Privacy

Last updated: August 28, 2026

At LillyESP.com (“we,” “us,” “our,” or “Lilly ESP”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect information when you visit or use our website, Lillyesp.com, including when you contact us or purchase products through our website.

This Privacy Policy is intended to provide information in accordance with applicable data-protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Spanish data-protection legislation.

1. Data Controller

The controller responsible for the processing of your personal data is:

Company Name: Lilly ESP Research, S.L.
Trading Name: Lilly ESP
Website: Lillyesp.com
Registered Address: Lilly ESP Research, S.L.
Calle de Alcalá, 120
28009 Madrid
Spain
Email: [email protected]
Company Registration Number: B12345678
VAT Number: ESB12865678

For questions regarding this Privacy Policy or your personal data, please contact us using the email address above.

2. Personal Data We Collect

Depending on how you interact with LillyESP.com, we may collect the following categories of personal data:

Identification and Contact Information

This may include:

  • Full name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address
  • Other information you provide when contacting us

Order and Transaction Information

When you place an order, we may process information relating to:

  • Products ordered
  • Order details
  • Payment status
  • Delivery information
  • Transaction history
  • Customer communications regarding an order

Payment Information

Payments may be processed through third-party payment service providers. We do not necessarily store complete payment-card information on our own systems where payment processing is handled directly by a secure payment provider.

Website and Technical Information

When you visit our website, we may automatically collect certain technical information, such as:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Pages visited
  • Date and time of access
  • Website interactions
  • Referring website or source

The specific information collected may depend on the technologies and services used on LillyESP.com.

3. How We Use Your Personal Data

We may process your personal data for the following purposes:

To Process Orders

We use relevant information to:

  • Process and manage purchases
  • Confirm orders
  • Arrange delivery
  • Communicate about your order
  • Handle returns, cancellations, or customer-service requests

To Communicate With You

We may use your contact information to:

  • Respond to enquiries
  • Provide customer support
  • Send important service or order-related communications

To Improve Our Website and Services

We may analyse website usage and customer interactions to improve:

  • Website functionality
  • User experience
  • Customer service
  • Security
  • Products and services

Marketing Communications

Where legally permitted or where you have provided the required consent, we may send you information about products, offers, promotions, or other marketing communications.

You may withdraw your consent or unsubscribe from marketing communications at any time by using the unsubscribe option in the communication or contacting us directly.

Legal and Security Purposes

We may process personal data where necessary to:

  • Comply with legal obligations
  • Prevent fraud
  • Protect our website and customers
  • Establish, exercise, or defend legal claims

4. Legal Basis for Processing

Depending on the circumstances, we may process your personal data on one or more of the following legal bases:

Performance of a contract: When processing is necessary to process and fulfil your order or provide requested services.

Legal obligation: When processing is required to comply with applicable legal, tax, accounting, or regulatory obligations.

Legitimate interests: When processing is necessary for our legitimate business interests, provided that your fundamental rights and freedoms do not override those interests.

Consent: Where applicable, we may process personal data based on your freely given consent. You may withdraw consent at any time.

5. Sharing of Personal Data

We may share personal data with trusted third parties where necessary for legitimate business and operational purposes, including:

  • Payment service providers
  • Shipping and delivery companies
  • Website hosting providers
  • Technology and IT service providers
  • Customer-support providers
  • Professional advisers, including accountants and legal advisers
  • Government authorities or law-enforcement agencies where legally required

We require service providers processing personal data on our behalf to handle that information appropriately and in accordance with applicable data-protection requirements.

6. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data-protection law and that appropriate safeguards are used where required.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • Completing and administering orders
  • Providing customer support
  • Meeting legal, accounting, and tax obligations
  • Resolving disputes
  • Maintaining necessary business records

The specific retention period may vary depending on the type of data and the applicable legal requirements.

8. Your Rights

Subject to applicable law, you may have the right to:

  • Access your personal data
  • Request correction of inaccurate personal data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain processing activities
  • Request portability of applicable personal data
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a competent data-protection authority

For users in Spain, the relevant supervisory authority is the Spanish Data Protection Agency (AEPD). The AEPD explains that individuals have rights including access, rectification, erasure, restriction, objection, and portability, depending on the circumstances.

To exercise your rights, contact us at:

[email protected]

We may request information necessary to verify your identity before responding to a request.

9. Cookies and Similar Technologies

LillyESP.com may use cookies and similar technologies to operate and improve the website.

Cookies may be used for purposes such as:

  • Essential website functionality
  • Remembering user preferences
  • Security
  • Analytics
  • Measuring website performance

Where legally required, we will request your consent before placing non-essential cookies or similar technologies on your device.

You may manage or withdraw your cookie preferences through our cookie settings, where available, and through your browser settings.

The AEPD notes that certain cookies can involve the processing of personal data and that consent, where required, should be freely given and informed; acceptance and rejection options should be presented with comparable visibility.

10. Data Security

We take reasonable technical and organisational measures designed to protect personal data against:

  • Unauthorised access
  • Unauthorised disclosure
  • Loss
  • Alteration
  • Destruction
  • Misuse

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

The GDPR and Spanish guidance also emphasize data minimisation and privacy by default, meaning organisations should limit processing to what is necessary for the relevant purposes.

11. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage users to review the privacy policies of any external website they visit.

12. Children

LillyESP.com is not intended for use by persons who are not legally permitted to purchase or use the products or services offered through the website.

We do not knowingly collect personal data from children where doing so would violate applicable law. If you believe that a child has provided personal information to us improperly, please contact us so that we can take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • Our business operations
  • Our website
  • Applicable laws
  • Data-processing practices

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

We encourage users to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or how Lilly ESP processes personal data, please contact:

Lilly ESP
Website: Lillyesp.com
Email: [email protected]
Address: Lilly ESP Research, S.L.
Calle de Alcalá, 120
28009 Madrid
Spain