Privacy policy
Last updated: 3 September 2026
This Privacy Policy explains how Luma Living collects, uses, shares and protects your personal information when you visit lumaliving.net, place an order, or otherwise interact with us. It applies to everyone who uses our store.
For the purposes of the UK GDPR and the Data Protection Act 2018, Luma Living is the data controller of the personal information described here. Our business address is Tara, Strathaven, South Lanarkshire, ML10 6QF, United Kingdom, and you can contact us at lumalivinghome@gmail.com or through our Contact page.
Our store is hosted on Shopify, which processes personal information on our behalf in order to provide the store to you. Where there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy governs matters relating to personal information.
1. Information We Collect
Depending on how you interact with us, we may collect:
- Contact and delivery details — your name, email address, billing address, delivery address and phone number.
- Order and transaction information — the items you view, add to your basket or wishlist, purchase, return, exchange or cancel, order numbers, delivery status, and your order history.
- Payment information — payment method, transaction confirmations and the last four digits and expiry of a card. We do not receive or store your full card number or security code; these go directly to our payment providers.
- Account information — where you create an account, your login details, saved addresses, preferences and settings.
- Communications — the content of emails, contact form messages, reviews and customer service enquiries, including any photographs you send us in support of a return or claim.
- Device and technical information — IP address, device type, browser, operating system, language and unique identifiers.
- Usage information — pages viewed, products browsed, referring site, search terms used to find us, and how you move through the store, collected through cookies and similar technologies.
- Marketing preferences — whether you have subscribed to emails or SMS, and how you engage with them.
We collect this information directly from you, automatically as you use the store, from our service providers, and from advertising and analytics partners.
2. How and Why We Use Your Information, and Our Legal Basis
| Purpose | Legal basis |
|---|---|
| Taking, processing and fulfilling your order, arranging delivery, handling returns, refunds and exchanges, and providing customer support | Performance of our contract with you |
| Taking payment and preventing fraudulent or unauthorised transactions | Contract; legitimate interests in protecting our business; legal obligation |
| Creating and managing your account | Contract |
| Sending service messages such as order, dispatch and delivery notifications | Contract |
| Sending marketing emails or SMS about products and offers | Your consent, or our legitimate interests where you are an existing customer and we are marketing similar products (you can opt out at any time) |
| Online advertising, including showing you our products on other websites and social platforms, and measuring advertising performance | Your consent, given through our cookie banner where required |
| Analytics, site improvement, understanding what customers browse and buy, and improving our range and service | Legitimate interests; consent where cookies require it |
| Keeping records for accounting, tax and consumer law purposes, and responding to legal or regulatory requests | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms, and you may object at any time (see Section 7).
3. Who We Share Your Information With
We never sell your personal information. We share it only where necessary, with:
- The partners who prepare, pack and dispatch your order. Our range is dispatched from more than one location, so your name, delivery address, phone number, email address and the items you ordered are shared with the operational partners responsible for preparing and sending that particular item, so that it can reach you.
- Delivery carriers, who need your name, address, contact details and parcel information to deliver your order, notify you and handle any delivery issue or claim.
- Payment providers, who process your payment, verify it and handle refunds, chargebacks and fraud screening.
- Shopify, which hosts our store and provides the underlying commerce, checkout and administration platform.
- Technology and service providers that support us with email, customer support, reviews, analytics, hosting and IT.
- Advertising and analytics partners, including Google and social platforms, in connection with the advertising and measurement described in Section 5.
- Professional advisers, insurers, regulators and law enforcement, where we are legally required or permitted to do so, or to protect our rights, our customers or others.
- A buyer or successor, in the event of a merger, acquisition, restructuring or sale of our business or assets.
Everyone we share your information with is required to protect it, use it only for the purposes we specify, and comply with applicable data protection law.
4. International Transfers
Some of the partners and service providers described above operate outside the United Kingdom, so your personal information may be transferred to, stored in or accessed from countries outside the UK — including, where necessary to fulfil your order, countries outside the UK and European Economic Area.
Where we transfer personal information outside the UK, we make sure an appropriate safeguard is in place: a UK adequacy decision covering the destination country, the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, or another mechanism permitted by law. You can contact us for further information about the safeguards we use.
5. Cookies, Analytics & Advertising
We use cookies and similar technologies to make the store work, remember your basket and preferences, understand how the site is used, and measure and target advertising.
- Strictly necessary cookies keep the site secure and working — for example, remembering your basket and processing checkout. These cannot be switched off.
- Analytics cookies help us understand which pages and products people visit, so we can improve the store.
- Advertising cookies allow us and our partners — including Google Ads, Google Analytics and Google Merchant Center, and social advertising platforms — to show you our products on other websites and apps, to avoid showing you irrelevant ads, and to measure whether our advertising works.
Where required, we ask for your consent before setting non-essential cookies, and you can change your choices at any time through the cookie settings on our site or through your browser settings. Blocking some cookies may affect how the store works. Depending on where you live, you may also have the right to opt out of the sharing of your information for targeted advertising.
6. How Long We Keep Your Information
We keep personal information only as long as we need it:
- Order and transaction records: six years from the end of the relevant tax year, to meet accounting and tax obligations.
- Customer accounts: for as long as your account is active, and then for a reasonable period afterwards.
- Customer service correspondence: normally up to 24 months after the enquiry is closed, or longer where it relates to a claim.
- Marketing data: until you unsubscribe or withdraw consent, and then a minimal record so we can honour your opt-out.
- Cookie and analytics data: for the retention period set for each cookie, typically no more than 24 months.
When information is no longer needed, we delete it or anonymise it so it can no longer identify you.
7. Your Rights
Under UK data protection law you have the right to:
- Access the personal information we hold about you and receive a copy of it;
- Rectification — ask us to correct inaccurate or incomplete information;
- Erasure — ask us to delete your information in certain circumstances;
- Restriction — ask us to limit how we use your information;
- Object to processing based on our legitimate interests, and to object at any time to direct marketing;
- Data portability — receive certain information in a portable format, or ask us to transfer it to another controller;
- Withdraw consent at any time, where we rely on consent. This does not affect the lawfulness of processing before withdrawal;
- Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make such decisions about you.
To exercise any of these rights, email lumalivinghome@gmail.com. We will respond within one month, which we may extend by up to two further months for complex requests, and we will tell you if we do. We may need to verify your identity first. There is normally no charge. You may appoint someone to act on your behalf, but we will ask for proof of their authority. We will never treat you less favourably for exercising your rights.
You can unsubscribe from marketing emails at any time using the link in any email, or by contacting us. We may still send you service messages about orders you have placed.
8. Security
We use appropriate technical and organisational measures to protect your personal information, including encrypted connections, access controls, and payment processing by PCI-DSS compliant providers. No system is completely secure, however, and we cannot guarantee the security of information transmitted to us over the internet. Please do not send sensitive information such as full card details by email. If you have an account, keep your password confidential and do not share your login details.
9. Children
Our store is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Third-Party Sites
Our site may link to third-party websites and platforms. We are not responsible for their privacy practices or content, and we encourage you to read their privacy notices before providing them with your information.
11. Complaints
If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk
If you live in the EEA, you may instead complain to your local data protection supervisory authority.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the updated version here and change the “Last updated” date. Where changes are significant, we will provide additional notice as required by law.
13. Contact Us
Questions about this policy, or about how we handle your personal information? Email lumalivinghome@gmail.com or contact us through our Contact page.
Business address: Tara, Strathaven, South Lanarkshire, ML10 6QF, United Kingdom.