< back to Lilac James homepage

Lilac James Co. Ltd Customer Privacy Notice

This privacy notice explains what to expect when we collect, use, and protect your personal information. Below, you’ll find our contact information, what data we collect, our lawful bases for using it, and how we handle it responsibly.

Contact Details
Telephone: 01480 219355
Email: info@lilacjames.com

What Information We Collect, Use, and Why

• To provide and improve our products and services, we collect and use various types of information, including:

  • Names and contact details
  • Addresses
  • Gender and pronoun preferences
  • Occupation
  • Date of birth and marital status
  • Relevant third-party information (e.g., family members)
  • Payment and financial information, including transaction and credit history
  • Usage and technical data from website interactions
  • Employment details
  • Information for crime prevention and detection, such as video and audio recordings, telematics data, and connected car information
  • Health and criminal records (where relevant)
• In addition, we may use the following special categories of information, which are treated with enhanced security

  • Racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic and biometric information, health, sex life, and sexual orientation

• For client account management and security, we may also gather details like purchase history, technical data, and marketing preferences.

• To help prevent and investigate crime, our data collection may extend to recordings in public and private areas, dashcam footage, financial data, and location information.

For Information Updates or Marketing Purposes

• We may also collect names, addresses, marketing preferences, purchase histories, website and app user data, and IP addresses to keep you informed about relevant updates and services.

For Research or Archiving Purposes

• We use certain information for research and archiving, including names, addresses, purchase history, website and app use data, and IP addresses.

To Comply with Legal Requirements

• We collect specific personal data to meet legal obligations, including identification documents, account information, and any other information necessary to comply with the law.

To Protect Client Welfare

• To protect your health and wellbeing, we may need information on emergency contacts and relevant health data.

For Recruitment Purposes

• We gather information such as contact details, employment and education history, right-to-work information, and other relevant details for recruitment purposes.

For Dealing with Queries, Complaints, or Claims

• We may collect and use information like contact details, payment history, account information, audio or video recordings, and relevant documents from past investigations.

Lawful Bases and Data Protection Rights

• Under UK data protection law, we must rely on specific lawful bases when collecting and using your data. Your rights vary depending on which lawful basis applies.
• The main bases we rely on include:
  • Consent – with your permission, you may exercise all data protection rights.
  • Contract – to enter or fulfil a contract with you, most data protection rights apply except the right to object.
  • Legal Obligation – to comply with the law, certain rights may be limited.
  • Legitimate Interests – where our need for data serves your interests or ours without undue harm; most rights apply except portability.
  • Vital Interests – where data is essential for health and wellbeing, certain rights may not apply.

• You can find more detailed descriptions of your rights on the ICO’s website. Should you wish to exercise any of these rights, please contact us.

Our Lawful Bases for Data Collection

• Each purpose for data collection has a lawful basis. Here are the primary bases we rely on for different activities:

  • For Products and Services – Consent, Contract, Legal Obligation, Legitimate Interests, and Vital Interests
  • For Client Accounts – Contract and Legitimate Interests
  • For Crime Prevention – Legitimate Interests
  • For Marketing Purposes – Consent and Legitimate Interests
  • For Research or Archiving – Legitimate Interests
  • For Legal Compliance – Legal Obligation
  • To Protect Welfare – Vital Interests
  • For Recruitment – Consent and Legitimate Interests
  • For Queries, Complaints, or Claims – Legal Obligation and Legitimate Interests
  • For Direct Marketing – Legitimate Interests

Where We Get Personal Information From

• We collect personal information from sources including:

  • You, directly
  • Publicly available sources
  • Regulatory authorities, legal bodies, or debt collection agencies
  • Past employers, market research organisations, and credit reference agencies
  • Marketing lists, suppliers, and service providers
  • Other relevant third parties

Who We Share Information With

• We may share your information with the following:

  • Data Processors including Microsoft 365 for SaaS support and RAS Data for managed IT services.
  • Third Parties – including debt collectors, insurers, professional advisors, regulatory bodies, and external auditors.
  • Publicly – on our website, social media, or other marketing platforms.
    If required, we may also share data with other parties as legally necessary.

Sharing Information Outside the UK

• When needed, we may transfer your data outside the UK, ensuring compliance with UK GDPR. For example:

  • Organisation: Google and Meta
  • Country: USA
  • Data Transfer Compliance: The UK GDPR Adequacy Regulations (Data Bridge)
• For further information, please contact us.

How to Make a Complaint

If you have any concerns or wish to raise a complaint about how we handle your data, please get in touch using the contact details above.

If you’re still unsatisfied, you can also contact the ICO at:

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline Number: 0303 123 113
Website: https://www.ico.org.uk/make-a-complaint

Last Updated: 14 November 2024