Privacy & Cookies Policy

Who is Leeloo Dolls

Leeloo Dolls is a UK-based official retailer of leading sex doll brands.

Leeloo Dolls Ltd, registered in England and Wales (Registered company number 15043162), of Suite 1645, 60 Tottenham Court Road, Fitzrovia, London, W1T 2EW, United Kingdom (referred to as “Leeloo Dolls”, “we”, “us” and “our” in this privacy notice) is the controller and responsible for your personal data collected through the www.leeloodolls.com or www.leeloodolls.co.uk website (the “website”).

The following company is under the same ownership but does not operate either website and does not control your personal data:

• LEELOO DOLLS LTDRegistered in the Republic of Cyprus. Registration number HE 497025. Registered office: Charalampou Mouskou & Grigori Afxentiou, 20, Athinodorou Business Center, 3rd floor, Flat/Office 306, 8010 Paphos, Cyprus.

If that changes — for example if that company begins operating one of the websites or processing your data — this notice will be updated to name it as a controller before it does so.

For any questions regarding this privacy policy or your personal data, you can contact our Data Protection Officer. The contact details can be found in the "How to Contact Us" section at the end of this policy.

Our commitment to you

We are devoted to the secure and fair management of your personal data. Your data is processed with transparency, legality, and fairness. This privacy policy explicates the personal data we obtain from you and its usage. We gather and use your personal data for several purposes including, but not limited to:

• Processing your orders
• Fulfilling orders placed on your behalf (e.g., e-gift card orders)
• Updating you on the latest offers and trends
• Enhancing your shopping experience
• Tailoring our marketing to your interests
• Improving our services
• Fulfilling our legal obligations

How we keep your data safe and secure

We employ appropriate organisational safeguards and security measures to prevent accidental loss, unauthorised access, alteration or disclosure of your data. Your personal data is securely encrypted during communication between your browser and our website. Any third-party contractors processing your personal data on our behalf are required to have robust security measures to protect your data and handle it in accordance with the law. In the unlikely event of a personal data breach, we will alert you and any applicable regulator as legally required.

The personal data we collect

Personal data refers to any information that can be used to identify an individual. It does not include anonymised data, where identifying information has been removed.

Our website is designed for an adult audience, and we do not knowingly collect any data from children under the age of 18 or sell products to children. If you are under the age of 18, you are prohibited from using or submitting your data to the website.

The personal data we collect falls into these categories:

• Identity Data: First name, last name, title, date of birth (optional), occupation, personal description, photo, and gender. If you choose to use a third-party sign-in method such as Google Sign-In, this may also include the unique account identifier associated with that provider and the basic profile information made available to us, such as your first name, last name and profile image.
• Contact Data: Email address, billing address, delivery address, location, country, telephone number, loyalty programme membership number, social media id (if you contact us through social media), and address details you choose to search for or autofill using Google Places address search on our website.
• Financial Data: Payment card details and bank account information.
• Transaction Data: Details of your purchases and the fulfilment of your orders (such as basket number, order number, subtotal, title, currency, discounts, shipping, number of items, product number, single item price, category, tax etc.), payments to and from you and details of other products and services you have received from us, correspondence or communications with you regarding your orders, and details of any rewards and bonuses awarded.
• Technical Data: Details of the device(s) you use to access our services, your internet protocol (IP) address, login data, your username and password, details about the authentication method used to access your account (including where you use Google Sign-In), browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
• Profile Data: Purchases or orders made by you, product and style interests, preferences, feedback, and survey responses.
• Usage Data: Information such as how and when you use our website/app, how you navigated through it, what you searched for; website/app performance statistics, traffic, location, weblogs and other communication data; loyalty programme activities; and details of any other Leeloo Dolls products and services used by you.
• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data as it does not directly or indirectly reveal your identity. For instance, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. Nevertheless, if we combine or connect Aggregated Data with your personal data such that it can directly or indirectly identify you, we treat the combined data as personal data which will be used following this privacy notice.

How we collect your data

We may collect personal data about you in the following ways:

• Direct Interactions - We collect your Identity, Contact, Financial, Transaction, Profile, and Marketing and Communications data (as outlined above) when you voluntarily fill in forms, input information online or interact with us by mail, phone, email or otherwise. For instance, you provide personal data when you:
  • Create an account or purchase products on our website. If you order as a guest we create an account for you from the email address you gave at checkout, so that you can sign in to see that order;
  • Sign in or register using Google Sign-In where this option is available;
  • Subscribe to our newsletter, discussion boards, social media sites or create favourites lists;
  • Enter a competition;
  • Join our loyalty programme;
  • Participate in a voluntary market research survey;
  • Contact us with a query or to report a problem (via phone, email, social media, or messaging service, or a form on our website such as the contact form or "Share my basket", which sends us your basket, your email address and any message you add so that we can reply);
• Automated Technologies or Interactions - As you engage with our website, we may automatically collect Technical Data about your equipment, Usage Data about your browsing actions and patterns, and Contact Data when tasks via our website remain uncompleted, such as incomplete orders or abandoned baskets. This data is collected using cookies, server logs and similar technologies. Please see our Cookie Policy for further details.
• Third Parties - We may obtain personal data about you from various third parties, which include:
  • Technical Data from third parties, including analytics providers like Google. Further information can be found in the section 'Marketing preferences, adverts and cookies'.
  • Technical Data from affiliate networks that you used to access our website;
  • Identity and Contact data from organisations (including law enforcement agencies), associations, and groups that share data for the purposes of fraud prevention and detection and credit risk reduction;
  • Contact, Financial and Transaction Data from providers of technical, payment, and delivery services.
  • Identity, Contact and authentication-related data from third-party identity providers where you choose to use services such as Google Sign-In.
  • Contact and location-related data from Google Places when you use address autocomplete or address search features on our website.

How we use your data

The legal basis for processing your personal data

We only gather and process your personal data when we have a legitimate reason to do so. As a data controller, the legal basis for our gathering and use of your personal data varies depending on how and why we collected it.

We will only gather personal data from you when:

• we have your consent to do so, or
• we require your personal data to perform a contract with you, such as processing a payment from you, fulfilling your order, or providing customer support related to an order, or
• the processing is in our legitimate interests and not overridden by your rights, or
• we have a legal obligation to collect or disclose personal data from you.

Uses made of your personal data

Leeloo Dolls uses your personal data to facilitate a variety of different activities. The types of data used and the legal grounds we rely on when processing them, including our legitimate interests where appropriate, are outlined in the table below. Please note that we may process your personal data using more than one legal basis, depending on the specific activity involved. Should you require details about the specific legal grounds we rely on to process your personal data where more than one ground has been set out in the table below, do not hesitate to contact us.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another purpose that is compatible with the original purpose. If we wish to use your personal data for an unrelated purpose, we will inform you and explain the legal basis which allows us to do so. We may process personal data without your consent, in compliance with the above rules, where this is required or permitted by law.

Should you have any questions about how Leeloo Dolls uses any of your personal data, kindly contact our Data Protection Officer at [email protected].

How long we keep your data for

We will retain your personal data only as long as necessary for the purpose(s) it was provided for and to meet our legal obligations. Further details of the periods for which we retain data are available upon request.

Marketing preferences, advertisements and cookies

Marketing - your preferences

We may send you marketing communications and promotional offers:

• if you have created an account with us or purchased products from us, or registered for a promotion or event, and you have not opted out of receiving such marketing (in accordance with your preferences, as outlined below);
• by email if you have opted for email newsletters;
• but never on the basis of an account we created for you automatically when you ordered as a guest. That account starts with marketing and newsletter emails switched off, because you did not ask for it. You will only receive marketing from us if you turn it on yourself in Notification Preferences or subscribe to our newsletter. Messages about an order you actually placed are not marketing and are sent either way;
• if you have given us your details when you entered a competition and you have agreed to receive such marketing (in line with your preferences, as explained below).

We may use your Identity, Contact, Technical, Transactional, Usage, Profile Data and Marketing and Communications Data to form an impression on what we think you might like or what might interest you, and to send you details of products and offers which could be relevant to you.

We will request your preferences in relation to receiving marketing communications by email, post, SMS and other communication channels.

Occasionally, we may also include inserts advertising goods, services, or offers from other third-party companies that might interest you with your order.

Regarding third-party marketing communications, we will obtain your explicit opt-in consent before we share your personal data with any third party for marketing purposes.

You will always maintain full control over your marketing preferences. If at any point, you wish to stop receiving marketing information from us (or any third party, if applicable):

• you can unsubscribe or 'opt-out' by using the unsubscribe button and following the link included in the footer of any marketing email; or
• account holders may withdraw their consent by simply logging into My Account and editing your 'Contact Preferences'.

We will process all opt-out requests as soon as possible. However, please note that due to the nature of our IT systems and servers, it may take a few days for any opt-out request to be implemented.

Cookies

Our website uses cookies to differentiate you from other users of our website and to keep track of your visits. They assist us in providing you with the best possible experience when you browse our website and in making enhancements to our website. They also aid us and our advertising networks in making advertising relevant to you and your interests. You can adjust your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

For detailed information on the cookies which we and our third-party providers use and the reasons why we use them, please refer to our Cookie Policy.

Online advertising

We utilise online advertising to keep you updated about our activities and to assist you in finding our products. Like many companies, we may target Leeloo Doll banners and ads to you when you use other websites and apps, based on your Contact, Technical, Usage and Profile Data. We achieve this using a variety of digital marketing networks and ad exchanges, along with a range of advertising technologies such as web beacons, pixels, ad tags, cookies, and mobile identifiers, as well as specific services offered by some sites and social networks, such as Facebook’s Custom Audience Service.

Analytics and targeted advertising tools

We use an array of analytics and targeted advertising tools to present relevant website content on our website and online advertisements on other websites and apps (as detailed above) to you, provide relevant content to you in marketing communications (where applicable), and to measure the effectiveness of the advertising provided. For instance, we use tools like Google Analytics to analyse Google's interest-based advertising data and/or third-party audience data (such as age, marital status, life event, gender and interests) to target and enhance our marketing campaigns, marketing strategies and website content.

We may also use tools provided by other third parties, such as Facebook and Bing to carry out similar tasks, using your Contact, Technical, Usage and Profile Data.

To opt out of targeted advertising, you need to disable your ‘cookies’ in your browser settings (see Cookie Policy for details) or opt-out of the relevant third-party Ad Settings. For example, you can opt-out of the Google Display Advertising Features. As an additional privacy measure, you can also utilise the Digital Advertising Alliance's tool called WebChoices, which includes companies such as Google, Responsys and Facebook. WebChoices can perform a quick scan of your computer or mobile devices, identify which participating companies have enabled customised ads for your browser, and adjust your browser preferences accordingly.

Should you require any further information about the data collected by these third parties or the manner in which the data is used, please contact us.

Tidio Chat

We use Tidio Chat to provide live chat services on our website. Tidio may collect data such as your name, email address, and chat history. This data helps us to provide you with immediate support and enhance your customer service experience. For more details on how Tidio processes your data, please refer to Tidio's privacy policy.

Live chat and AI assistant

Some visitors are shown our own live chat instead of Tidio Chat. When you use it, we collect the messages you write; the page and product you are viewing when you send a message, together with the options you have selected in the doll builder; a reference to your basket, and to an order where you open the chat from an order page; your email address; and the country and language of the site you are using. If you are signed in, the conversation is linked to your account.

While you have a chat open, we record the addresses and titles of the pages you open on our site (never a search term or what you type into a form), keeping the last 20, so that the person answering can see what you were looking at.

While you have a chat with us, your browser also tells us every 20 seconds that a page of our site is open and in view, and once when you leave it or switch to another tab, so that the person answering knows whether you are still on the site with the chat minimised or have left. Only that time is recorded, not which page (that is the list above), and it is kept with the conversation.

Once a member of our team is in the chat, or you have asked for one, they can see your message as you type it, before you send it. It is kept for a few seconds only and is not stored.

While our chat is offered to you, we see which page of our shop you are on, roughly where you are (the country), whether your basket has items, and how long you have been on the site, so that a member of our team can offer help. We do this only if you accepted analytics cookies, or once you use our chat, as part of the chat you asked for. If you declined analytics cookies and have not chatted with us, your browser sends nothing and keeps no identifier, and switching analytics off in your cookie settings stops it at once and removes the identifier. Your browser sends this every 30 seconds while a page of our shop is in view, with a random identifier (see ll_chat_visitor below). If you have not chatted with us, we do not know who you are. If you already have a chat with us in this browser, our team sees this information next to that chat. Nothing of this is stored: it is forgotten two minutes after you leave. If a member of our team writes to you, their message appears next to the chat button and starts a chat like any other.

An email address is required to start a chat: before your first message we ask for it, or use the one on your account if you are signed in. We use it to reply to you by email when nobody from our team is free to join the conversation, and we then ask you to confirm it or give us another one. No name is collected. Signing up for our newsletter in the chat is optional and the box is unticked: only if you tick it, your email address is also sent for newsletter signup, exactly as when you sign up in the footer of our website, on the basis of your consent.

If you have not opened the chat within a couple of minutes of a reply from our team (because you left the site or minimised the chat), we email their reply to the address you gave, at most five times a day for one chat, with a link that opens the conversation again. The link works for 14 days and anyone who has it can open the chat, so do not forward the email.

An AI assistant answers first, and a member of our team may join the conversation or reply to you by email. To produce its answers, the text of your messages and the product details above are processed by Anthropic, PBC, which acts as our processor and is located in the United States (see "Your data and countries outside of Europe" below). Before your messages are sent to Anthropic we remove email addresses and phone numbers from the text. Other details you type, such as a postal address, are not removed, so please share only what your question needs. Answers are generated automatically and can contain mistakes: the price shown at checkout is always the one that applies. The same redacted conversation may also be processed by Anthropic to draft a reply for our team, which a person reads and edits before anything is sent to you.

The same redacted text of each message you send, together with the assistant's previous reply, is also processed by Anthropic to detect when you are asking for a person or the assistant is not helping you, so that a member of our team can be asked to join the conversation.

We store conversations ourselves and copy them to our customer relationship management system so that our team can follow up. We keep a conversation for 24 months after its last message and then delete it. When you start a conversation we use Google reCAPTCHA (described below) to protect the chat from abuse.

You may send photos in the chat, for example of a delivery, a doll or a look you like. Before we store a photo we re-encode it and remove the metadata it carries, including location data. Photos are stored privately by us and shown to our team. They are never sent to the AI assistant, which is only told how many photos you sent, and never copied to our customer relationship management system. A member of our team may remove a photo from the conversation. Photos are kept and deleted together with the conversation, after 24 months. Pictures our team or the AI assistant show you in the chat (product, option and promotion pictures and screenshots of our website) are our own site content.

At the end of a chat we may ask how it went. If you answer, we store your rating (one of three faces) and any comment you add with the conversation, so that our team can see it and improve the service. Your rating is not sent to the AI assistant or copied to our customer relationship management system, and it is deleted with the conversation, after 24 months.

When our assistant has shown you some dolls, it may offer to email them to you. Only if you tap "Email me these dolls", we send one email with the dolls from that reply to the email address you gave the chat, once for each tap. We record with the conversation that it was sent; like every chat, the conversation and the dolls it showed you are kept with your enquiry in our customer relationship management system. Nothing else is subscribed: you are not signed up for our newsletter or any other emails.

Our team may keep private notes about you, filed under your email address, to serve you better next time. They are visible to our staff only, never sent to the AI assistant or to our CRM, and are deleted 24 months after they were last edited.

When a member of our team joins a conversation, and when a conversation ends, the same AI provider, Anthropic, writes a short summary of the conversation from its messages. The summary is stored with the conversation, kept for the same 24 months and deleted together with it. It is shown to our team and added to the note about your enquiry in our customer relationship management system. No summary is made of a conversation that our assistant declined to take part in.

The same redacted text of your messages is also processed by Anthropic to translate between your language and English for our staff, and staff replies written in English may be machine-translated into your language and checked by a member of our team before they are sent; translations are kept and deleted together with the conversation.

We process this data on the basis of our legitimate interests in answering your questions and supporting our customers and, where your question is about an order or a purchase you are considering, because it is necessary to take steps at your request before entering into a contract with you or to perform it. Visitors who are shown Tidio Chat keep using Tidio as described above.

Comparing our two chat tools

We are testing which of our two chat tools, our own live chat or Tidio Chat, serves our customers better. Each visitor is randomly shown one of them. The choice is kept in your browser's local storage under ll_chat_bucket, so that you keep seeing the same tool on later visits.

We count how many visitors were shown each tool and how many of them started a chat with it. These counts are kept on our servers as daily totals per tool and do not contain an identifier for you. So that each visitor is counted only once, your browser remembers in its local storage, under ll_chat_ab_sent, that it has already been counted.

We also record which of the two tools you were shown against your basket. Because an order is placed from a basket, this record can be linked to an order you place, which is how we compare how often visitors of each tool go on to buy. If the tool you are shown changes while the basket is open, for example because we show our own chat to more visitors, the latest tool counts. Visits where a member of our team chose the tool for testing are not counted. We keep this record for 24 months and then delete it. It is made whether or not you accept analytics cookies, and it is not sent to Google or to any other third party. We process it on the basis of our legitimate interests in finding out which support tool serves our customers better.

Where you have accepted analytics cookies, Google Analytics also receives two events from the chat: chat_open when you open a chat window and chat_message_sent when you send the first message of a conversation. Each carries the name of the tool you were shown (chat_arm) and is linked to your Google Analytics identifier, like the other analytics events described in this policy. They do not contain the text of your messages, a conversation reference or your email address. So that a Tidio Chat conversation is reported once, your browser keeps the time of your last message in Tidio Chat in its local storage, under ll_chat_tidio_last_message; a message more than a day after the previous one counts as a new conversation, as it does for Tidio. It holds only that time, and is never sent to us or to anyone else.

Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Algolia Search

We use Algolia to provide search functionality on our website. Algolia may log the search queries you enter to help us improve the accuracy and relevance of search results. For more details, please refer to the Algolia Privacy Policy.

Resend

We use Resend to manage and deliver transactional and promotional emails. Your email address, name, and related interaction metrics (such as email opens and clicks) are processed by Resend solely for delivering these communications. For further details, please read Resend's Privacy Policy.

Google reCAPTCHA / Google Cloud Fraud Defense

We use Google reCAPTCHA v3, which is now integrated into Google Cloud Fraud Defense, to protect our website from spam and abuse. This service collects hardware and software information, such as device and application data, and the results of integrity checks to determine if an interaction is from a human or a bot. This information is sent directly to Google. Google states that, since April 2, 2026, it processes this data under the Google Cloud Data Processing Addendum. Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Use.

Payment Processing

We use third-party payment processors (including Stripe, Paypal, and in specific regions, Klarna and Clearpay) to handle your payment transactions securely. These payment processors adhere to stringent security measures to protect your payment information. Leeloo Dolls does not store your payment information. Your payment details are provided to the selected payment processing service, which is obligated to comply with applicable regulations and data protection laws. Please refer to the privacy policy of the relevant provider for details of how they process your personal data.

Links to other websites and third parties

Our website may contain links to and from the websites of our partner networks, advertisers and affiliates, or to social media platforms. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

How we share your data

We may disclose and share your personal data with the parties set out below:

• Where you have given us consent to do so. For instance, if you have agreed to receive marketing materials from third parties, or in respect of third parties’ (including co-branded or jointly promoted) products and services, we may pass your data on to the relevant third parties for the purpose of sending you such marketing communications;
• To business partners, suppliers, sub-contractors, and other third parties that we use in connection with the running of our business for the purposes set out in the table above in the section ‘How we use your data’, such as:
  • Third-party service providers that we engage to provide IT systems and software, and to host our website;
  • Third-party payment processing services (including Worldpay, Adyen, Paypal, and in specific regions, Klarna, Laybuy, Clearpay, and Zip) to process your payment to us. Leeloo Dolls does not store your payment information. Your payment details are provided to the payment processing service you have selected, who are obliged to comply with applicable regulations and data protection laws. Please refer to the privacy policy of the relevant provider for details of how they process your personal data;
  • Services and to provide marketing and advertising services;
  • Third-party service providers that we engage to deliver goods you have ordered and to manage any returns;
  • Third-party service providers that we engage to send emails and postal mail on our behalf, including in relation to incomplete orders or abandoned baskets, or marketing communications, to provide data cleansing services and to provide marketing and advertising services;
  • Analytics and search engine providers that assist us in the improvement and optimisation of our website;
  • Affiliate networks through whom you have accessed our website;
• To any third party to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
• To protect our customers and Leeloo Dolls website from fraud and theft, we may share personal data that is required to make identity checks and personal data that we obtain from making identity checks (including data relating to your age, name, and location), together with account information, with third-party organisations (including law enforcement agencies), involved in fraud prevention and detection and credit risk reduction. Please note that these third parties may retain a record of the information that we provide to them for this purpose;
  • We may share your personal data with fraud prevention and analysis service providers, in order to carry out fraud prevention checks on our behalf. Please contact us to find out which service we are currently using and to find out more about their privacy policy.
  • We may further share personal data that is required to make identity checks and personal data that we obtain from making identity checks (including data relating to your age, name, and location), together with account information, with organisations (including law enforcement agencies), involved in fraud prevention and detection and credit risk reduction. Please note that these third parties may retain a record of the information that we provide to them for this purpose;
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or
• To our professional advisors including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.

Your data and countries outside of Europe

Your personal data may be transferred to, stored at, and processed in destinations outside the European Economic Area ("EEA") by using legally approved mechanisms for transferring data across borders. This might include processing by our employees or our suppliers who operate outside the EEA, in activities such as order fulfillment, payment processing, and provision of support services. Rest assured, we will ensure that your data is treated with the highest security standards and in accordance with this privacy notice.

When we transfer your personal data outside the EEA, we guarantee the same level of data protection by implementing appropriate safeguards as mandated by law. This might include the use of specific contractual clauses approved by the European Commission, which ensure the same level of protection for your personal data as it has within Europe. More information about these clauses can be found here.

If you require additional information about the specific countries we may transfer your personal data to, or the particular mechanism we use for data transfer outside the EEA, please feel free to contact us.

Your Rights

As a data subject, you have several rights under the data privacy legislation. Under certain circumstances, you have the right to:

• request access to your personal data
• request correction of your personal data
• request erasure of your personal data
• request restriction of processing of your personal data
• request the transfer of your personal data
• object to processing of your personal data
• request human intervention for automated decision making

Each of these rights is briefly explained below. If you wish to exercise any of these rights, please reach out to us at [email protected].

Changes to this privacy notice

From time to time we may change this privacy notice. If there are any significant changes we will post updates on our website, applications or let you know by email.

What are cookies

Cookies are small text files that are stored on your computer or mobile device when you visit a website. They are used by most websites to improve your browsing experience and provide more personalised services or recommendations.

These files often include a unique identifier that is sent from a website to your device's browser, which is then stored on your device's hard drive. This unique identifier will allow our website to remember your actions and preferences (like login, language, font size, and other display preferences) over a period of time, so you don't have to keep re-entering them whenever you come back to the website or browse from one page to another.

Cookies can be "persistent" or "session" cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.

There are also "first-party" and "third-party" cookies. First-party cookies are created by the website you're visiting, and their primary purpose is to enhance your browsing experience on that particular site. Third-party cookies, on the other hand, are created by websites other than the one you're visiting, and they're primarily used for tracking and online-advertising purposes. They also allow website owners to provide certain services, such as live chats.

Please note that cookies do not harm your computer, and they cannot carry viruses or install malware on your device. Moreover, they do not provide us with access to your computer or any information about you, other than the data you choose to share with us.

When you first visit our website we ask for your decision on non-essential cookies and other similar technologies, as set out in this policy. If you do not agree to their use, you can decline them on that banner, or refuse them through your browser settings as described below. Declining does not affect your ability to browse the website, place an order, or use your account; only essential cookies are used in that case.

How we use cookies

The types of cookies used and the available customisation options depend on the specific functions of the respective cookie.

Strictly Necessary Cookies, which are essential to the operation and security of our website, cannot be disabled and do not require your consent to be placed on your device. All other cookies are non-essential and require your prior consent before they are placed. We group these non-essential cookies into two categories, which are the categories you are offered on our cookie banner:

• Analytics: These help us understand how our website is used, so that we can improve it.
• Marketing: These are used to personalise advertising and to measure how our campaigns perform.

Our live chat keeps five items in your browser's local storage. They are not used for advertising and are not sent to any third party: ll_chat holds the reference and access key of your current conversation, so that it survives a page reload; ll_chat_bucket holds a random number that decides which of our two chat tools you are shown; and ll_chat_ab_sent records that you have already been counted in our comparison of the two tools; and ll_chat_tidio_last_message holds the time of your last message in Tidio Chat, so that a conversation is reported to Google Analytics once (both are described in "Comparing our two chat tools" above); and ll_chat_visitor holds a random identifier and when your visits started, so that our team can see that someone is on the site, whether they are new or returning and for how long (described in "Live chat and AI assistant" above; only with analytics cookies accepted or once you use our chat). You can remove all five by clearing your browser's site data for our website.

On phones, a small "Chat with us" bubble is shown next to the chat button. Once you open the chat, ll_chat_teaser_seen in your browser's session storage remembers only that the bubble was opened for this browser session, so it is not shown again; it is not sent to us or to anyone else and is deleted when the browser session ends. In the same way, ll_chat_seen remembers how far you have read your conversation, so the number of new replies on the chat button stays right as you move between pages.

Upon your visit to our homepage, we will seek your consent for non-essential cookies. If you haven't adjusted your preferences or browser settings to refuse non-essential cookies, our system will issue cookies and store them on your device in accordance with your most recent cookie preferences indicated to us.

Consent mode and analytics measurement

We use Google Analytics to understand how our website is used. The Google Analytics script is present on every page, but it operates in "consent mode": until you accept non-essential cookies, it is instructed not to store any cookies or identifiers on your device, and it does not do so. Loading the script is not the same as placing a cookie, and no non-essential cookie is placed before you consent.

If you decline, or do not answer the cookie banner, Google still receives a basic, cookie-free signal that a page was viewed. That signal contains no cookie, no advertising identifier and nothing that identifies you or your device, and it is used only to produce aggregate, statistical estimates of overall website traffic. If you accept, cookies are placed as described above and your visit is measured in the ordinary way. You can change or withdraw your decision at any time — see Changing your cookie decision below.

Some of our articles contain interactive quizzes. When you take one, Google Analytics receives anonymous interaction events: that a quiz was started, which answer you chose and whether it was correct, your final score, and which result link you followed. These events are subject to the same consent rules as the rest of Google Analytics, described above. Leeloo Dolls does not store your answers.

On a product page, a link to one of our Knowledge Base articles opens that article in a side panel. When you use it, Google Analytics receives anonymous interaction events: which article was opened and from which part of the page, how far it was read, whether a link from it into the Knowledge Base was followed, when the panel was closed, and whether an option was then selected or the product added to the basket. These events carry the product, never anything about you, and are subject to the same consent rules as the rest of Google Analytics, described above. Leeloo Dolls stores nothing about your reading.

Records of completed orders

Separately from cookies, when an order is completed our own servers send a record of that sale to Google Analytics so that our sales figures are complete. This record contains the order reference, the order value and currency, and the products ordered. It does not contain your name, email address, postal address, telephone number or any payment details.

Because this is a record of a business transaction rather than tracking of your browsing, we send it whether or not you accepted cookies. Our legal basis is our legitimate interest in keeping an accurate and complete record of our own sales. Where you accepted analytics cookies, the record is linked to your analytics identifier so that the sale is counted against your visit. Where you did not, it carries only a reference derived from the order number, which does not identify you or your device to Google. You can object to this processing, and exercise your other rights, using the contact details in this policy.

Changing your cookie decision

You can change or withdraw your decision at any time, and it is as easy to withdraw consent as it was to give it. Use the button below to reopen your cookie settings and change which categories you allow. Withdrawing consent stops any further non-essential cookies being placed; it does not undo processing that already took place while your consent was in force.

Change cookie settings

Your decision is stored on the device and browser you made it in, rather than against your account, so it does not follow you to another device or browser — you will be asked again there.

Modifying Your Preferences and Browser Settings

The decision to allow us to download cookies is entirely yours.

Altering Browser Settings – You can adjust your browser settings to disable cookies and modify the approach to cookies downloaded onto your device. The location of these options varies depending on the browser you're using. For more information about cookies and how to disable them, visit:

https://ico.org.uk/for-the-public/online/cookies/ and www.allaboutcookies.org

Choosing to disable cookies by altering your preferences or browser settings may affect the functionality of our website and its features, potentially hindering the personalised experience. If you decide to delete all your cookies, you will need to update your preferences with us again. Similarly, if you use a different device, computer profile, or browser, you will need to restate your preferences.

Changes to This Cookie Policy

Periodically, we may update this Cookie Policy. In the event of significant changes, we will announce updates on our website, applications, or notify you via email.