Privacy policy

The data controller for your information is LUMIO, a store based in the United Kingdom. Our postal address is [add your registered business address], and you can reach us any time at hello@lumio.co.

We keep this deliberately small. Depending on how you use the store, we may hold:

• Order details — your name, email address, phone number, delivery address, and what you bought. We need these to take payment and deliver your order.
• Payment details — handled by our payment provider. We never see or store your full card number.
• Your email address — if you join the drop list, ask us a question, or start a checkout and don't finish.
• Messages you send us — through the contact form or the live chat on the store.
• Technical and usage data — such as the pages you view, your browser and device, and roughly where you are, collected through analytics and advertising cookies.

We use your information to:

• Take payment, confirm and deliver your order, and send you tracking updates.
• Handle returns, refunds and warranty claims.
• Answer your questions and provide customer support.
• Send you marketing emails — only where you've asked us to, and you can unsubscribe from any of them.
• Understand how the store is used so we can improve it, and keep it secure and free from fraud.

Under the UK GDPR we rely on four lawful bases, depending on what we're doing:

• Contract — to process your order, take payment and deliver it.
• Legal obligation — for example, keeping sales records for tax purposes.
• Legitimate interests — to prevent fraud, secure the store and understand how it's used.
• Consent — for marketing emails and any non-essential cookies. You can withdraw it at any time.

The store uses cookies and similar technologies for analytics and advertising, including Google Analytics and Google Ads, to see which pages are working and to measure our adverts.

You can block or delete cookies in your browser settings at any time. Blocking them won't stop you ordering — the checkout works without them.

We never sell your information. We share it only with the providers who help us run the store, and only what they need:

• Our payment provider, to process your card payment securely.
• Our fulfilment and delivery partners, who pick, pack and ship your order. They ship from outside the United Kingdom, so your delivery details are shared with them for that purpose.
• Our email and analytics providers, who send our emails and measure our traffic.

Some of our providers, including our fulfilment partner, operate outside the United Kingdom and the European Economic Area. Where that happens, we transfer your information under appropriate safeguards such as standard contractual clauses.

We keep your information only as long as we need it for the reasons above and to meet our legal obligations. Order and payment records are kept for six years, as UK tax law requires. Marketing emails are kept until you unsubscribe.

You have the right to ask for a copy of the information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to ask us to transfer it to another provider. Where we rely on consent, you can withdraw it at any time.

To make a request, email hello@lumio.co. If you're not happy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

Your order and payment information is encrypted in transit, and access to it is limited to the people and systems that need it to fulfil your order.

If we change how we handle your information we'll update this page and the date at the top of it. Where a change affects your rights, we'll tell you by email if we're able to.