GDPR PRIVACY POLICY

1. What personal data we collect and process

Lilou collects different types of personal data for various purposes. Personal data may include, but is not limited to:

• Email address

• First name and last name

• Phone number

• Address, State, Province, ZIP/Postal code, City

2. How we use the personal data

Lilou uses the collected personal data for various purposes:

• To provide you with services

• To notify you about changes to our services and/or products

• To provide customer support

• To gather analysis or valuable information so that we can improve our services

• To detect, prevent and address technical issues

3. Legal basis for collecting and processing personal data

Lilou legal basis for collecting and using the personal data described in this Data Protection Policy depends on the personal data we collect and the specific context in which we collect the information:

• Lilou needs to perform a contract with you

• You have given Lilou permission to do so

• Processing your personal data is in Lilou legitimate interests

• Lilou needs to comply with the law

4. Retention of personal data

Lilou will retain your personal information only for as long as is necessary for the purposes set out in this Data Protection Policy.

Lilou will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

5. Data protection rights

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

• The right to access, update or to delete the information we have on you

• The right of rectification

• The right to object

• The right of restriction

• The right to data portability

• The right to withdraw consent