Last updated: 26 October 2026
This policy explains what personal information Lulito’s collects, why we collect it, and what we do with it. We are the “data controller” for that information under UK data protection law.
Who we are
Lulito’s is a handmade gifting business creating bespoke hampers, bouquets and gift bases, hand-delivered in Brighton & Hove.
- Trading name: Lulito’s
- Legal entity: Alejandra Alzate Cerquera, trading as Lulito’s
- Email: info@lulitos.co.uk
- WhatsApp: +44 7719 706286
- Website: www.lulitos.co.uk
What we collect and why
When you contact us
Our contact form collects your name, email address, phone number (optional) and your message. We use this only to reply to your enquiry and to discuss any order you are considering. The lawful basis is our legitimate interest in responding to people who get in touch, and taking steps at your request before entering a contract.
If you message us on WhatsApp or Instagram, we receive whatever information you send us there. Those conversations are also held on Meta’s platforms under their own privacy terms.
When you place an order
To fulfil an order we collect your name, billing and delivery address, email address, phone number, order details and any personalisation you ask for (for example the occasion or colour scheme for a bouquet). We use this to make your gift, arrange delivery, take payment and keep proper business records. The lawful basis is performance of our contract with you, and our legal obligation to retain transaction records. We do not store card details.
If you create an account
You can order as a guest. If you choose to create an account, we store your name, email address, saved addresses and order history so you don’t have to re-enter them.
Automatically, when you browse
Like most websites, ours records technical information such as your IP address, browser type, pages viewed and the site you arrived from. This is used to keep the site secure, working and reasonably fast. The lawful basis is our legitimate interest in protecting and maintaining the site.
Who we share it with
We do not sell your personal information. We share it only with the services that make this website and our orders work:
- IONOS — stores the website and its database.
- WooCommerce — runs the shop and stores order records.
- Wordfence — website security and firewall; inspects traffic including IP addresses.
- Cloudflare Turnstile — anti-spam check on our contact form.
- Hostinger — hosts our email inbox, where your emails to us are received.
- Google (Gmail) — sends this website’s automatic emails, such as order confirmations and contact form notifications.
We may also disclose information where we are legally required to, or to establish or defend legal claims.
Cookies
Cookies are small files stored on your device. We use:
- Essential cookies — remember what’s in your basket, keep you logged in, and protect the site. These are required for the site to work and cannot be switched off.
You can delete or block cookies through your browser settings, though parts of the site may stop working if you block essential ones.
How long we keep it
- Enquiries: up to 2 years after our last contact with you.
- Orders and transaction records: six years from the end of the relevant tax year, as UK tax law requires.
- Account details: until you ask us to close your account.
Your rights
Under UK data protection law you have the right to ask us for a copy of the personal information we hold about you; to have it corrected if it is wrong; to have it deleted; to restrict or object to how we use it; and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.
To exercise any of these rights, email us at info@lulitos.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change this policy we will update the date at the top of this page.