Privacy Notice

Lemon Monkey Ltd is the controller of personal data used for this website, enquiries, Smart Adviser sessions, quotations, customer accounts, orders, payments, delivery support, and business administration. We are registered in England and Wales under company number 16534357, with registered office at 124 City Road, London EC1V 2NX.

This notice applies to website visitors, prospective customers, customers, business contacts, and people whose details are supplied for an enquiry, quotation, order, delivery, or account.

• Name, business name, role, email address, telephone number, and correspondence.
• Billing, delivery, and account details needed to quote, supply, invoice, and support an order.
• Quote requirements, product selections, quantities, branding instructions, artwork, approvals, and project notes.
• Smart Adviser brief answers, recommendation mode, generated shortlist, selections, and session identifiers.
• Order, invoice, payment-status, refund, delivery, support, and complaint records.
• Technical and security information such as IP address, request time, browser or device information, essential session identifiers, error records, and abuse-prevention signals.
• Campaign source values and page paths where our restricted campaign measurement is enabled.

We usually obtain data directly from you through the website, email, telephone, artwork approval, quote acceptance, payment, or support contact. We may also receive relevant order or delivery data from your organisation, a supplier, courier, payment provider, or another person authorised to act for the customer. Technical data is generated when the website and its security controls are used.

• Enquiries, Smart Adviser guidance, quotations, order preparation, supply, payment, and support: steps requested before a contract and performance of a contract.
• B2B relationship management, service quality, limited campaign measurement, fraud prevention, system security, and establishing or defending claims: our legitimate interests, balanced against the rights of the people concerned.
• Tax, accounting, company records, regulatory requests, and legal rights: compliance with legal obligations and, where applicable, legitimate interests.
• Electronic marketing and non-essential device storage: consent where law requires it, or another lawful basis where direct-marketing rules permit it. Consent can be withdrawn at any time.

Smart Adviser uses structured brief answers and authorised catalogue candidates to produce AI-assisted product recommendations. In recommendation modes that call an external model, the request is sent to our AI service provider, currently OpenAI. The integration is designed to send brief and catalogue information rather than the contact and address fields collected later for a quote.

AI output is restricted to a defined response format and checked against current product records. It may still be incomplete or unsuitable. It does not decide whether a customer may buy, determine a final price, confirm stock, or create a contract. Lemon Monkey staff remain responsible for the final quotation, artwork, availability, lead time, and commercial decision.

We share personal data only where reasonably necessary with categories including:

• product suppliers, decorators, printers, fulfilment partners, and couriers;
• website, hosting, security, email, customer-management, WooCommerce, and quote-system providers;
• OpenAI for applicable Adviser recommendation requests;
• Google reCAPTCHA for form-abuse prevention where enabled;
• Stripe for payment processing where an approved quote is paid online;
• accountants, insurers, professional advisers, regulators, courts, or law-enforcement bodies where justified.

Suppliers receive only the information needed for specification, production, delivery, or issue resolution. We do not sell personal data.

Some technology or supply providers may process data outside the United Kingdom. Where UK data protection law requires a safeguard, we use an applicable UK adequacy regulation, the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism. Details of the relevant safeguard can be requested using the contact information below.

Online card entry is provided by Stripe. Lemon Monkey does not receive the full card number entered into Stripe’s payment form. We receive and retain the payment status, amount, order reference, and related records needed to fulfil the order, reconcile accounts, handle refunds or disputes, and meet legal obligations.

The site uses essential WooCommerce session cookies and browser storage to keep quote selections and Adviser handoffs working. Google reCAPTCHA and Stripe may use storage or device signals when their protected form or payment functionality is requested. Our restricted campaign measurement does not persist its generated session identifier in a cookie or browser store. See the Cookie and Browser Storage Notice for the current detail and controls.

We keep personal data only for as long as needed for the purpose collected, including quotation follow-up, fulfilment, support, fraud prevention, legal claims, tax and accounting rules, and any required supplier or insurer process. Order, invoice, and payment records are normally kept for the applicable statutory accounting and limitation periods. Unsuccessful enquiries and quotes are reviewed and removed or anonymised when there is no continuing business, legal, or consent basis.

The local quote basket expires 14 days after it was last updated. Adviser draft data is held in the browser’s session storage until the browser session ends or the draft is cleared. Adviser session access credentials expire after approximately 24 hours; expiry of an access credential does not by itself delete a quotation, order, audit, or security record that must still be retained.

Depending on the processing and lawful basis, you may ask for access, correction, erasure, restriction, or portability, and may object to processing based on legitimate interests. You have an absolute right to object to direct marketing. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

Rights are not absolute in every case. We may need to verify identity and may retain information where law or an overriding legal reason requires it. We will explain any lawful restriction applied.

Fields marked as required are needed to respond, prepare or submit the requested quote, protect the form, or perform an order. If required information is not provided, the relevant service may not work. Optional telephone, company, delivery, artwork, and project information should be provided only where it is useful for the requested service. Do not place unnecessary sensitive personal data in project notes.

We use proportionate technical and organisational controls intended to protect data, restrict access, validate quote and product authority, reduce abuse, and preserve payment-provider boundaries. No internet service can guarantee absolute security.

Lemon Monkey services are intended for business users and are not directed at children. Do not submit a child’s personal data unless it is genuinely necessary, lawful, and agreed with us in advance.

For a data-protection request, contact info@lemonmonkey.co.uk or 01942 387234 and mark the message “Data Protection Request”. You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to investigate first.

We will update this notice when processing materially changes. The date at the top identifies the current published version; significant changes should be brought to users’ attention where appropriate.