Please note: this wording is aligned with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and provided for convenience — it is not legal advice. We recommend a UAE-qualified professional reviews it before you rely on it.

Privacy Policy

Last updated: 21 July 2026

Lily's Secret, a trading name of Lillys Secret Candle Message FZE LLC (commercial licence no. 4430814.01, registered at Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates) ("we", "us", "our"), respects your privacy. This policy explains what personal data we collect when you use this website or contact us, how we use it, and your rights under the UAE Personal Data Protection Law (PDPL).

1. What we collect

We only collect what you choose to give us, which typically includes:

• Contact details — your name and the email address, phone or WhatsApp number you share.
• Your message and order details — the fragrance, secret message, occasion and any notes you send us.
• Basic technical data — your website language preference is stored locally in your browser only. We do not require you to create an account.

2. How we use your data

We use your information to respond to your enquiry, to prepare, confirm and fulfil your bespoke order, and to communicate with you about it. We do not sell your personal data or use it for unrelated advertising.

3. Legal basis

We process your data on the basis of your consent (given when you contact us) and to take steps at your request before entering into, and to perform, a contract with you, as permitted under the PDPL.

4. Service providers we use

To run this website and receive your messages, we use trusted providers who process data on our behalf:

• Formspree — delivers form and contact submissions to our inbox.
• Vercel — hosts the website.
• ImprovMX — forwards email sent to our domain.
• Instagram (Meta) — if you choose to message us there.

Each provider has its own privacy policy. Some may process data on servers outside the UAE; where they do, we rely on their contractual and technical safeguards.

5. How long we keep it

We keep your information only as long as needed to handle your enquiry or order and to meet any legal or accounting obligations, after which it is deleted or anonymised.

6. Your rights

Under the PDPL you may ask us to: access the personal data we hold about you; correct it if it is inaccurate; delete it; restrict or object to certain processing; and withdraw consent at any time. To exercise any of these rights, email hello@lilysecretcandles.com.

7. Cookies and local storage

This website does not use advertising or tracking cookies. It stores a single setting — your chosen language — locally in your browser so the site remembers it on your next visit. You can clear this at any time through your browser settings.

8. Security

We take reasonable technical and organisational measures to protect your information. No method of transmission over the internet is completely secure, but we work to keep your data safe.

9. Children

This website and our products are intended for adults. We do not knowingly collect data from anyone under 18.

10. Changes

We may update this policy from time to time. The current version is always the one published here.

11. Contact

For any privacy question or request, email hello@lilysecretcandles.com.