- LEGAL · DATA PROTECTION
Privacy Policy
Data Controller: Blue Ocean Stories SL (trading as Li Lé Blue) · Marbella, Spain
Last updated: August 2026 · Effective: August 2026
Legal framework: GDPR (EU 2016/679) · LOPDGDD (Organic Law 3/2018) · LSSI-CE (Law 34/2002)
Supervisory authority: Agencia Española de Protección de Datos (AEPD)
This Privacy Policy explains how Li Lé Blue collects, uses, stores and protects your personal data when you visit lileblue.com or purchase our products. Please read it carefully before using our website. By using our site you acknowledge that you have read and understood this policy.
What is a Privacy Policy —
and who we are
A Privacy Policy is a legal document required under EU law that explains how we collect, use, store and protect your personal data. Under the GDPR, any business that processes the personal data of EU residents must provide this information clearly and accessibly.
We are Blue Ocean Stories SL, a Spanish limited company registered in Marbella, Spain, trading under the brand name Li Lé Blue. We make and sell reef-safe, doctor-formulated hair care products for watersports at lileblue.com.
As Data Controller, we are responsible for deciding how and why your personal data is processed. We are subject to the GDPR, the LOPDGDD (Spain's data protection law), and the LSSI-CE (Spain's e-commerce law).
Legal name: Blue Ocean Stories SL
Brand name: Li Lé Blue
Address: Centro de Negocios Puerta de Banús 43E · 29660 Marbella · Málaga · España
CIF: B72423908
Website: lileblue.com
Privacy email: support@lileblue.com
What type of information
we collect
We collect only the personal data that is necessary for the purposes described in this policy. We do not collect sensitive personal data and we do not knowingly collect data from anyone under 14 years of age.
DIRECTLY FROM YOU
When you place an order, create an account, contact us by email or through our contact form, or sign up to receive marketing emails.
AUTOMATICALLY WHEN YOU VISIT OUR WEBSITE
When you visit lileblue.com, we automatically collect technical data about your device and browsing behaviour through cookies and similar technologies. Analytics and non-essential cookies are only placed after you have given your consent via our cookie banner. See Section 07 for full details.
FROM THIRD PARTIES
Wix.com — our website platform, which processes data on our behalf when you use our website and checkout process.
Stripe and Wix Payments — process payment data when you make a purchase and provide us with confirmation of payment.
Shipping carriers — we share your delivery details with our chosen courier services to fulfil your order.
Google Analytics — if you have consented to analytics cookies, Google provides us with anonymised, aggregated data about how visitors use our website.
How we store, use, share
and disclose your information
HOW WE USE YOUR DATA
To process and fulfil your orders, arrange delivery, and handle returns and refunds. To send you order confirmations and shipping updates. To respond to your enquiries and customer service requests. To send marketing emails where you have given explicit consent. To improve our website using anonymised analytics data collected with your consent. To comply with Spanish tax law by retaining transaction records. To detect and prevent fraud and maintain website security.
HOW WE STORE YOUR DATA
Your data is stored on servers operated by Wix.com within the European Economic Area and, in some cases, the United States. Wix uses Standard Contractual Clauses approved by the European Commission for any transfers outside the EEA. For full details of Wix's data handling see wix.com/about/privacy.
HOW LONG WE KEEP YOUR DATA
-
Order and transaction data— 5 years from the end of the relevant tax year, as required by Spanish tax law.
-
Customer account data— for the duration of your account, plus 2 years after closure or last purchase.
-
Email communications— 12 months from the last message.
-
Marketing consent records— until you withdraw consent, plus 3 years as evidence of consent.
-
Analytics data— 26 months (Google Analytics, reduced from the default 38 months).
-
Cookie consent records— 12 months from the date of consent.
WHO WE SHARE YOUR DATA WITH
We do not sell, rent or trade your personal data to any third party for their own marketing purposes. We share it only with the following service providers who process data on our behalf and under our instructions:
-
Wix.com Ltd— website platform, hosting, e-commerce infrastructure. All data processed through our website passes through Wix.
-
Stripe / Wix Payments— payment processing. Payment data and billing address only.
-
Shipping carriers— your name, delivery address, phone number, and order reference to fulfil delivery.
-
Google LLC— anonymised website usage data, collected only with your analytics cookie consent. IP anonymisation is enabled.
All service providers are contractually bound to process your data only on our instructions, to keep it secure, and not to use it for their own purposes. We may also disclose data where required by law, court order, or a regulatory authority such as the AEPD.
SECURITY
We protect your data using HTTPS encryption on all pages of lileblue.com, access controls within our organisation, and PCI-DSS compliant payment processors. In the event of a personal data breach likely to affect your rights, we will notify the AEPD within 72 hours as required by GDPR Article 33, and notify you directly where required by Article 34.
How we communicate
with you
TRANSACTIONAL EMAILS
We send you emails related to your orders — order confirmation, shipping notification, delivery updates, and returns correspondence. These emails are necessary for the performance of our contract with you and cannot be opted out of while your order is being processed.
MARKETING EMAILS
We send marketing emails — product news, new launches, and ocean conservation updates related to our brand — only if you have given us your explicit consent.
Every marketing email includes an unsubscribe link. You can also withdraw consent at any time by emailing support@lileblue.com. We will process your request within 10 business days.
CUSTOMER SERVICE
When you contact us with a question or complaint, we will respond using the email address you provided. We keep a record of customer service communications for 12 months.
How we use cookies
and other tracking tools
Cookies are small text files placed on your device when you visit a website. Our use of cookies is regulated by LSSI-CE Article 22, the GDPR, and the AEPD's Cookie Guidelines (updated 2022). A cookie consent banner appears on your first visit to lileblue.com. Only essential cookies are set until you give your consent.
ESSENTIAL COOKIES
Cookies necessary for the website to function — session management, your shopping cart, and security. These are set automatically and cannot be disabled, as the website cannot function without them. No consent is required for strictly necessary cookies.
ANALYTICS COOKIES
Wix Analytics and Google Analytics cookies (_ga, _gid, _gat) collect anonymised data about pages visited, time on site, and traffic sources. These are only placed after you have given your consent. We use this data to understand how visitors use the website and to improve it. Google Analytics is configured with IP anonymisation enabled — no full IP addresses are transmitted to Google.
FUNCTIONAL COOKIES
Cookies that remember your preferences such as language or previously viewed products. These require your consent before placement.
MARKETING COOKIES
We use the Meta Pixel on lileblue.com to measure the effectiveness of our advertising on Facebook and Instagram, and to build audiences for our campaigns. The Meta Pixel places two advertising cookies on your device — _fbp and _fbc — which are used for conversion tracking and ad retargeting across Facebook, Instagram, and the Meta Audience Network.
These cookies are marketing cookies. They are not essential to the functioning of our website and are only placed on your device after you have given explicit consent via our cookie banner. If you decline marketing cookies, the Meta Pixel will not fire and no data will be transmitted to Meta Platforms Ireland Ltd.
You can withdraw consent for marketing cookies at any time by clicking the cookie settings link in our website footer. You can also manage your ad preferences directly in your Facebook or Instagram account settings.
MANAGING YOUR COOKIE PREFERENCES
You can change or withdraw your cookie consent at any time by clicking the cookie settings link in our website footer, or by adjusting your browser settings to refuse cookies. Note that disabling certain cookies may affect how the website functions. For the full list of specific cookies used on lileblue.com, see our Cookie Policy at lileblue.com/cookie-policy.
How you can withdraw
your consent
Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time without giving a reason. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew consent.
WITHDRAWING MARKETING EMAIL CONSENT
Click the unsubscribe link in any marketing email from Li Lé Blue, or email support@lileblue.com with the subject "Unsubscribe". We will process your request within 10 business days. You will continue to receive transactional emails related to active orders — these are based on contract, not consent.
WITHDRAWING COOKIE CONSENT
You can manage or withdraw your cookie consent at any time by visiting our Privacy Policy page, where a cookie preferences link reopens the consent banner so you can update your choices. You can also manage cookies through your browser settings. Most browsers allow you to refuse all or certain types of cookies. Note that withdrawing cookie consent will not remove cookies already placed before withdrawal.
REQUESTING DELETION OF YOUR DATA
Email support@lileblue.com with the subject "Data Erasure Request". We will assess your request and respond within one calendar month. Transaction and accounting records required by Spanish tax law — generally 5 years — cannot be erased on request regardless of consent withdrawal.
Your rights under
GDPR and Spanish law
Under the GDPR and the LOPDGDD, you have the following rights in relation to your personal data. To exercise any of them, email support@lileblue.com with your name and, if applicable, your order number. We respond within one calendar month.
-
Right of access (Article 15 GDPR)— request a copy of the personal data we hold about you and information about how we use it.
-
Right to rectification (Article 16 GDPR)— ask us to correct inaccurate or incomplete personal data. We will make corrections within 10 business days.
-
Right to erasure (Article 17 GDPR)— ask us to delete your data where we no longer need it or where you withdraw consent. Some data must be retained for legal reasons and cannot be erased on request.
-
Right to restriction (Article 18 GDPR)— ask us to limit how we use your data in certain circumstances, for example while we verify disputed data.
-
Right to data portability (Article 20 GDPR)— receive a copy of your data in a structured, machine-readable format where processing is based on consent or contract.
-
Right to object (Article 21 GDPR)— object to processing based on our legitimate interests. We will stop unless we can show compelling grounds that override your interests.
-
Right to withdraw consent (Article 7(3) GDPR)— withdraw consent at any time for any processing based on consent. See Section 07 for how to do this.
-
Right against automated decision-making (Article 22 GDPR)— we do not carry out automated decision-making or profiling that has legal or similarly significant effects on you.
We will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive. We may extend our response time by a further two months in complex cases — we will notify you if this applies.
Privacy policy
updates
We review and update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the services we use. The date of the most recent update is always shown at the top of this document.
If we make material changes — changes that significantly affect your rights or how we use your personal data — we will publish a notice on lileblue.com.
Questions and
contact information
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your rights, please contact us. We aim to respond to all enquiries within 10 business days.
Email: support@lileblue.com
Post: Blue Ocean Stories SL · Centro de Negocios Puerta de Banús 43E · 29660 Marbella · Málaga · España
RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY
If you are not satisfied with how we handle your personal data or respond to a rights request, you have the right to lodge a complaint with the Spanish data protection supervisory authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6 · 28001 Madrid · España
aepd.es · sedeagpd.gob.es (online complaints)
If you are based in another EU member state, you may also complain to your local supervisory authority. We always welcome the opportunity to resolve concerns directly before you approach a regulator — please contact us first so we can try to resolve the matter quickly.