Last updated: June 2026
At Luxelo, we take your privacy seriously. This policy explains what personal information we collect, how we use it, and your rights under UK data protection law (UK GDPR).
1. Who We Are
Business Name: Luxelo
Website: www.luxelo.uk
Contact Email: office@luxelo.uk
Location: United Kingdom
We are the data controller for the personal information collected through this website.
2. What Information We Collect
We collect personal information when you:
- Place an order on our website
- Create an account
- Subscribe to our newsletter
- Contact us via email or our contact form
- Browse our website (automatically collected data)
The information we may collect includes:
- Your name and contact details (email address, phone number)
- Delivery and billing address
- Payment information (processed securely — we do not store card details)
- Order history and purchase details
- IP address, browser type, and device information
- Cookies and browsing behaviour on our site
3. How We Use Your Information
We use your personal information to:
- Process and fulfil your orders — including arranging delivery
- Send order confirmations and shipping updates
- Respond to your enquiries and provide customer support
- Send marketing emails — only if you have opted in
- Improve our website and shopping experience
- Comply with our legal obligations under UK law
- Prevent fraud and keep our website secure
We will never sell your personal data to third parties.
4. Legal Basis for Processing
Under UK GDPR, we process your data on the following legal grounds:
| Reason | Legal Basis |
|---|---|
| Processing your order | Performance of a contract |
| Sending order updates | Performance of a contract |
| Marketing emails | Your consent (opt-in) |
| Fraud prevention & security | Legitimate interests |
| Legal compliance | Legal obligation |
5. Who We Share Your Data With
We only share your data with trusted third parties who help us run our business:
- Payment processors — Stripe (to process your payment securely)
- Delivery partners — Royal Mail, Evri (to deliver your order)
- Email service providers — to send order confirmations and newsletters
- Website hosting — our hosting provider stores website data securely
- Analytics tools — Google Analytics (anonymised browsing data only)
All third parties are required to handle your data securely and in accordance with UK GDPR.
6. Cookies
Our website uses cookies to improve your experience. Cookies are small text files stored on your device.
We use:
- Essential cookies — required for the website and checkout to function
- Analytics cookies — to understand how visitors use our site (Google Analytics)
- Marketing cookies — only if you have given consent
You can manage or disable cookies at any time through your browser settings. Please note that disabling essential cookies may affect how the website functions.
7. How Long We Keep Your Data
We only keep your data for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Order records | 7 years (UK tax law requirement) |
| Customer accounts | Until you request deletion |
| Marketing preferences | Until you unsubscribe |
| Browsing / analytics data | 26 months (Google Analytics default |
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- ✅ Right to access — request a copy of the data we hold about you
- ✅ Right to rectification — ask us to correct inaccurate data
- ✅ Right to erasure — ask us to delete your data (“right to be forgotten”)
- ✅ Right to restrict processing — ask us to limit how we use your data
- ✅ Right to data portability — receive your data in a portable format
- ✅ Right to object — object to us processing your data for marketing
- ✅ Right to withdraw consent — unsubscribe from marketing at any time
To exercise any of these rights, contact us at office@luxelo.uk. We will respond within 30 days.
9. Marketing Communications
We will only send you marketing emails if you have explicitly opted in — for example, by subscribing to our newsletter.
Every marketing email includes an unsubscribe link. You can opt out at any time and we will remove you from our mailing list promptly.
10. Data Security
We take reasonable technical and organisational measures to protect your personal data, including:
- SSL encryption (HTTPS) across our entire website
- Secure payment processing via Stripe and PayPal — we never store your card details
- Regular backups and security monitoring
- Restricted access to personal data — only accessible to authorised personnel
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you read their privacy policies before providing any personal information.
12. Children’s Privacy
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
14. Contact Us & Complaints
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
📧 Email: office@luxelo.uk
🌐 Website: www.luxelo.uk
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
🏛️ ICO — UK Data Protection Authority
Website: www.ico.org.uk
Helpline: 0303 123 1113
© 2026 Luxelo. All rights reserved.