Luma
Buy

Privacy Policy

This Privacy Policy describes how Luma Lights ("we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from lumalights.co.uk (the "Site") or otherwise communicate with us. For the purposes of UK GDPR and the Data Protection Act 2018, Luma Lights is the data controller.

Last updated: 29 June 2026.

1. Personal information we collect

We collect the following categories of personal information:

  • Contact details: name, email address, postal address, phone number.
  • Order information: products purchased, order value, shipping address, billing address.
  • Payment information: processed securely by our payment providers (Shopify Payments, PayPal). We do not store full card details on our servers.
  • Account information: if you create an account, your password (hashed) and order history.
  • Customer support: any information you provide when contacting us.
  • Device & usage data: IP address, browser type, device identifiers, pages viewed, referring URLs, timestamps.

2. How we collect personal information

  • Directly from you when you place an order, create an account, sign up to marketing or contact us.
  • Automatically via cookies and similar technologies when you use the Site.
  • From service providers such as Shopify (ecommerce), our payment processors, shipping carriers, and analytics providers (Google Analytics, Meta).

3. How we use your personal information

  • Providing products and services: processing orders, payments, returns and refunds, arranging shipping, and providing customer support. Legal basis: performance of a contract.
  • Marketing and advertising: sending promotional emails, displaying targeted ads on Meta and Google, and measuring campaign performance — only with your consent, which you can withdraw at any time.
  • Security and fraud prevention: protecting the Site and our customers. Legal basis: legitimate interests.
  • Communicating with you: responding to enquiries and sending transactional emails (order confirmations, shipping updates). Legal basis: performance of a contract.
  • Compliance: meeting legal, tax and accounting obligations. Legal basis: legal obligation.

4. Cookies and tracking technologies

The Site uses cookies and similar technologies to provide essential functionality, remember your preferences, and analyse traffic. Specifically:

  • Essential cookies: required for the Site to function (cart, checkout, login).
  • Analytics cookies: Google Analytics 4 to understand how visitors use the Site.
  • Marketing cookies: Meta (Facebook) Pixel and Conversions API to measure ad effectiveness and (with consent) deliver personalised ads.

You can manage cookies via your browser settings. Blocking essential cookies will affect Site functionality.

5. Sharing your personal information

We share personal information with third parties only as necessary to run our business:

  • Shopify Inc. — ecommerce platform and payments.
  • Shipping carriers — Royal Mail, Evri and other couriers to deliver your order.
  • Email service providers — to send transactional and (with consent) marketing emails.
  • Analytics & advertising — Google Analytics, Meta.
  • Authorities — when required by law, court order or to protect our rights.

We never sell your personal information.

6. International transfers

Some of our service providers (e.g. Shopify, Google, Meta) are based outside the UK and your data may be transferred to and processed in those countries. Where we transfer data outside the UK / EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

7. Data retention

We keep personal information for as long as necessary to provide our services and to comply with legal obligations. Order records are typically retained for 6 years for tax purposes. Marketing data is retained until you unsubscribe, after which we remove your details from our active marketing list.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure of your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability — receive your data in a machine-readable format.
  • Withdraw consent at any time (where processing is based on consent).
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email hello@lumalights.co.uk. We will respond within 30 days.

9. Children

Our Site is not intended for children under 16, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top will indicate when it was last revised.

11. Data controller & contact

Luma Lights, operated by Alex Gatehouse (sole trader), 55 Latchmere Road, Kingston Upon Thames, KT2 5TS, United Kingdom. Email hello@lumalights.co.uk · Phone 07386 715836.