Purpose of this privacy notice

This privacy notice aims to give you information on how Rebel Lemon Ltd collects and processes your personal data when you use our website, sign up for our newsletter, or purchase our services.It is important to read this notice alongside any other privacy notices or fair processing notices we provide so that you are fully aware of how and why we use your data.This website is not intended for children, and we do not knowingly collect data relating to children.

Controller

Rebel Lemon Ltd is the controller responsible for your personal data (referred to as “Rebel Lemon”, “we”, “us”, or “our”).

If you have any questions about this privacy notice, including requests to exercise your legal rights, please contact us using the details below.

‍Contact details:
Full name of legal entity: Rebel Lemon Ltd
‍Email: hello@rebellemon.com
‍Postal address: 19 Station Street, Belfast, BT3 9DA, United Kingdom

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk), though we’d love the chance to resolve your concerns first.

Changes to this privacy notice

This version was last updated in January 2026.
Please keep us informed if your personal data changes during your relationship with us.

Third-party links

Our website may include links to third-party websites. We do not control these websites and are not responsible for their privacy policies. We encourage you to read the privacy policies of every website you visit.

Personal data means information about an individual from which that person can be identified. It does not include anonymised data.

We may collect, store, and use different kinds of personal data:
‍
‍Identity Data: name, username, title, date of birth (if relevant).
‍Contact Data: email address, phone number, billing or delivery address.
‍Financial Data: payment information for services.
‍Transaction Data: details of payments and services purchased.
‍Technical Data: IP address, browser type, operating system, time zone, device information.
‍Profile Data: account details, preferences, survey responses, feedback.
‍Usage Data: website usage patterns and analytics.
‍Marketing and Communications Data: preferences for receiving marketing.

We may also use Aggregated Data for analytics and reporting. Aggregated Data cannot identify you personally unless combined with other personal data.

We may collect Special Categories of Data (e.g., health or demographic information) only where relevant to the services we provide.

If you fail to provide personal data

If we need personal data to deliver our services or meet legal obligations and you don’t provide it, we may not be able to perform the contract. We will inform you if this affects your services.

Direct interactions: via forms, emails, calls, or correspondence.
Automated interactions: cookies, analytics tools, server logs, pixels, and similar technologies.
Third parties and publicly available sources: such as service providers, professional advisers, and public registers.

We only use your personal data when the law allows us. This usually includes:
‍
Performing contracts with you
Pursuing our legitimate interests
Complying with legal obligations
Sending marketing communications (with your consent)

Marketing
We only send promotional emails if you opt in. You can withdraw consent at any time by contacting us. We do not sell your personal data to third parties.

‍Cookies
You can refuse cookies via your browser settings. Some parts of the website may not work correctly if cookies are disabled. See our cookie policy for more information.

We may share your data with:
‍
Internal parties within Rebel Lemon (currently none)
External service providers (IT, analytics, mailing, hosting, professional advisers)
Legal or regulatory authorities as required
In the event of mergers or acquisitions

We ensure all third parties comply with data protection law.

We take appropriate technical and organisational measures to protect your personal data. Access is restricted to employees, contractors, and service providers who need it to perform their role.

We have procedures to detect and report personal data breaches where legally required.

We keep your personal data only as long as necessary for the purposes it was collected and to comply with legal requirements. Customer records are generally kept for at least seven years for regulatory and insurance purposes.

Anonymised data may be retained indefinitely for research or statistical purposes.

Under UK data protection law, you have the right to:
‍
Access your personal data
Correct inaccuracies
Request deletion
Object to processing
Restrict processing
Request data transfer
Withdraw consent
‍
Requests are usually free, but we may charge for unfounded or excessive requests. We aim to respond within one month.

Legitimate Interest: Our business interest in running Rebel Lemon, balanced against your rights.
‍Performance of Contract: Processing necessary to fulfil a contract with you.
‍Legal Obligation: Processing necessary to comply with UK law.

‍External Third Parties include:
‍MailChimp, Webflow,, TypeForm, Notion, YouCanBookUs, Amazon Web Services, Gmail, and professional advisers.

‍Rebel Lemon Ltd: Where bold design meets respect for your privacy.