Privacy Policy

Last Updated: 2023

1. Introduction

1.1 Welcome to the Lemonboxes platform, operated by Lemonboxes UK Limited and its affiliates (“Lemonboxes”, “we”, “us” or “our”). Lemonboxes takes your privacy seriously and is committed to protecting the personal data you provide to us. This Privacy Policy explains how we collect, use, process, and disclose your personal data when you visit our website, use our mobile applications, or access any of our services (collectively, the “Services”).

1.2 For the purposes of this Privacy Policy, "personal data" means any information relating to an identified or identifiable individual, as defined under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This may include, but is not limited to, your name, contact information, and payment details.

1.3 By using our Services, registering for an account, or accessing our platform, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services or provide us with your personal data.

1.4 This Policy should be read in conjunction with other notices or agreements regarding personal data collection, use, and processing provided by us.

1.5 This Policy applies to all users of the Services, including buyers and sellers (collectively referred to as “Users” or “you”).

2. When Do We Collect Personal Data?

We may collect personal data about you in the following circumstances:

• When you register for an account or use our Services;
• When you fill out forms (e.g., applications, feedback, or surveys);
• When you communicate with us, including via email, phone, live chat, or social media;
• When you conduct transactions through our Services;
• When you provide feedback, reviews, or complaints;
• When you participate in contests, promotions, or surveys;
• When you interact with our platform via cookies or similar technologies;
• When you link your Lemonboxes account to your social media accounts; and
• When you provide us with personal data for any other reason.

This list is not exhaustive and sets out some common examples of when personal data may be collected.

3. What Personal Data Do We Collect?

The personal data we collect may include, but is not limited to:

• Identity Information: Your name, date of birth, gender, and government-issued identification (if required).
• Contact Information: Email address, phone number, and billing/delivery address.
• Account Information: Login credentials, profile details, and preferences.
• Payment Information: Bank account details, credit/debit card information, and payment transaction history.
• Device and Usage Information: IP address, browser type, operating system, location data, and usage patterns.
• Marketing and Communications Data: Your preferences for receiving marketing materials and communication records.
• Transaction Data: Details about your orders, purchases, and interactions with the platform.
• Social Media Data: Information obtained when you link or interact with your social media accounts.
• Feedback and Content: Photographs, videos, reviews, and other user-generated content.

4. Cookies and Other Technologies

4.1 We use cookies and similar tracking technologies (e.g., web beacons) to collect and store information when you use our Services. These technologies help us:

• Recognise you as a user;
• Customise your experience;
• Track platform performance; and
• Deliver relevant advertising and marketing content.

4.2 You can manage or disable cookies through your browser settings. However, certain features of our platform may not function properly if cookies are disabled. For further details, please see our Cookie Policy.

5. How We Use Your Personal Data

We may use your personal data for the following purposes:

• Providing Services: To process transactions, fulfil orders, and manage your account.
• Customer Support: To respond to your queries, complaints, and requests.
• Personalisation: To tailor our Services to your preferences.
• Marketing and Advertising: To send you promotional materials, offers, and updates (subject to your consent where required).
• Security and Fraud Prevention: To detect and prevent fraud, unauthorised transactions, and other illegal activities.
• Legal Compliance: To comply with legal, regulatory, or contractual obligations.
• Analytics and Research: To improve our Services through data analysis and market research.
• Business Operations: To manage and audit our internal operations and transactions.

We will only process your personal data where we have a lawful basis to do so, such as your consent, the performance of a contract, compliance with a legal obligation, or our legitimate business interests.

6. How We Share Your Personal Data

6.1 We may share your personal data with:

• Service Providers: Third-party vendors providing services such as payment processing, IT support, and marketing.
• Business Partners: Partners with whom we collaborate to deliver products or services.
• Law Enforcement: Authorities, regulators, or courts as required by law or to protect our legal rights.
• Affiliates: Lemonboxes group companies for internal administrative purposes.

6.2 Where we share personal data with third parties, we ensure they adhere to appropriate security and confidentiality obligations.

6.3 We do not sell your personal data to third parties.

7. International Data Transfers

If we transfer your personal data outside the UK, we will ensure adequate safeguards are in place to protect your data, such as:

• Transfers to countries deemed to have adequate data protection by the UK government;
• Use of standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).

8. How We Protect Your Personal Data

8.1 We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or alteration.

8.2 While we strive to safeguard your data, no method of transmission over the Internet is entirely secure. You are responsible for keeping your account credentials confidential.

9. How Long We Retain Your Personal Data

9.1 We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy or to comply with legal requirements.

9.2 When retention is no longer required, we securely delete or anonymise your personal data.

10. Your Rights

Under the UK GDPR, you have the following rights:

• Access: Request access to your personal data.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data (“right to be forgotten”).
• Restriction: Request restriction of processing under certain circumstances.
• Objection: Object to processing of your data for direct marketing or based on legitimate interests.
• Data Portability: Request transfer of your data to another provider.
• Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact our Data Protection Officer (DPO) at [Insert Email Address].

11. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact:

Data Protection Officer
Lemonboxes UK Limited
[Insert Address]
Email: [Insert Email Address]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not handled your personal data in accordance with the law.