Privacy Policy

Last updated: 17 September 2026

This Privacy Policy explains how Lumiera Global LTD (“Lumiera”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit or use lumieraglobal.com, place an order, contact us, or otherwise use our services (the “Services”).

1. Who we are

Lumiera Global LTD operates this store. For the personal information described in this Privacy Policy, Lumiera Global LTD is the data controller except where another organisation acts as an independent controller and provides its own privacy information.

Lumiera Global LTD
71–75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom
Email: info@lumieraglobal.com

We process personal information in accordance with applicable UK data protection and privacy law, including the UK GDPR, the Data Protection Act 2018 as amended, and the Privacy and Electronic Communications Regulations where applicable.

2. Personal information we collect

Depending on how you interact with the Services, we may collect:

Identity and contact information, such as your name, email address, telephone number, billing address and shipping address.
Order and transaction information, such as products purchased, order history, payment status, refunds and fulfilment details. Payment card information is generally collected and processed directly by our payment providers; we may receive limited payment and transaction information.
Account and customer-service information, including account details, messages, enquiries, reviews and other communications with us.
Technical and usage information, such as IP address, device and browser information, cookie or similar identifiers, referring URLs, pages viewed, and interactions with our website.
Marketing preferences, including whether you have agreed to receive marketing and your communication preferences.
Security and fraud-prevention information used to protect customers, transactions and the Services.

We collect information directly from you and, where appropriate, from service providers involved in operating the store, processing payments, fulfilling and shipping orders, providing analytics, marketing, security and customer support.

3. How we use your information and our lawful bases

Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the purpose, we rely on one or more of the following:

Contract: to process orders and payments, arrange production and delivery, manage returns or refunds, provide customer service, and otherwise perform our contract with you or take steps you request before entering into a contract.
Legal obligation: to maintain records, meet tax, accounting and regulatory requirements, respond to lawful requests, and comply with applicable law.
Legitimate interests: to operate and improve our business and Services, provide customer support, secure our systems, prevent fraud and misuse, understand store performance, establish or defend legal claims, and manage our business relationships. We use this basis only where our interests are not overridden by your rights and interests.
Consent: where required, including for certain marketing communications and non-essential cookies or similar technologies. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

Where required by law, we will obtain consent before sending direct electronic marketing or placing non-essential cookies. You can unsubscribe from marketing at any time using the unsubscribe method provided in the message or by contacting us.

4. How we share personal information

We may share personal information only as reasonably necessary for the purposes described above, including with:

Shopify, which provides the commerce platform and related technology used to operate our store.
Payment providers and financial partners that process transactions, payments, refunds and fraud checks.
Manufacturing, print-on-demand, fulfilment and shipping partners that produce, pack and deliver orders.
Technology, hosting, security, analytics, customer-support, advertising and marketing service providers, subject to applicable consent and privacy requirements.
Professional advisers, such as accountants, lawyers, insurers and auditors, where necessary.
Authorities, courts or other third parties where disclosure is required by law, necessary to protect legal rights or prevent fraud, or connected with a lawful corporate transaction.

Some third parties may act as processors on our behalf and others may act as independent controllers for their own processing. Where another organisation is an independent controller, its own privacy notice applies to its processing.

5. Cookies and similar technologies

We and our service providers may use cookies, pixels, local storage and similar technologies. These technologies may be used for strictly necessary website functions, preferences and functionality, analytics, security, and advertising or personalisation.

Where UK law requires consent for non-essential cookies or similar technologies, we will request consent before using them. You can manage available choices through our cookie banner or privacy settings and through your browser settings. Disabling certain technologies may affect some features of the Services.

6. International transfers

Some of our service providers may process personal information outside the United Kingdom. Where UK rules on restricted transfers apply, we use an applicable lawful transfer mechanism, such as UK adequacy regulations, appropriate safeguards under UK data protection law (which may include the UK International Data Transfer Agreement or UK Addendum, where appropriate), or another legally permitted mechanism or exception.

You may contact us for more information about the safeguards relevant to your personal information.

7. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, security and dispute-resolution requirements. The exact period depends on the type of information and the reason we process it.

For example, transaction, accounting and related business records may generally be retained for up to six years or for a longer period where applicable law requires it. Customer-service records are kept for as long as needed to deal with the matter and relevant legal claims. Marketing preferences are retained while marketing remains relevant, and we may retain a minimal suppression record after an opt-out so that we can respect your choice. When information is no longer required, we delete or anonymise it where appropriate.

8. Your UK data protection rights

Subject to applicable law and any relevant exceptions, you may have the right to:

request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of personal information;
request restriction of processing;
receive certain information in a portable format and request its transfer where applicable;
object to processing based on legitimate interests;
object at any time to processing for direct marketing;
withdraw consent where processing is based on consent; and
exercise applicable rights relating to solely automated decisions that produce legal or similarly significant effects.

YOUR RIGHT TO OBJECT: You have the right to object to processing of your personal information where we rely on legitimate interests, in accordance with applicable law. You also have the right to object at any time to the use of your personal information for direct marketing.

To exercise a privacy right, contact info@lumieraglobal.com. We may need to verify your identity before completing a request. We will not discriminate against you for exercising a lawful privacy right.

If you live outside the UK, applicable local law may provide additional privacy rights.

9. Complaints

If you have concerns about how we use your personal information, please contact us at info@lumieraglobal.com so that we can review the matter.

You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO). Information about making a complaint is available at ico.org.uk.

10. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

11. Children

Our Services are not specifically directed at children, and we do not knowingly collect personal information from children in circumstances where parental or guardian consent is required by applicable law. If you believe a child has provided us with personal information improperly, please contact us.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, Services or legal obligations. We will post the updated version on this page and revise the “Last updated” date.