Privacy Policy

Last updated: 4 November 2026

Lily Advisory is run by Indre Butkeviciute, a sole trader based in Milan, Italy ("I", "me", "Lily Advisory"). I take your privacy seriously and I keep things simple: I collect only what I need to run my waitlists, send my emails, deliver my sessions and keep the website working. This policy explains what I collect, why, where it goes and what your rights are. It is written to comply with the EU General Data Protection Regulation (GDPR) and, for readers in the United Kingdom, the UK GDPR.

1. Who is responsible for your data

The data controller is Indre Butkeviciute, trading as Lily Advisory, Milan, Italy. For anything to do with your personal data, email indre@lilyadvisory.com.

2. What I collect, and why

When you join a waitlist or sign up for emails

Your first name, email address and, where the form asks for it, an approximate investment range and your Instagram handle. I use this to send you the emails you have asked for, to tell you about the programme you joined the waitlist for, and to send occasional notes from Lily Advisory. The legal basis is your consent, which you can withdraw at any time by clicking unsubscribe in any email or by writing to me.

When you download a free guide

Your name and email address, collected through my Stan Store page, so that I can deliver the guide and follow up with related emails. Legal basis: consent.

When you book or attend a session, workshop or event

Your name, contact details, booking and payment information, and the information you choose to share with me in questionnaires, calls and messages so that I can prepare for and deliver the session. This may include details about your financial situation and goals, because that is the point of the work. I treat this information as confidential. Legal basis: performance of a contract with you, and my legitimate interest in delivering the service properly.

When you email or message me

Your name, contact details and whatever you include in the message, so that I can reply. Legal basis: legitimate interest in responding to you.

When you visit the website

The website is hosted on Netlify, which records standard technical information such as your IP address, browser type and the pages you visit, in server logs used to keep the site secure and running. The site does not run advertising trackers and does not set its own analytics cookies. Fonts are loaded from Google Fonts, which means Google receives your IP address when the page loads. Legal basis: legitimate interest in running a secure, working website.

3. Who I share your data with

I never sell your data. I share it only with the service providers I use to run Lily Advisory, each of which processes it on my instructions:

• Mailchimp (Intuit) for email lists, waitlists and newsletters
• Netlify for website hosting and form submissions
• Stan Store for free guides and digital products
• Stripe for card payments; I never see or store your full card details
• Calendly for booking sessions
• Zoom and WhatsApp for delivering online sessions and support
• Google Workspace, Dropbox and Microsoft for email, documents and file storage
• My accountant, for invoicing and tax records, where the law requires it

Some of these providers are based in, or store data in, the United States. Where that happens, transfers are protected by the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, as applicable.

4. How long I keep your data

• Email list and waitlist data: until you unsubscribe, or after a long period of no engagement, at which point I remove you from the list.
• Client session records: for up to seven years after our last work together, so that I can answer follow-up questions and meet my record-keeping obligations.
• Invoices and payment records: for the period required by Italian tax law, currently ten years.
• Website logs: as set by Netlify, typically no more than 30 days.

5. Your rights

Under the GDPR you have the right to:

• ask for a copy of the personal data I hold about you
• have inaccurate data corrected
• have your data deleted, where I no longer have a reason to keep it
• restrict or object to how I use your data
• receive your data in a portable format
• withdraw consent at any time, without affecting anything done before you withdrew it

To exercise any of these rights, email indre@lilyadvisory.com. I will respond within one month. If you are not happy with how I handle your data, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or, if you are in the UK, to the Information Commissioner's Office (ico.org.uk).

6. Cookies

This website does not set its own tracking or analytics cookies. Third-party services embedded in or linked from the site (for example Stan Store, Calendly or Stripe checkout pages) may set their own cookies, which are governed by their own policies. If I add analytics in future, I will update this policy and ask for your consent where the law requires it.

7. Security

I use reputable providers with strong security, two-factor authentication on my accounts, and I keep client information in access-controlled storage. No system is perfectly secure, but I take reasonable steps to protect your data and I will tell you and the relevant authority if a breach ever puts your rights at risk.

8. Children

My services and website are for adults. I do not knowingly collect data from anyone under 18.

9. Changes to this policy

I may update this policy from time to time. The date at the top tells you when it last changed, and significant changes will be announced by email to people on my list.

10. Important note

Lily Advisory provides financial education, not personal financial advice. Nothing on this website or in my sessions is a recommendation to buy or sell any particular investment. Investing involves risk, including the loss of capital.