1. Who we are
Lillium provides vehicle rental, prearranged private transportation, courier, and contract logistics services across the Hampton Roads region of Virginia. The legal entity is Lillium LLC, a limited liability company.
For questions about this policy, data-access requests, or general inquiries, contact info@lillium.io.
2. What this policy covers
This policy covers information collected through lillium.io, Lillium booking and inquiry forms, and Lillium email communications. It describes what happens when you visit the site, submit a request, or contact us.
Information generated in the course of a contracted engagement — for example, courier manifests, trip details, rental agreements, inspection photos, or payment records — is handled under the applicable service agreement between Lillium and the client. That information is not governed solely by this website policy.
3. What we collect from site visitors
When you browse lillium.io, our web host and content-delivery network write standard server logs: your IP address, the page you requested, the page that referred you, your browser's user-agent string, and a timestamp. We use these logs to debug the site, measure load, and investigate abuse (bots, scraping, attempted intrusions).
We do not run advertising pixels (Meta, TikTok, Google Ads), we do not run behavioral retargeting, and we do not participate in data brokerage. If we ever add analytics to the site, we will update this policy and — if required by the laws that apply to you — ask for your consent first.
4. What we collect when you contact us
If you submit a booking form, inquiry form, or email Lillium, we receive the information you provide, such as your name, email address, phone number, service requested, requested dates or route details, and the content of your message. If you attach files, we receive those as well. We reply using the same channel, and we keep the record under the retention rules in §7.
If a service inquiry turns into a quote, reservation, or contract discussion, we may also take notes in our internal records about what you asked for, so we can serve you properly on the next contact. Those notes describe what you requested and the operational details needed to respond.
5. Who we share your information with
We only share information when it is needed to operate the site, respond to your request, process a booking, provide service, or comply with the law.
We do not sell your personal information, share it with data brokers, or use it to train third-party AI models.
6. What we do not collect through this site
- Payment-card numbers. Lillium may send payment links or route checkout through a third-party processor. Card data is tokenized by the processor and does not touch Lillium servers.
- Protected health information (PHI). This website is not a PHI-handling surface. Any health-related information handled in courier engagements is governed by the per-engagement service agreement, not this policy.
- Government-ID numbers, biometric data, precise geolocation, or children's data (under 13).
- Tracking beacons inside marketing email. We do not run one-by-one open tracking on email.
7. How long we keep information
- Web server logs: up to 90 days, then discarded or aggregated.
- Email threads with you: retained while the conversation is active plus the time our mailbox policy holds them (30 days).
- Inquiry notes: kept for as long as we are in active conversation plus 18 months, unless an active service engagement extends that window under its own contract.
8. Your rights
You have the right to:
- Know what we have about you. Email privacy@lillium.io; we will respond within 30 days.
- Correct anything that is wrong.
- Delete what we have, except records we are legally required to keep (for example, tax records or records subject to a legal hold).
- Complain to a regulator. In the United States, that is your state attorney general or the Federal Trade Commission.
We will not retaliate against you for exercising any of these rights. The legally-available subset of rights in your jurisdiction (for example, portability or opt-out of sale where it applies) is available on request at the same address.
9. How we protect information
- Data is encrypted in transit (HTTPS across the whole site).
- Administrative accounts that touch the site use two-factor authentication.
- Internal access to data is limited to the owner and, when hired, named employees whose roles require it.
- If we have a security incident that affects you, we will notify you by the contact method you gave us, within the window required by the law that applies to you — and, where we can, sooner.
10. Children
Lillium's website and services are not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have, email privacy@lillium.io and we will delete it.
11. International visitors
If you visit lillium.io from outside the United States, your information is processed in the United States. If you are in the EU, UK, or another region with a comprehensive privacy regime, the legal basis for processing your site-visit data is our legitimate interest in operating and defending the site; for any inquiry you send us, the basis is your own voluntary action in contacting us. If you have questions about how your data is handled, contact info@lillium.io.
12. Changes to this policy
When we change this policy, we update the "Last updated" date at the top. Material changes — meaning changes that would meaningfully expand what we collect or who we share it with — will be surfaced on the site for at least 14 days before they take effect, and active customers will be notified by email.
13. Contact
All inquiries: info@lillium.io
Hampton Roads Dispatch: (540) 627-6237
Mailing address: Lillium LLC, 2200 Dunbarton Dr, Ste D, Chesapeake, VA 23325