Privacy policy

WHO WE ARE
Lumavyn is operated by Lumavyn, registered in England and Wales. Contact: hello@lumavyn.co.uk

WHAT DATA WE COLLECT
When you place an order or create an account, we collect: your name, email address, delivery address, phone number, and payment information (processed securely by Shopify Payments — we never store card details). We also collect browsing data via cookies.

HOW WE USE YOUR DATA
- To process and fulfil your orders
- To send order confirmations and shipping updates
- To send marketing emails (only with your consent — you can unsubscribe at any time)
- To improve our website and customer experience
- To comply with our legal obligations

LEGAL BASIS (UK GDPR)
We process your data under the following lawful bases: contract performance (order fulfilment), legitimate interests (fraud prevention, service improvement), and consent (marketing communications).

DATA SHARING
We share your data only with: our fulfilment partners (to ship your order), Shopify (our e-commerce platform), Klaviyo (email marketing), and payment processors. We never sell your data to third parties.

YOUR RIGHTS
Under UK GDPR, you have the right to: access your data, correct inaccurate data, request deletion, object to processing, and data portability. To exercise any right, email hello@lumavyn.co.uk.

COOKIES
We use essential cookies (required for the site to function), analytics cookies (to understand how visitors use our site), and marketing cookies (to show you relevant ads on Meta and TikTok). You can manage cookie preferences via the banner on your first visit.

DATA RETENTION
We retain order data for 7 years to comply with HMRC requirements. Marketing data is retained until you unsubscribe.