LYLLYBEE Privacy Policy

​

Business: Morticum LLC,

operating lyllybee (lyllybee.com)

​

Last updated: September 2026

​

This Privacy Policy describes how Morticum LLC (“we,” “us,” or “our”) collects, uses, and shares your personal information when you

visit or make a purchase from lyllybee.com (the “Site”).

​

Personal Information We Collect

When you visit the Site, we automatically collect certain information about your device, including your web browser,

IP address, time zone, and some of the cookies installed on your device. As you browse, we also collect information about the

individual pages or products you view, what website or search terms referred you to the Site, and how you interact with the Site.

We refer to this as “Device Information.”

​

We collect Device Information using:

• Cookies — data files placed on your device, often including an anonymous unique identifier. Learn more

or opt out at http://www.allaboutcookies.org.

• Log files — track actions on the Site and collect your IP address, browser type, internet service provider, referring/exit

pages, and date/time stamps.

• Web beacons, tags, and pixels — electronic files that record how you browse the Site.

​​

When you make or attempt to make a purchase, we also collect your name, billing address, shipping address, payment information

(including credit card details or Apple Pay), email address, and phone number. We refer

to this as “Order Information.”

​

“Personal Information” in this policy refers to both Device Information and Order Information.

​

How We Use Your Personal Information

We use Order Information to fulfill orders placed through the Site — processing payment, arranging shipping, and providing

invoices and order confirmations. We also use it to:

​

• Communicate with you

• Screen orders for potential risk or fraud

• Where consistent with your preferences, share information or advertising about our products

​

We use Device Information to help screen for risk and fraud (particularly your IP address), and more generally to improve and optimize the Site — for example, by analyzing how customers browse and interact with it, and assessing our marketing campaigns.​

​

Legal Bases for Processing

We rely on the following legal bases to collect, use, and share your information:

​

• As needed to provide our services — fulfilling your order, resolving disputes, or providing customer support

• Where you have given affirmative consent, which you may revoke at any time (for example, by unsubscribing from our mailing list)

• Where necessary to comply with a legal obligation, court order, or legal claim — such as retaining purchase

records for tax purposes

• Where necessary for our legitimate interests, provided those interests are not overridden by your rights —

such as improving our services and complying with our platform and payment processor obligations

​

Sharing Your Personal Information

​

We share your personal information only in limited circumstances:

• Service providers. We engage trusted third parties to perform services for our shop — including our print-on-demand fulfillment

provider, payment processors, and shipping carriers — and share only the information necessary for them

to perform those services.

• Business transfers. If we sell or merge our business, we may disclose your information as part of that transaction,

to the extent permitted by law.

• Legal compliance. We may disclose your information if we believe in good faith it is reasonably necessary to (a) respond to legal process or government requests, (b) enforce our agreements and policies, (c) prevent or investigate fraud, security, or technical issues, or (d) protect the rights, property, or safety of our customers or others.

​

We do not sell your personal information to third parties for their own marketing purposes.

​

International Data Transfers

We are based in the United States, and we may store and process your information through third-party hosting services in the US and other jurisdictions. If you are located outside the US, including in the European Economic Area or UK, your information will be transferred to and processed in the US.

​

Where we transfer personal information from the EEA or UK, we rely on the European Commission’s Standard Contractual

Clauses (SCCs), or another legally recognized transfer mechanism, as the basis for that transfer.

​

Data Retention

We retain your Order Information for as long as necessary to provide our services, comply with legal and tax obligations, resolve

disputes, and enforce our agreements. As a general practice, we retain order records for 4 years unless a longer period is required

by law or you request earlier deletion (subject to the exceptions above).

​

Your Privacy Rights

​

European and UK Residents

If you are located in the EEA or UK, you have the right to:

​

• Access the personal information we hold about you

• Correct inaccurate information

• Delete your information, subject to legal exceptions (e.g., where we must retain records for tax purposes)

• Object to processing based on our legitimate interests, or to marketing communications

• Complain to your local data protection authority

​

We process your information to fulfill contracts with you (such as an order) and to pursue the legitimate business interests described above.

​

California Residents

​

If you are a California resident, the California Consumer Privacy Act (CCPA),

as amended, gives you the right to:

• Know what personal information we collect, use, and disclose

• Request deletion of your personal information, subject to certain exceptions

• Correct inaccurate personal information

• Opt out of the sale or sharing of your personal information (we do not sell or share

personal information as defined under the CCPA)

• Not be discriminated against for exercising these rights

​

To exercise any of these rights, contact us using the information below. We may need to verify your identity

before processing your request.

​

Exercising Your Rights

To exercise any right described above — access, correction, deletion, or objection —

please contact us through our customer service chat at www.lyllybee.com. We will

respond within the timeframe required by applicable law.

​

Children’s Privacy

The Site is not directed to children under 16, and we do not knowingly collect personal information from children

under 16. If you believe we have inadvertently collected such information, please contact us so we can delete it.

​

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational,

legal, or regulatory reasons. We will post the updated policy on this page with a revised “Last updated” date.

 

Contact Us

For questions about this policy or to exercise your privacy rights, please contact us through our customer

service chat at www.lyllybee.com.