Privacy policy

PRIVACY POLICY

Applicable to: United Kingdom · United States · France Last updated: April 2026

1. Introduction

At Lumestreet, we take your privacy seriously. This Privacy Policy explains what personal information we collect when you visit lumestreet.com or place an order with us, how we use and protect that information, and what rights you have over your own data.

This policy applies to all information gathered through our website, order process, and any communications between you and our team — including emails and customer support interactions.

By using our website or completing a purchase, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Lumestreet is an international online retail store serving customers in the United Kingdom, the United States, and France.

  • Store name: Lumestreet
  • Website: lumestreet.com
  • Email: support@lumestreet.com
  • Phone: +44 20 7123 4567
  • Mailing Address: DEWBERRY IT ANALYTICS LLC, 825 Eastern Bypass, Richmond, KY 40475, United States

3. Information We Collect

We collect personal information in three ways: directly from you, automatically when you browse our website, and occasionally from trusted third parties.

Information You Provide to Us

  • Contact details — your name, email address, phone number, billing address, and delivery address
  • Payment information — card details and transaction data, processed securely by our payment providers. Lumestreet does not store your full card details at any point
  • Account information — your username, password, and account preferences if you register with us
  • Order and transaction history — items viewed, added to your cart, purchased, returned, or exchanged
  • Communications — any messages, queries, or feedback you send to our support team

Information Collected Automatically

When you visit lumestreet.com, certain data is collected automatically through cookies and similar tracking technologies:

  • Device and technical data — device type, browser, operating system, IP address, and unique identifiers
  • Browsing behaviour — pages visited, time spent on the site, click patterns, and navigation paths
  • Referral data — the source that directed you to our website, including search terms or external links

Information From Third Parties

We may receive supplementary information from our service providers, logistics partners, payment processors, and advertising platforms where this is necessary to operate our store and deliver our services.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

  • Order fulfilment — to process payments, dispatch orders, manage returns and exchanges, and keep you updated throughout the process
  • Account management — to maintain your account, authenticate your identity, and personalise your shopping experience
  • Customer support — to respond to your enquiries, resolve issues, and maintain our relationship with you
  • Marketing communications — to send you promotional emails or relevant advertisements, but only where you have opted in to receive such communications
  • Security and fraud prevention — to detect, investigate, and protect against fraudulent, abusive, or unauthorised activity
  • Legal compliance — to meet our obligations under applicable law, respond to legal requests, and enforce our Terms of Service

5. Sharing Your Information

Lumestreet does not sell, rent, or trade your personal information to third parties for their own use. We may share your data only in the following limited circumstances:

  • Service providers — companies that perform services on our behalf, such as payment processing, order fulfilment, shipping, IT support, cloud storage, and data analytics. These providers are contractually bound to handle your data securely and may not use it for independent purposes
  • Marketing and advertising partners — where you have consented to targeted marketing, relevant partners may process your data in accordance with their own privacy policies
  • At your direction — when you explicitly request or consent to sharing, such as when integrating with social media platforms
  • Business transfers — in connection with a merger, acquisition, or restructuring, where permitted by applicable law
  • Legal obligations — where we are required to disclose information by law, court order, or regulatory authority, or where necessary to protect our legal rights

6. Our Relationship with Shopify

Lumestreet is hosted on Shopify, a leading e-commerce platform. Shopify processes certain personal data in connection with the operation of our store, including data about your visits and transactions. This information may be stored or processed in countries other than where you reside.

For full details on how Shopify handles your data, please review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal at shopify.com/legal/privacy.

7. Cookies

We use cookies — small text files placed on your device — to help our website function correctly and to improve your experience. The types of cookies we use are:

  • Essential cookies — necessary for core website functionality, including your shopping cart and login session
  • Analytics cookies — help us understand how visitors use our site so we can improve it
  • Marketing cookies — used to deliver relevant advertisements and measure the performance of our campaigns

You can manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of our website.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. As a general guide:

  • Order records are kept for a minimum of 5 years for legal and accounting purposes
  • Marketing data is retained until you unsubscribe or request deletion
  • Customer support communications are stored for up to 2 years

When your data is no longer needed, it is securely deleted or anonymised.

9. Your Rights and Choices

Depending on your country of residence, you may have some or all of the rights listed below. We will respond to all valid requests in accordance with the timelines required under applicable law.

All Customers

  • Right to access — request a copy of the personal information we hold about you
  • Right to correction — ask us to correct any inaccurate or incomplete data
  • Right to deletion — request that we delete your personal information, subject to legal retention requirements
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to opt out of marketing — unsubscribe from promotional communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly. You will continue to receive transactional emails related to your orders

Additional Rights — United Kingdom

Customers based in the United Kingdom have the following additional rights under the UK GDPR and the Data Protection Act 2018:

  • Right to object — to processing of your data for direct marketing or other legitimate interest purposes
  • Right to restrict processing — to limit how we use your data in certain circumstances
  • Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To lodge a complaint with the UK data protection authority, please contact the Information Commissioner's Office (ICO) at ico.org.uk.

Additional Rights — United States

Customers based in the United States may have additional rights under applicable state laws, including the California Consumer Privacy Act (CCPA) and similar state-level legislation:

  • Right to know — what personal information is collected and how it is used
  • Right to opt out of sale — Lumestreet does not sell your personal data
  • Right to non-discrimination — exercising your privacy rights will not result in any difference in the service or pricing you receive
  • Global Privacy Control (GPC) — if you visit our website with the GPC signal enabled, we will treat this as an opt-out of targeted advertising for that browser and device

Consumer protection laws vary by state. Nothing in this policy limits any rights you may have under applicable federal or state law.

Additional Rights — France

Customers based in France have additional rights under the Règlement Général sur la Protection des Données (RGPD) and French data protection law as administered by the Commission Nationale de l'Informatique et des Libertés (CNIL):

  • Right to object — to processing based on legitimate interests or for direct marketing purposes
  • Right to restrict processing — in certain circumstances defined by the RGPD
  • Right to lodge a complaint — with the CNIL at cnil.fr if you believe your data has been processed unlawfully

To exercise any of the rights above, please contact us at support@lumestreet.com. We will not discriminate against you for exercising your privacy rights.

10. International Data Transfers

As an international retailer, your personal information may be transferred to and processed in countries other than your own. Where such transfers occur, we take steps to ensure appropriate safeguards are in place, including:

  • For transfers from the United Kingdom, we rely on UK adequacy regulations or equivalent transfer mechanisms such as the UK's International Data Transfer Agreement (IDTA)
  • For transfers from the European Union or France, we rely on the European Commission's Standard Contractual Clauses or other approved transfer mechanisms

11. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or disclosure. These include SSL encryption, secure payment processing via certified third-party providers, and restricted internal access to personal data.

While we take every reasonable precaution, no system is entirely immune to risk. We encourage you to avoid sharing sensitive information over unsecured channels and to keep your account credentials private.

12. Marketing Communications

We will only send you promotional emails or marketing messages if you have explicitly opted in to receive them. You may withdraw that consent at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at support@lumestreet.com.

 

13. Third-Party Links

Our website may contain links to external websites or platforms. Lumestreet is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party websites you visit. The presence of a link does not constitute an endorsement of that site or its operators.

14. Children's Privacy

Our website is not directed at children under the age of 16, and we do not knowingly collect personal information from anyone under that age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@lumestreet.com and we will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we do, the "Last updated" date at the top of this page will be revised accordingly. Continued use of our website after any update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, our team is available Monday to Friday and will respond within 3 to 5 business days.

  • Website: lumestreet.com
  • Email: support@lumestreet.com
  • Phone: +44 20 7123 4567
  • Mailing Address: DEWBERRY IT ANALYTICS LLC, 825 Eastern Bypass, Richmond, KY 40475, United States

Lumestreet — lumestreet.com — support@lumestreet.com