Last Updated: 12 March 2026

This Privacy Policy explains how LUMN LTD (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit or make a purchase from www.lumn.co.uk.

By using our website, you agree to the collection and use of information in accordance with this policy.

1. Company Information

This website is operated by:

LUMN LTD
71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom

Email: [email protected]

For the purposes of UK data protection law, LUMN LTD is the data controller responsible for your personal information.

2. Information We Collect

When you visit or interact with our website, we may collect the following types of personal data.

Personal Information You Provide

When you place an order or contact us, we may collect:

Full name
Billing address
Shipping address
Email address
Phone number
Payment information (processed securely by payment providers)

We do not store full payment card details.

Automatically Collected Information

When you browse our website, we may collect:

IP address
Browser type
Device information
Pages visited
Time spent on pages
Referring websites

This information helps us improve our website and user experience.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

improve website functionality
analyse website traffic
personalise user experience
support marketing and advertising

You can control cookies through your browser settings.

3. How We Use Your Information

We use your personal data to:

Process and fulfil your orders
Provide customer support
Send order confirmations and shipping updates
Improve our website and services
Prevent fraud and security risks
Send marketing emails (if you have opted in)

We only collect information necessary for these purposes.

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process personal data based on the following legal grounds:

Contractual necessity
To process and deliver your orders.

Legitimate interests
To improve our website, prevent fraud, and manage business operations.

Consent
For marketing communications and optional cookies.

Legal obligations
To comply with tax, accounting, and legal requirements.

5. Sharing Your Information

We may share your information with trusted third parties where necessary to operate our business.

These may include:

Payment processors

Stripe
PayPal

Delivery and shipping providers

Courier and postal services

Website and analytics providers

Google Analytics
Hosting providers

These providers only process your data for the services they provide to us.

We never sell your personal data.

6. Data Security

We take appropriate technical and organisational measures to protect your personal information.

These include:

Secure website encryption (SSL)
Restricted access to personal data
Secure payment processing
Regular security monitoring

However, no internet transmission is completely secure.

7. Data Retention

We retain personal data only as long as necessary for business and legal purposes.

For example:

Order information may be retained for up to 6 years for tax and accounting purposes.
Marketing data is retained until you unsubscribe.

8. Your Data Protection Rights

Under UK data protection law, you have the right to:

Access
Request a copy of the personal data we hold about you.

Correction
Request that inaccurate information is corrected.

Erasure
Request deletion of your personal data in certain circumstances.

Restriction
Request limited use of your personal data.

Data portability
Request transfer of your data to another service provider.

Withdraw consent
You can withdraw marketing consent at any time.

To exercise your rights, contact us at:

[email protected]

9. Marketing Communications

If you opt in to receive marketing emails, we may send you updates about:

new products
promotions
offers

You can unsubscribe at any time using the link in our emails.

10. Third-Party Links

Our website may contain links to other websites.

We are not responsible for the privacy practices of third-party websites.

11. Children’s Privacy

Our website is not intended for children under the age of 13.

We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will always be posted on this page with the revised Last Updated date.

13. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please contact us: