  • Verify payment
  • Detect and prevent fraudulent transactions
  • Prepare and dispatch your products
  • Provide delivery updates
  • Manage returns, refunds or replacements
  • Respond to enquiries concerning your purchase

We may share the information required to deliver your order with:

  • Royal Mail
  • DHL
  • UPS
  • Customs authorities and delivery partners
  • Payment and fraud-prevention providers

These organisations receive only the information reasonably required to provide their services or meet legal obligations.

6. Shopify and payment processing

Our online store is hosted by Shopify. Shopify provides the ecommerce platform through which we sell our products and may process information about:

  • Website visits
  • Customer accounts
  • Shopping baskets
  • Checkout activity
  • Orders
  • Payments
  • Fraud indicators
  • Device and network information

Shopify may process information in the United Kingdom, European Economic Area, Canada, the United States and other countries in which Shopify or its service providers operate.

Shopify describes its international transfer arrangements, including contractual safeguards, in its Privacy Policy.

Shop Pay, Apple Pay, Google Pay and card issuers may also process information as independent data controllers under their respective privacy policies.

7. Email marketing

If you subscribe to receive Lila Rasa news, collection stories, product launches or offers, we may use your name, email address and engagement information to send relevant communications.

Our email communications may be managed using Brevo.

You can unsubscribe at any time by:

  • Selecting the unsubscribe link in any marketing email; or
  • Emailing we@lilarasa.co

Unsubscribing from marketing does not prevent us from sending essential order, payment, delivery, security or customer-service messages.

We may retain a limited suppression record after you unsubscribe to ensure that we respect your request.

We do not sell customer email addresses or marketing lists.

8. Cookies and similar technologies

Our website uses cookies and similar technologies to operate the store, remember preferences, maintain security and support checkout.

Cookies may be classified as:

Strictly necessary cookies

These are required for functions such as:

  • Shopping baskets
  • Checkout
  • Payment processing
  • Fraud prevention
  • Website security
  • Account login
  • Saving privacy preferences

These cookies generally cannot be disabled through our consent tool because the website cannot function properly without them.

Functional cookies

These may remember choices such as your region, currency or website preferences.

Analytics cookies

These help us understand how visitors use the website and how its performance can be improved.

Advertising cookies

These may be used to:

  • Measure advertising performance
  • Limit repeated advertisements
  • Build advertising audiences
  • Show more relevant advertisements
  • Understand whether an advertisement led to a visit or purchase

We will request consent before using non-essential analytics or advertising cookies where required.

You should be able to accept, reject or manage non-essential cookies through the website’s cookie settings. Withdrawing consent will not affect the lawfulness of processing that occurred before withdrawal.

A separate Cookie Policy should identify the specific cookies and providers in use once the final analytics and advertising setup has been completed.

9. Analytics and digital advertising

Lila Rasa may use analytics and advertising services to understand website performance and measure marketing campaigns.

These may eventually include services such as:

  • Google Analytics
  • Google Ads
  • Meta Pixel
  • Meta Conversions API
  • Microsoft Clarity
  • Other approved analytics or advertising platforms

These services must not be described as active until they have actually been installed.

Where these services use non-essential cookies, pixels or similar tracking technologies, they should only be activated after the appropriate consent has been obtained.

When an advertising or analytics provider is introduced, this Privacy Policy and the Cookie Policy must be updated to identify:

  • The provider
  • The information collected
  • The purpose
  • The relevant lawful basis
  • How consent can be withdrawn
  • Any international data transfers

10. Who receives your information

We may disclose relevant information to trusted service providers, including:

  • Shopify and approved Shopify applications
  • Payment processors, banks and digital-wallet providers
  • Royal Mail, DHL, UPS and delivery partners
  • Brevo and other authorised communication providers
  • Website hosting, maintenance and technical-support providers
  • Fraud-prevention and security providers
  • Analytics and advertising providers, where enabled
  • Professional advisers, including accountants, auditors, insurers and solicitors
  • Government, regulatory, customs, tax or law-enforcement authorities where required
  • A buyer, investor or successor in connection with a restructuring, merger or sale of the business

Service providers may only use information for the agreed purpose and must protect it appropriately.

We do not sell personal information in the ordinary meaning of selling customer details for money.

11. International transfers

Some providers, including Shopify, payment providers, email services and future advertising platforms, may process personal information outside the United Kingdom.

Where information is transferred to a country without a UK adequacy decision, we will require an appropriate safeguard where legally required. This may include:

  • The UK International Data Transfer Agreement
  • The UK Addendum to approved Standard Contractual Clauses
  • Another legally recognised transfer mechanism

Providers may also rely on their own approved safeguards, depending on their role and the destination.

You may contact us for further information about the safeguards relevant to your information.

12. How long we keep information

We retain personal information only for as long as reasonably necessary.

Our normal retention periods are:

Information

Normal retention period

Orders, invoices and financial records

Up to 6 years after the relevant financial year

Customer accounts

While active and for a reasonable period afterwards

Customer-service correspondence

Normally up to 3 years after resolution

Return, refund and damage records

Normally up to 6 years where needed for legal or accounting purposes

Marketing subscription

Until you unsubscribe or we determine it is no longer active

Marketing suppression record

As long as required to respect your opt-out

Abandoned checkout information

Normally up to 12 months

Website analytics

According to the configured provider, normally no longer than 26 months

Fraud and chargeback information

Normally up to 6 years

Cookie-consent records

For as long as needed to demonstrate consent

We may keep information longer where required by law, taxation requirements, litigation, fraud prevention or an unresolved dispute.

After the applicable period, information will be deleted, anonymised or securely restricted.

13. How we protect information

We use appropriate technical and organisational safeguards designed to protect personal information. These include, where applicable:

  • Secure Shopify hosting
  • Encrypted website connections
  • Access controls
  • Strong authentication
  • Restricted staff and service-provider access
  • Payment-security controls
  • System monitoring and updates
  • Secure deletion or anonymisation

No internet transmission or electronic-storage system can be guaranteed as completely secure. If we become aware of a personal-data breach, we will investigate it and notify affected individuals and regulators where legally required.

14. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Request access to your personal information
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete information
  • Ask us to restrict processing
  • Object to processing based on legitimate interests
  • Object to direct marketing at any time
  • Request certain information in a portable format
  • Withdraw consent at any time
  • Ask for information about international-transfer safeguards
  • Complain to a data-protection regulator
  • Request human intervention where a significant decision is made solely by automated means

These rights are not absolute, and legal exceptions may apply.

To exercise a right, email we@lilarasa.co. We may request information needed to verify your identity and protect your information from unauthorised disclosure.

We normally respond within one month, although the law permits an extension for particularly complex or numerous requests.

You will not ordinarily be charged for exercising your rights. A reasonable fee may be charged, or a request refused, if it is manifestly unfounded or excessive.

15. Automated processing and fraud prevention

Shopify, payment providers and fraud-prevention services may automatically assess transactions for indicators of fraud, misuse or security risk.

An order may be delayed, reviewed or refused where fraud or unauthorised activity is reasonably suspected.

We do not currently use solely automated decision-making that produces legal or similarly significant effects beyond payment, fraud-prevention and security processes necessary to operate the store.

Advertising platforms may create audience segments or infer interests when their technologies are enabled and the required consent has been obtained.

16. Children’s information

Our website is not intended for children under 16, and we do not knowingly collect personal information directly from children.

If you believe that a child has provided us with personal information, contact we@lilarasa.co so that we can investigate and take appropriate action.

17. Social media and external websites

Our website may link to Instagram, Facebook, Pinterest or other external platforms and websites.

These organisations control their own services and may collect information when you visit them or interact with embedded content. Their processing is governed by their own privacy policies.

Our Privacy Policy does not apply to independently operated third-party websites.

18. Changes to this policy

We may update this Privacy Policy when:

  • Our services or business practices change
  • New Shopify applications are installed
  • Analytics or advertising services are introduced
  • Payment or delivery providers change
  • Legal or regulatory requirements change

The revised version will be published on this page with an updated revision date. Where a change materially affects how we use personal information, we will provide additional notice where appropriate.

19. Complaints

Please contact us first if you have a concern about how we use your personal information:

Email: we@lilarasa.co

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: www.ico.org.uk

If you live outside the UK, you may also have the right to contact the data-protection authority in your country.

Short form privacy wording

Newsletter form

By subscribing, you agree to receive Lila Rasa news, collection stories and offers by email. You can unsubscribe at any time. Read our Privacy Policy.

The signup box must remain unticked by default.

Contact form

We will use the information you provide to respond to your enquiry and manage any related request. Please read our Privacy Policy for more information.

Checkout

We use your information to process your order, take payment, arrange delivery, prevent fraud and provide customer care, as described in our Privacy Policy.