Privacy Notice

Working draft for the business to review with its legal adviser before launch. It reflects how this website actually processes data.

Who we are

Luminous Luxury is the controller of personal data collected through this website, under the UK General Data Protection Regulation and the Data Protection Act 2018.

What we collect

• Account details: your name, email address, telephone number and a securely hashed password (we never store the password itself).
• Order details: delivery addresses, the pieces you buy and your order history.
• Payment: processed entirely by Stripe. We receive confirmation of payment but never your card number.
• Preferences: your wishlist, recently viewed pieces and newsletter choice.
• Concierge conversations: messages you send to LUMI are processed to answer your request.

Why we use it

To fulfil your orders (contract), to keep your account secure and prevent fraud (legitimate interests), to send our newsletter where you have asked us to (consent), and to meet our legal and tax obligations.

Who we share it with

Only the service providers who help us run the boutique — payment processing, delivery couriers, email delivery, image hosting and AI processing for LUMI — each under contract and only for that purpose. We do not sell your data.

Cookies

We use strictly necessary cookies to keep you signed in, remember your shopping bag and protect the site. We do not use advertising cookies. Recently viewed pieces may be stored in your browser’s local storage.

Your rights

You may ask to access, correct, delete or export your data, object to processing or withdraw consent at any time. You may also complain to the Information Commissioner’s Office (ico.org.uk). To exercise your rights, contact Client Services.

Retention

Order records are kept for six years for tax purposes. Account data is kept while your account is active and deleted on request, subject to those obligations.